Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File: JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier: dD6MLZV4/n1IB4uQr2iawcBPz59INsympDROM+Rrkv4=
Subject key identifier: 46:67:A7:0A:49:14:64:FD:ED:73:AD:70:75:30:8D:C7:CE:A4:F2:8E
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer: /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial: 01A1751492A2515A5EAAA1E2478F92D0C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number: 1756
Signing time: Sun 25 Oct 2026 22:00:44 +0000
Manifest this update: Sun 25 Oct 2026 22:00:44 +0000
Manifest next update: Mon 26 Oct 2026 22:00:44 +0000
Files and hashes: 1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: YkTRIPJEZ0syrvi2een83TVJleBrTXPLF7/9AU7NN9o=)
2: UTiXqpOnXnL7SsApTxG7VdzoF_M.roa (hash: xvzfHxziNr26zYJwG+snS1syo+ysKboS5MzS0bjlx5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:92:a2:51:5a:5e:aa:a1:e2:47:8f:92:d0:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Validity
Not Before: Oct 25 22:00:44 2026 GMT
Not After : Oct 26 22:00:44 2026 GMT
Subject: CN=4667a70a491464fded73ad7075308dc7cea4f28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:e1:61:8b:b4:d8:25:8c:59:90:b6:49:b2:
86:9a:a4:c2:11:4b:f7:8e:45:fd:f9:e9:d0:fd:4b:
f0:a3:0e:18:0e:1a:7c:67:4d:e1:91:2f:ac:ae:94:
8a:41:ba:58:cf:3e:b7:7b:04:3e:6a:b4:96:f4:d3:
01:53:35:83:a1:ce:94:cc:34:d2:94:62:01:3a:39:
bf:25:75:39:d0:37:91:d4:e6:96:d8:56:07:2d:67:
64:69:54:ea:47:01:78:bb:7e:17:dc:1d:be:8a:f2:
2b:e2:9a:48:de:df:43:fa:0a:e6:ce:92:f7:28:9e:
37:fc:66:5d:17:08:ac:da:67:48:f0:fd:e1:a6:db:
88:b6:3d:f6:56:0b:5e:75:8f:23:f1:17:4d:c7:d6:
36:a5:34:30:88:73:83:11:cc:3f:5f:0a:c8:b4:6c:
c9:b7:93:ae:09:9a:b3:88:02:b0:db:74:0d:cc:2f:
6a:92:94:02:e8:f3:53:6a:e9:82:95:47:dc:69:c6:
9e:84:3d:dc:66:1b:02:bd:a3:e1:b8:d8:24:60:a0:
11:78:53:67:f5:a1:55:88:be:dc:3e:a6:ed:c4:18:
f0:de:a6:1a:1e:6a:e3:a4:ce:35:03:ff:f9:b9:ba:
2e:01:63:60:9f:02:b4:dd:75:7b:38:39:4a:12:fa:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:A7:0A:49:14:64:FD:ED:73:AD:70:75:30:8D:C7:CE:A4:F2:8E
X509v3 Authority Key Identifier:
keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:aa:72:aa:0f:77:4e:55:87:7e:19:ee:66:35:aa:c5:84:
1d:5c:8c:2b:25:45:53:a9:85:7a:96:b1:a0:be:bc:64:4a:71:
4e:4d:60:f5:79:24:9b:34:8c:aa:79:98:8c:3b:9f:a9:2c:3d:
d0:9d:16:88:d2:59:ac:4d:0f:06:6c:2a:c4:98:68:3b:a1:55:
5d:f4:1c:30:0f:ae:b6:4f:c2:28:9d:70:41:9d:d4:1d:cd:46:
89:62:4e:15:8f:ed:13:31:3c:ae:39:bb:bc:9d:2e:e3:03:a6:
0e:e5:b9:ef:49:a1:bd:88:8f:8b:ae:54:c7:24:5f:3a:64:7c:
16:c0:f8:33:9c:60:d4:d4:36:2e:ad:2e:23:35:f1:ab:26:7e:
f4:82:bf:27:44:ad:4e:85:7c:ca:9a:b2:4e:c8:9c:f5:4a:fe:
b1:c3:f2:5b:66:7d:7a:7b:12:75:da:7e:29:19:05:50:58:ad:
8f:f3:bf:cc:53:54:25:3d:e5:b4:b6:0b:e7:0c:6d:6f:da:82:
0c:dd:57:8b:7e:f0:ee:9a:93:f9:e7:05:a8:4f:d7:be:da:e3:
00:8b:9f:65:cc:88:51:86:4c:16:4c:1e:0e:68:e2:76:4f:d6:
cb:88:1d:1d:64:59:75:a9:de:7a:7b:14:ec:25:aa:a4:4a:2f:
e5:29:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:40:02 2026 by rpki-client