Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: xx480CA+9NzqnLw3W4KEzgttPBNxvMIsga9GF/FGJ1o=
Subject key identifier: A5:46:C4:C7:72:E2:30:F6:C6:5C:1A:04:C5:D3:B3:90:42:0A:33:F8
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019EB7A0D0FEAC8D6FF9CD4EB60052C66C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 0299
Signing time: Thu 11 Jun 2026 17:00:30 +0000
Manifest this update: Thu 11 Jun 2026 17:00:30 +0000
Manifest next update: Fri 12 Jun 2026 17:00:30 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: 1t0OJ3vKcI2R2ySf0o+iXpkkwztvU3TCCNswz1K1c3I=)
2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:d0:fe:ac:8d:6f:f9:cd:4e:b6:00:52:c6:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Jun 11 17:00:30 2026 GMT
Not After : Jun 12 17:00:30 2026 GMT
Subject: CN=a546c4c772e230f6c65c1a04c5d3b390420a33f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:f6:60:bc:16:bd:89:13:fc:21:a1:3c:71:
f0:44:e4:cb:33:bf:21:86:00:c5:aa:d4:89:11:1c:
7a:b2:0f:8f:8f:08:6f:ac:37:4b:cd:5a:a6:d7:a3:
24:83:ba:97:18:e9:0f:ac:9a:16:09:4d:c8:83:6c:
c8:77:3e:5a:d7:f7:a8:43:e1:ec:b4:ae:5c:1f:f2:
da:cf:77:53:44:91:6d:0e:a4:7d:84:ba:73:12:cd:
c7:bf:89:ca:5a:ac:85:ca:17:a5:d0:e0:be:41:48:
12:46:63:88:2f:ef:c5:a2:18:03:66:fb:5e:61:80:
cb:03:13:b3:3a:31:dd:d5:a9:a5:80:16:10:58:cd:
4c:33:7d:1e:16:1f:dc:b2:d8:44:2f:1a:60:23:95:
23:58:3b:c9:b5:39:b2:3a:67:08:5b:27:03:a4:cc:
c2:e6:47:95:2e:a0:43:54:bc:3f:cc:77:a9:1e:e1:
a8:6e:0c:00:94:1d:8d:29:c6:cf:38:5d:bd:b6:e7:
8b:3a:a3:52:1b:99:25:1d:e9:3d:06:b8:d1:0c:31:
49:0b:ab:34:9d:79:a2:c8:81:3c:91:b4:56:3a:01:
e7:cc:dd:ab:35:06:dd:f1:e2:39:5c:64:b6:30:d9:
83:fd:d3:ae:5f:6b:59:29:31:49:6b:2e:95:59:d8:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:C4:C7:72:E2:30:F6:C6:5C:1A:04:C5:D3:B3:90:42:0A:33:F8
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:75:30:6b:6b:37:cb:52:5a:fe:f6:b7:59:4c:3b:ef:47:
39:72:75:d2:2e:d1:7f:b9:6d:6c:20:05:cb:53:27:2b:41:dd:
98:4e:fa:b9:04:4c:80:b7:95:48:0e:5f:7a:ae:ae:f4:35:ae:
e3:83:41:35:7a:18:6a:74:10:d2:04:c0:c2:8c:84:85:47:76:
b2:c3:1c:39:f2:60:94:2c:c3:74:d8:5d:7a:98:2d:e9:1b:85:
f3:04:73:fa:57:b9:9e:2d:9f:44:a8:cf:bc:00:69:d5:23:c7:
3f:71:81:d7:40:e7:a0:33:44:88:96:ec:bc:5a:5d:69:01:2a:
00:42:ad:97:22:47:4e:ca:98:3b:ec:0a:d3:7d:a4:79:be:da:
df:3b:8c:54:09:a5:90:dd:dd:28:52:74:f6:33:48:03:43:f0:
6a:15:86:55:1a:7d:7e:8d:4c:0e:18:4e:9f:69:ab:c4:0d:f5:
00:63:e0:f7:08:1b:cd:dc:ce:05:0c:cf:27:aa:09:0e:bb:e4:
cd:8f:a9:f6:33:6e:eb:d6:9e:3f:77:0d:9b:b3:e9:50:76:72:
75:b9:2f:2d:35:3a:17:d7:97:17:72:9f:8d:fe:8c:ab:16:04:
82:90:fb:81:75:2b:c8:6a:b5:db:23:dd:68:17:96:40:92:4a:
a4:22:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:10 2026 by rpki-client