Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: zahFioSUFI+8D2GoPmFDtw/thTNFoOrbZMUElGmE0SQ=
Subject key identifier: D6:76:D3:67:3D:74:60:08:C0:B9:CD:03:13:D7:96:AE:85:E3:0E:84
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019D37F77D3C00583BEDC26309F9B0E4A1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 01D2
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: sDTO2HTwivbPCilO4eCkLtaxCKu739rwrXG+H5K6NIM=)
2: 6e-FSaOiG0YmwQSP4zvNYIFuJkA.roa (hash: qxfS3larGXzhjEtCwiGdAe2kL2Cq8myApjZz1l7cLRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7d:3c:00:58:3b:ed:c2:63:09:f9:b0:e4:a1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=d676d3673d746008c0b9cd0313d796ae85e30e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:08:d5:0d:a9:04:d4:ed:bd:5c:c8:b7:9b:
01:0c:26:ee:87:4a:69:9f:42:77:e6:d3:3e:0c:cc:
a5:82:48:23:fe:06:5a:d5:85:1d:76:1f:b6:7b:2c:
bd:e8:45:82:7e:e6:e5:a3:f2:f8:f7:ff:db:4b:68:
77:c5:3e:f3:d6:f4:72:70:57:52:24:79:cd:5d:1a:
6b:cd:e0:7b:a0:5c:b5:1e:e6:1c:25:23:45:c2:f6:
c6:bf:00:68:b0:8c:9a:be:0c:5e:80:05:53:20:80:
33:af:e0:93:d0:e4:16:07:e6:09:e5:d5:ea:db:14:
a8:12:57:f8:67:ce:99:49:52:8f:76:b7:c4:46:b5:
b4:96:49:5d:8e:8e:e4:29:4f:e2:39:02:df:44:e5:
f8:8c:44:bc:9e:2d:87:42:52:0d:a0:90:55:e8:31:
49:fe:63:02:20:cd:a2:20:13:d1:5b:8e:c6:5f:da:
f4:c1:7c:39:be:d6:00:83:96:5d:bd:1b:1e:19:d2:
5c:e9:9f:74:80:79:02:a1:c6:80:61:fc:a8:96:b1:
f8:3e:11:71:b2:28:02:e1:89:16:86:a8:d8:8a:0b:
57:d8:9b:06:21:ec:d2:dc:14:16:eb:2a:9e:46:38:
46:20:ea:08:b8:e6:92:f6:42:5a:33:0e:9d:4e:57:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:D3:67:3D:74:60:08:C0:B9:CD:03:13:D7:96:AE:85:E3:0E:84
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1f:a9:6e:4d:a3:75:f9:44:73:c9:39:30:11:3c:85:f2:0a:
49:c4:37:03:dd:41:df:16:ff:53:fe:65:dc:79:6b:54:d8:dd:
0e:26:67:b3:81:38:6f:36:ca:10:6c:07:87:de:a1:2f:67:67:
a1:7d:f4:29:71:a3:e7:42:f4:dd:f0:e7:4d:ee:98:7b:f6:4b:
d0:6b:4b:d3:b8:10:92:f7:a4:c1:95:7c:4c:5b:45:f9:6b:db:
fe:d6:82:02:f3:ea:15:11:ab:d9:cf:24:04:07:dc:4a:37:a9:
a5:58:81:5f:27:3e:bc:84:8d:18:86:f6:6d:42:f5:c1:93:fd:
a5:69:86:9d:2f:ca:73:78:42:2b:0c:d4:ba:e6:e9:98:29:73:
21:1a:07:4d:3f:f0:19:2f:20:34:08:f8:9a:d3:37:bd:ee:2a:
13:e7:02:bb:39:08:85:fc:5f:cc:d5:4a:59:2c:96:e9:0c:fa:
f4:03:35:64:7f:1a:ff:37:17:c7:d0:1c:0a:c9:b3:ee:34:c6:
ca:d4:c5:78:06:b2:40:7d:51:b0:54:48:3b:54:5c:aa:be:07:
8b:3b:04:8d:fa:2f:0f:41:c7:62:a4:3e:b3:41:c3:50:88:d5:
ee:e9:97:f7:bc:e9:05:16:83:93:87:10:45:d3:06:83:f3:80:
6c:56:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:18 2026 by rpki-client