Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: 2okJod5TCsBRJIMKkETB4b8j65DfR9B8uOW+F4H4CMo=
Subject key identifier: 2A:BF:D8:86:F1:31:5E:DC:50:7F:27:58:63:88:37:0C:A3:61:76:09
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019F9F5F42B5810159FBA0316137D0E05046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 0311
Signing time: Sun 26 Jul 2026 17:00:47 +0000
Manifest this update: Sun 26 Jul 2026 17:00:47 +0000
Manifest next update: Mon 27 Jul 2026 17:00:47 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: ejVYDTEnTy3TYcwcbNX1vL5nFcfZfCfARr+8GwV8AQ8=)
2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:42:b5:81:01:59:fb:a0:31:61:37:d0:e0:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Jul 26 17:00:47 2026 GMT
Not After : Jul 27 17:00:47 2026 GMT
Subject: CN=2abfd886f1315edc507f27586388370ca3617609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:f0:e8:86:3d:69:2f:47:f0:3a:9a:39:ea:
c1:32:cd:58:b8:aa:2d:52:ea:c8:cf:d0:13:4c:c0:
0f:90:d3:2b:6a:8a:dd:62:39:f0:69:5d:9d:ef:89:
6b:d8:d9:0b:b2:14:f5:16:fd:a5:59:5b:e2:80:11:
6e:05:59:14:af:b2:75:62:77:e9:1d:66:b9:cd:51:
17:a0:a4:f7:0b:7f:e6:76:6e:a3:05:0a:4a:14:7b:
e2:22:57:25:54:ac:b6:7d:3d:66:55:bc:c9:1e:bf:
06:b7:b1:87:5b:01:fa:30:5f:bc:f7:e7:2a:57:19:
f0:a5:9f:5d:aa:93:7e:76:a5:ab:ce:f8:6a:65:b7:
78:cf:da:0e:7e:87:55:39:f1:7e:71:48:fe:bc:7a:
cd:67:46:c7:95:e3:09:b4:e4:b5:e7:8a:37:77:34:
b3:63:da:d6:46:53:44:c1:af:31:5f:cf:be:5f:f8:
e1:5e:33:da:7b:0f:8a:16:65:30:7f:b0:1d:45:66:
5b:c9:1c:86:9a:20:1e:b2:66:e3:82:5f:eb:8a:f9:
a2:06:51:11:d4:e9:9a:55:24:c2:52:2b:80:ad:af:
4d:9c:6d:10:df:f5:75:cc:71:6b:13:0b:db:fc:af:
1e:c0:15:c0:6e:94:53:e3:7d:bf:f1:bf:9f:0d:49:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:D8:86:F1:31:5E:DC:50:7F:27:58:63:88:37:0C:A3:61:76:09
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:5e:95:6e:93:d3:96:b1:19:7a:30:d0:0c:f8:49:56:31:
0b:b1:68:32:6e:3b:78:5c:78:44:37:2b:90:32:f0:4f:b2:db:
b9:f4:6d:5a:e2:40:ca:5e:cd:2c:b4:53:d7:fe:e0:17:30:7f:
68:e7:3b:6b:bd:9d:b8:10:b7:c4:12:10:31:d4:33:17:0b:72:
65:ed:4b:c9:4b:5d:bc:78:ec:c7:89:d8:de:b7:36:f8:04:15:
a9:95:90:86:69:3f:7f:6a:26:58:9a:64:42:60:70:a2:c4:25:
b7:df:2a:ef:d3:bb:af:41:cf:34:3e:cb:1c:24:07:0d:a1:5e:
72:7e:46:2a:a5:2b:44:a9:9e:17:c7:3f:96:72:aa:81:9b:0b:
2c:f8:e2:7c:ad:86:62:24:40:94:6a:64:41:ef:17:17:3a:b8:
43:2a:33:d6:cc:35:6a:2e:96:77:7f:90:36:09:75:c9:29:25:
28:fb:55:f3:16:a3:ae:58:ba:dc:38:e7:d6:2e:b3:0a:bc:59:
d0:40:d5:a1:2d:9a:43:bd:da:4e:f4:60:71:cc:cb:ef:6e:f2:
df:7e:30:2c:c4:ef:c2:ee:dd:44:ed:20:79:b8:cb:50:ce:4f:
4a:63:66:98:09:3b:ae:a2:11:d3:6e:55:19:33:66:d8:22:38:
8c:33:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:49 2026 by rpki-client