Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: wQaMY+RJZkB+7D/djdiGONea+Ijht9t4sjD83+kywBI=
Subject key identifier: 14:54:89:95:98:36:2A:4C:36:AD:CA:0A:40:7C:90:C8:25:AB:90:73
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019D37F73636D1E295C07ACE9019CEDA14DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 1001
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: UCfFtWVkucs59/ow6bpdeLsetawgeRdWHWnTaYUJP0g=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:36:36:d1:e2:95:c0:7a:ce:90:19:ce:da:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=1454899598362a4c36adca0a407c90c825ab9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:4b:51:10:f4:2b:c4:3d:fd:7d:ab:c1:a2:
ca:f4:e6:a8:19:a7:2a:5d:85:3f:6f:f0:52:07:21:
0a:17:4f:9c:85:85:65:19:03:7b:10:7e:f1:e2:e2:
05:38:45:34:9a:83:c7:6c:66:da:36:82:df:5e:f7:
0b:d6:34:52:f9:20:33:fe:bc:dd:38:c1:b9:8d:53:
a1:d3:6f:cc:6b:75:b7:2d:5b:04:57:28:28:d9:1c:
e0:bd:bf:37:b5:68:24:3b:a9:3a:93:09:20:f2:19:
37:ca:a3:a4:a7:6c:27:ed:5d:ff:16:49:f7:02:f7:
8f:e4:53:7d:b9:f2:7a:55:1b:58:d5:d0:10:23:68:
de:f2:9d:0d:52:45:69:0a:64:65:66:ad:f6:d5:45:
a0:9a:8b:de:75:1e:00:52:0d:52:ae:34:0d:ed:fc:
97:3b:18:ae:ce:71:04:75:d9:c5:57:6b:1c:3f:1d:
5e:67:53:ce:c1:dd:08:07:04:d1:af:fd:40:94:21:
e9:ec:1e:97:79:5f:d7:67:35:63:b8:20:b9:ba:d0:
bf:90:50:d1:0b:b0:a0:92:43:07:d7:19:03:cf:36:
28:87:d1:e8:94:10:0d:7b:3c:1e:6a:86:f8:fd:38:
c9:5f:f7:1d:a5:d6:1c:1b:94:6f:a3:e8:3d:68:62:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:54:89:95:98:36:2A:4C:36:AD:CA:0A:40:7C:90:C8:25:AB:90:73
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f4:f8:88:75:6a:8f:e8:db:27:31:4c:2c:c2:d0:d7:be:5f:
94:90:f0:e9:df:1c:b5:e8:71:3c:c9:a3:31:c3:6b:2f:99:de:
ba:52:2f:88:63:a3:0f:e6:58:e4:f8:6a:4e:e7:95:06:d4:ed:
5c:74:e9:df:86:b1:80:4c:f5:95:5a:c7:d7:4f:50:91:1a:36:
34:6e:c2:3f:04:ac:7c:36:f9:f9:29:ec:2c:25:65:fe:22:4a:
5f:87:31:0e:3c:3b:68:41:d1:22:5b:24:52:4d:ae:ef:5e:6b:
28:12:38:cb:d9:ee:e4:24:fc:b9:fb:22:c8:5e:d1:20:99:07:
ee:56:d3:b0:4c:27:ce:04:e8:10:90:0b:41:c4:72:7e:2f:50:
47:e9:5f:5e:0a:f5:c3:9a:48:15:67:90:96:e9:1e:40:55:62:
42:9c:71:20:e7:2b:63:c0:2e:9b:c9:12:74:54:47:0f:32:84:
21:e6:af:54:42:e2:cb:a1:ea:3a:02:3b:c9:be:d5:f7:70:9f:
9b:90:f6:d7:c1:4b:90:4c:44:e8:30:19:a5:ac:bd:00:c2:d3:
78:b1:c1:82:9d:7d:99:19:27:98:74:e1:28:4d:a9:2d:56:12:
20:13:2d:4b:7d:77:76:80:d2:02:0b:c5:f2:9d:bf:f1:cb:b9:
9c:6a:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:01 2026 by rpki-client