Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
File: bQih9MOF86e2KYTVPoFmWplUEPM.mft (raw, json)
Hash identifier: ONw0NjxE2SkyR0lVird9ymG2GByvIyjzIkxZYFMlL30=
Subject key identifier: 7A:AC:CC:DE:C7:42:0D:B8:10:55:F3:EC:9D:BD:4F:98:43:5B:D8:1D
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial: 019D389C5A3F3D2D7C30A9DBFAC5CDA0EFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
Manifest number: 0C8F
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: ALmp9QVk21GznNgt6Dz8ZcrWqhg.roa (hash: O+KLwwhLgCZOa9Dra8cvY4Q3raXGnTT+rDZassQxMZs=)
2: bQih9MOF86e2KYTVPoFmWplUEPM.crl (hash: 0EjpdarIWh7Ntg6jl/+hGSHzNWhdF3WZ1Rh6+FiICF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5a:3f:3d:2d:7c:30:a9:db:fa:c5:cd:a0:ef:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=7aacccdec7420db81055f3ec9dbd4f98435bd81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:2e:36:97:cc:73:37:fa:a9:09:79:bd:c1:
6e:cd:6a:64:e0:fc:e6:f5:f3:59:a1:a3:9d:c3:0a:
2c:7c:68:8b:8c:a1:15:f8:f8:17:c3:ef:75:bb:53:
a4:71:a7:4e:18:e1:b6:20:21:ec:26:56:9c:c3:ed:
25:43:bb:dc:03:23:f1:a4:f3:21:38:4f:f6:5d:4e:
cd:23:bb:5b:8a:46:49:6f:97:24:b9:b1:1c:2d:9d:
6e:ac:24:13:0c:68:17:6c:85:e0:b7:34:a1:b9:74:
93:ed:60:c1:24:06:f6:56:f3:7a:29:d0:0b:ce:23:
5e:ac:46:d2:06:0e:73:68:68:b7:4e:eb:96:a4:f1:
5e:24:1d:75:37:12:db:83:ca:7b:1f:3a:4e:c1:30:
5e:9e:84:9d:7e:5e:15:15:c6:e7:42:8c:13:9d:3e:
0c:dd:a2:6b:ed:d2:bd:d8:b2:f9:a7:48:c0:4c:33:
27:07:0c:e4:7d:bb:8b:9b:86:ee:e9:af:8e:06:ae:
14:0a:1e:4b:78:c5:34:53:61:26:09:c9:8e:5c:e8:
f3:c0:48:09:e2:1f:63:24:f1:da:c1:c4:ae:1e:34:
82:e8:b5:08:48:5d:a2:31:1d:75:70:de:d3:f2:3f:
f3:af:95:d9:97:d5:0f:c1:17:88:db:fb:3e:59:f7:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AC:CC:DE:C7:42:0D:B8:10:55:F3:EC:9D:BD:4F:98:43:5B:D8:1D
X509v3 Authority Key Identifier:
keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:30:67:0a:81:a0:e2:53:ff:5c:56:cc:11:41:40:f7:eb:be:
40:d5:09:08:a7:8d:8f:6f:67:c9:85:d0:d7:fe:ec:9e:4c:8e:
4a:6e:de:76:4f:99:a5:5c:31:42:9b:d0:29:88:ea:72:96:76:
32:ef:cd:f7:da:87:c4:60:7c:4e:e1:fb:5c:e9:f2:7c:b9:15:
13:8d:eb:92:dd:9d:1e:fe:1e:4f:2c:dc:71:1b:97:76:80:22:
2d:0c:b2:1c:8a:88:0c:86:a9:61:df:4c:59:52:00:e3:9c:15:
c4:ed:1e:63:a9:e4:ed:00:dd:ac:ad:1e:61:e0:fb:63:a9:90:
34:64:0f:18:3f:a4:18:d9:a8:6f:be:f8:11:42:88:95:24:2e:
50:50:90:b1:97:fe:55:7a:e6:25:27:27:a2:f0:65:bd:19:21:
a2:61:07:00:ff:a7:e3:9f:9a:f6:cd:5f:03:87:50:dc:b2:ab:
c9:1d:bc:57:41:0c:03:47:09:1d:5e:2c:bd:2b:4d:ea:18:56:
62:69:9b:2b:30:5b:8c:55:b7:91:dc:3b:67:33:72:ca:11:87:
bd:7d:03:9b:d1:9d:b3:7e:b6:7f:a5:9b:4c:c7:61:f7:f5:58:
0e:bf:6a:23:8b:56:50:f0:29:ac:b0:9e:2e:da:a7:7c:82:a3:
16:db:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:36 2026 by rpki-client