Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: oe+Qpar/wJqIAZ+HAvl+nLao8oAgmbXoZzRGykf+vmQ=
Subject key identifier: 52:F5:DC:CB:2A:1F:E3:09:59:B4:C0:F4:15:48:A8:B5:DC:2E:60:46
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019EB5B2940E76CA15DC69257302052B8E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 0298
Signing time: Thu 11 Jun 2026 08:00:39 +0000
Manifest this update: Thu 11 Jun 2026 08:00:39 +0000
Manifest next update: Fri 12 Jun 2026 08:00:39 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: K1M+0enM9LOZukQrvDZhjA7eBdYvMd5+OyRBWsX27io=)
2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:94:0e:76:ca:15:dc:69:25:73:02:05:2b:8e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Jun 11 08:00:39 2026 GMT
Not After : Jun 12 08:00:39 2026 GMT
Subject: CN=52f5dccb2a1fe30959b4c0f41548a8b5dc2e6046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:b0:c3:25:b2:32:36:1d:9c:aa:73:82:db:
83:28:14:0d:01:9d:49:56:58:82:79:22:51:7d:24:
1e:1b:89:8f:31:40:ec:35:18:46:30:43:f3:5d:9a:
dd:38:49:75:84:2b:40:6a:1d:f8:ce:63:7c:38:d6:
23:09:14:47:18:b3:14:39:00:f3:a0:8c:71:ab:6e:
3d:66:cf:eb:a4:14:14:4c:94:87:86:40:19:1b:7f:
57:30:f3:c4:82:d1:3c:a8:68:90:8a:cd:01:dd:d6:
e1:7b:a8:79:ad:b8:78:f5:19:96:2d:ed:45:d2:0a:
9b:c5:ac:b5:ee:ea:6d:4c:42:55:19:e1:a8:e0:45:
fe:b4:eb:de:fb:38:f3:d7:0c:0e:7f:7b:24:eb:2d:
aa:49:a9:3e:38:ae:ba:80:f9:98:ee:3b:81:c7:9f:
91:45:52:79:a3:0f:13:bd:f0:75:6a:0c:70:a6:51:
ce:2d:e9:98:fd:e9:5b:7a:63:02:5d:05:92:eb:7c:
ac:bc:7a:66:15:4e:de:bc:2e:db:32:69:a9:aa:22:
92:98:7a:3c:69:e3:9f:0a:11:48:c0:45:8d:ff:6a:
7a:ae:9b:b6:04:04:b7:2e:7c:af:b7:91:cf:73:36:
62:6f:01:05:a5:f8:4a:1d:66:c3:2a:8a:29:51:86:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:DC:CB:2A:1F:E3:09:59:B4:C0:F4:15:48:A8:B5:DC:2E:60:46
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:e7:24:c1:40:1a:bb:dd:80:0c:af:f4:5e:d9:d3:d3:e0:
95:66:72:c4:ad:25:70:18:06:d4:c4:47:7d:2c:73:33:26:a6:
21:69:25:72:da:ca:c0:47:14:1c:46:4e:ff:be:ef:ba:3c:5d:
a7:96:03:36:2f:99:86:35:b4:a6:8c:28:a3:6b:41:93:b0:14:
c3:19:95:cb:97:2c:4e:86:ea:21:c5:22:54:6c:e7:2d:95:ca:
8f:44:f6:d0:f7:a1:86:0d:c0:ba:00:ce:38:d2:fe:67:a2:1c:
83:4e:d3:ab:17:7b:b4:9f:48:3f:21:9e:87:5f:4c:a1:0f:f6:
fe:30:cb:04:a0:5b:57:53:bc:13:74:18:1f:c5:12:39:dd:99:
3e:cd:f2:25:f8:88:4e:08:57:9c:a2:35:f5:d3:e5:7b:8c:ed:
50:b0:cf:37:a7:a6:c0:6a:ae:79:9d:39:e9:e5:70:8f:89:07:
bc:78:11:bf:ab:b7:ed:9a:f9:55:1a:09:72:d5:4b:b4:8c:db:
8f:65:47:25:d6:4c:4f:34:d3:b4:c1:80:88:0b:81:4c:20:ae:
f3:44:de:35:83:7f:55:8b:0e:6e:1a:95:ea:28:de:6f:aa:4a:
0a:48:6e:41:4b:4b:1c:3a:0f:ca:cb:66:e8:f0:15:8e:67:ae:
21:6a:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:51 2026 by rpki-client