Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: Ia+4vzsA94+XKqROLmKF4+YQYHExGss7Kfsn1XW1Qhc=
Subject key identifier: 5D:F7:A7:DC:84:BB:30:87:80:52:01:AA:07:44:51:E3:FD:38:CB:45
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 019D37F7339305C58C9A9CF977D8AA6F94CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0BDB
Signing time: Sun 29 Mar 2026 05:00:40 +0000
Manifest this update: Sun 29 Mar 2026 05:00:40 +0000
Manifest next update: Mon 30 Mar 2026 05:00:40 +0000
Files and hashes: 1: WKluDkXLbOUe3fiyMU_sfUku4Zk.roa (hash: g8pqi7RglCM3KJkQHe8MWM6i4Vof+uHKV1U9w7O5DtE=)
2: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: iZyjQ4hQC506eCqKsQ9+NSmZs0fr0C1TFkMNKkvc9KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:33:93:05:c5:8c:9a:9c:f9:77:d8:aa:6f:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Mar 29 05:00:40 2026 GMT
Not After : Mar 30 05:00:40 2026 GMT
Subject: CN=5df7a7dc84bb3087805201aa074451e3fd38cb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:eb:df:a5:7a:57:2e:66:61:00:30:b4:e8:
36:06:ac:8e:72:d9:16:4b:b2:92:7d:2a:c0:82:d4:
6e:f2:65:c9:18:33:31:cc:bd:f5:13:10:9d:b1:48:
29:45:cf:e9:76:30:93:fb:3d:0a:68:2b:80:db:1e:
de:25:3b:2c:08:db:c2:64:7c:b7:35:79:fc:4c:13:
35:f9:4e:a2:ff:a4:42:6f:b8:bc:c3:a1:75:ff:29:
62:e7:cd:28:0a:23:c7:53:be:47:fa:d6:92:32:68:
90:58:48:6b:5f:e9:1a:ff:9d:19:ca:0c:7b:5e:a0:
ba:ed:9b:c3:43:54:61:b5:0f:c5:5f:39:36:6a:a5:
59:6d:77:fa:03:f8:5d:e9:cc:f2:fb:4d:31:c1:4a:
dd:b5:80:86:b4:dc:93:97:50:1c:7a:d6:b7:fb:da:
ed:7e:8d:ef:ad:fb:c9:ad:4f:25:dc:7b:24:6d:6d:
04:58:e9:09:e1:b6:ff:d3:a7:78:33:32:d7:d2:c1:
4f:27:91:4f:dc:29:30:df:46:43:b9:82:45:bc:02:
b5:8e:ac:4c:0d:a2:68:d8:47:35:f8:ec:63:95:c9:
f4:c0:01:0b:60:8d:27:1f:56:19:ac:b6:79:8e:98:
07:29:84:b0:5d:e6:02:59:88:a9:4e:c5:78:cf:ea:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:A7:DC:84:BB:30:87:80:52:01:AA:07:44:51:E3:FD:38:CB:45
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8d:f7:e4:f2:61:47:cb:f5:8d:44:eb:8e:73:9c:af:e9:17:
87:e5:07:56:aa:66:09:0c:58:17:53:49:99:d9:a7:b4:da:b8:
3f:b3:b8:a6:79:1d:d6:40:4e:a6:55:91:69:d5:2d:d6:70:cf:
28:4c:d7:46:9c:c3:19:77:5a:67:67:2c:3f:16:de:ae:29:54:
bf:5c:a6:bb:0a:a4:1c:d8:8b:01:e0:89:62:67:41:2a:69:b7:
39:03:fc:07:59:ff:d8:46:73:bd:d5:17:80:89:2d:04:b2:21:
c2:eb:c6:d5:b7:91:68:da:31:67:49:7f:96:b1:a1:6b:c7:36:
bd:6a:fb:37:50:7e:43:a1:1e:79:a8:2b:d2:f8:4d:a4:e4:a7:
ec:15:5c:41:51:33:9b:e9:3f:08:62:c3:cb:03:89:0c:5e:cd:
56:b2:92:6c:d7:7e:c0:7a:98:c0:a0:0c:37:15:a5:31:0e:9b:
ce:69:bf:e9:37:7d:47:b1:4a:5c:9b:38:5e:98:a9:95:45:a8:
32:9a:1b:a7:ac:3b:e1:58:39:e1:d4:24:d8:89:46:44:97:ec:
fa:f2:24:65:1d:75:ed:d3:df:ee:3d:d8:3e:aa:70:4a:0f:95:
97:52:b7:0f:52:2e:ce:5c:f3:f5:87:da:16:c3:bb:e2:c1:0a:
b3:2b:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:01 2026 by rpki-client