Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: fCv6BLPCjlD5cOdO9c6AwUmXLE6FcK4/QbSqOyq+aAk=
Subject key identifier: BF:56:8D:51:66:87:B5:3B:40:DA:2A:A5:40:5D:D6:7F:C2:37:36:50
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 019CC9ACCBEA5B44E2E2F92B9D536EAB570B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 14EB
Signing time: Sat 07 Mar 2026 19:01:10 +0000
Manifest this update: Sat 07 Mar 2026 19:01:10 +0000
Manifest next update: Sun 08 Mar 2026 19:01:10 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: 6ywOf0h6asmvLcepaXPb/L0OTBxF1BkBpcC+POdvRTs=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:cb:ea:5b:44:e2:e2:f9:2b:9d:53:6e:ab:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Mar 7 19:01:10 2026 GMT
Not After : Mar 8 19:01:10 2026 GMT
Subject: CN=bf568d516687b53b40da2aa5405dd67fc2373650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:90:b9:aa:b3:4a:4d:ef:8c:3b:c0:c7:3f:
9f:01:9a:87:77:ee:ea:8c:94:de:60:8e:89:7b:d4:
12:1d:5e:ef:a1:52:fd:55:cc:77:5b:f7:c5:e3:3a:
b0:d3:87:69:c7:15:02:62:44:79:4d:03:32:98:76:
75:62:4a:ee:32:71:14:7f:8f:2d:64:ba:46:2a:f8:
32:5a:cb:ce:f2:58:73:ed:9d:82:fc:c3:3a:84:24:
02:59:24:2d:9a:ac:c3:e3:3e:f0:df:50:3c:d3:6f:
bf:4b:81:ab:a6:6d:05:5f:3c:96:4f:0d:41:49:b1:
83:ff:1c:70:cd:e7:c4:b6:d8:0c:a8:53:a7:c9:f1:
30:d6:62:3b:d2:13:97:ea:18:a6:c5:1f:ad:ee:c5:
04:94:5e:06:6b:14:f8:c1:e2:18:a5:cd:6c:80:72:
ad:fa:23:85:de:10:3d:ad:69:d2:be:68:e4:43:81:
10:6f:a5:92:13:e2:80:2f:ab:4c:10:95:e2:66:1b:
2e:7e:cf:65:d2:9b:08:79:4d:a8:a1:74:94:3a:78:
56:7e:14:fc:d9:7f:06:99:29:1a:a8:9b:46:ff:42:
fa:44:a3:50:77:f3:bd:88:73:87:5b:f5:94:4b:f9:
71:41:96:29:35:af:72:69:07:19:fc:c3:43:9c:fb:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:8D:51:66:87:B5:3B:40:DA:2A:A5:40:5D:D6:7F:C2:37:36:50
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:50:9d:3b:cc:b2:94:69:0c:2f:06:1f:dc:e3:ca:07:b4:
b6:11:5e:e2:6e:a8:e5:8a:94:eb:c4:3a:52:95:8d:5d:dd:47:
26:59:cf:e3:94:0c:ff:0f:10:83:50:6d:ba:12:b1:2f:a2:ce:
bc:1d:99:c7:63:dc:e5:77:e5:71:8a:95:f3:07:e3:e5:56:d2:
16:15:6a:bf:d6:47:d8:24:e5:ae:bc:cf:11:03:86:4f:0f:d5:
11:e7:bc:8c:09:d5:a8:20:8e:e7:4a:30:a6:40:63:b2:e0:6f:
71:4a:b1:c7:1b:3b:d2:8d:e6:68:30:25:e8:11:19:fd:0e:92:
29:26:bc:cc:2e:7c:eb:51:28:f9:fe:49:1a:6d:94:2d:9e:75:
24:43:81:ce:d8:67:b7:0d:32:c2:eb:8f:86:ae:11:04:f3:6f:
e1:e9:42:a4:bb:3d:59:f3:af:b5:55:6f:92:59:f6:b8:4a:ca:
38:8e:4f:1a:c8:4c:69:fa:41:bb:67:5d:82:cc:c2:e2:25:0e:
b3:65:6d:4d:81:bd:4b:22:07:d7:13:25:7f:82:da:f7:98:bb:
b8:6c:38:ef:33:6c:97:ca:2e:66:df:24:61:d4:b5:57:c6:c4:
98:2b:dd:4f:c7:04:1b:b8:64:1b:62:59:65:e7:8b:9b:ae:0d:
a9:8f:8f:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJrMvqW0Ti4vkrnVNuq1cLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjZjMTM4YWZhNDJhN2Q2NWNjNzc2MWFjNGYxODY4MzY2
ZmE3ZTMwHhcNMjYwMzA3MTkwMTEwWhcNMjYwMzA4MTkwMTEwWjAzMTEwLwYDVQQD
EyhiZjU2OGQ1MTY2ODdiNTNiNDBkYTJhYTU0MDVkZDY3ZmMyMzczNjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxluQuaqzSk3vjDvAxz+fAZqHd+7q
jJTeYI6Je9QSHV7voVL9Vcx3W/fF4zqw04dpxxUCYkR5TQMymHZ1YkruMnEUf48t
ZLpGKvgyWsvO8lhz7Z2C/MM6hCQCWSQtmqzD4z7w31A802+/S4Grpm0FXzyWTw1B
SbGD/xxwzefEttgMqFOnyfEw1mI70hOX6himxR+t7sUElF4GaxT4weIYpc1sgHKt
+iOF3hA9rWnSvmjkQ4EQb6WSE+KAL6tMEJXiZhsufs9l0psIeU2ooXSUOnhWfhT8
2X8GmSkaqJtG/0L6RKNQd/O9iHOHW/WUS/lxQZYpNa9yaQcZ/MNDnPvlOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9WjVFmh7U7QNoqpUBd1n/CNzZQMB8GA1UdIwQY
MBaAFCUmwTivpCp9Zcx3YaxPGGg2b6fjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQt
YjA2MjI4ZmNmMmMxLzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84ODZmMDMtZGM5MS00YTc0LWIwMzQtYjA2MjI4ZmNmMmMx
LzEvSlNiQk9LLWtLbjFsekhkaHJFOFlhRFp2cC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlhQnTvM
spRpDC8GH9zjyge0thFe4m6o5YqU68Q6UpWNXd1HJlnP45QM/w8Qg1BtuhKxL6LO
vB2Zx2Pc5XflcYqV8wfj5VbSFhVqv9ZH2CTlrrzPEQOGTw/VEee8jAnVqCCO50ow
pkBjsuBvcUqxxxs70o3maDAl6BEZ/Q6SKSa8zC5861Eo+f5JGm2ULZ51JEOBzthn
tw0ywuuPhq4RBPNv4elCpLs9WfOvtVVvkln2uErKOI5PGshMafpBu2ddgszC4iUO
s2VtTYG9SyIH1xMlf4La95i7uGw47zNsl8ouZt8kYdS1V8bEmCvdT8cEG7hkG2JZ
ZeeLm64NqY+P0w==
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:30:05 2026 by rpki-client