
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: 7rRpWEq9NijxT6rlTVVC212u2YHoLcsfcfaYy0PgVvA=
Subject key identifier: 40:FE:C1:F2:F4:77:93:1E:DF:48:03:AC:FA:47:6D:8A:09:86:A6:F6
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 01A0016FCD01B6FE7B18CA1F5547D295D38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 0857
Signing time: Fri 14 Aug 2026 18:01:39 +0000
Manifest this update: Fri 14 Aug 2026 18:01:39 +0000
Manifest next update: Sat 15 Aug 2026 18:01:39 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: m7P8qBD/pVhM7XktuSuoQG+ykUdDBvZrcrkwQEuE7b8=)
2: 3csJZekX_cLNjU2Men_fceOPKEA.asa (hash: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:cd:01:b6:fe:7b:18:ca:1f:55:47:d2:95:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Aug 14 18:01:39 2026 GMT
Not After : Aug 15 18:01:39 2026 GMT
Subject: CN=40fec1f2f477931edf4803acfa476d8a0986a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:d5:06:5d:5c:ef:34:5f:90:a2:89:75:23:
e9:b5:b9:79:3a:25:02:e1:b5:0a:03:3e:e1:14:a8:
2e:6d:ed:9a:5f:a3:6e:9e:29:ef:0d:01:33:28:41:
c5:8e:18:87:7d:cd:8c:e6:7c:9f:73:fb:b6:d2:18:
86:8f:db:fd:5b:f6:23:3d:b1:49:6b:6f:67:51:8b:
61:4f:02:7d:8a:0c:aa:a6:06:0e:8c:cd:f8:9d:55:
c0:f1:ab:d0:af:f6:df:8c:73:f0:fd:2a:e1:e9:18:
d0:5f:f5:d3:6c:6b:2c:77:0e:b2:3e:0e:3e:cd:58:
7c:78:a1:47:e8:0f:9a:03:db:9b:68:41:aa:73:72:
0e:26:17:d6:10:03:16:52:10:f4:3f:44:57:82:1d:
b9:13:41:91:ce:bc:0a:80:c0:6e:2f:02:10:e6:84:
f1:71:26:f3:4d:88:e1:ea:21:b4:a6:dc:5b:64:16:
38:03:54:3d:32:6d:ee:ff:69:ed:66:68:0c:92:c3:
dd:02:27:fb:97:b2:ee:40:fc:31:97:87:cc:3b:7c:
e3:96:9b:71:eb:0d:a5:6f:9f:ed:e9:36:d1:59:ba:
76:79:73:8c:fc:cc:2e:0a:81:e5:95:20:ed:54:7b:
da:c0:3b:27:83:e4:60:6e:cb:46:65:3e:1e:cb:99:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:C1:F2:F4:77:93:1E:DF:48:03:AC:FA:47:6D:8A:09:86:A6:F6
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:69:ba:b6:e1:66:b5:69:0f:76:b9:32:29:34:8b:63:16:8b:
c8:3e:4f:bc:e4:e3:c7:d9:cf:29:f7:8b:e6:dd:53:36:d0:96:
e2:1e:83:dd:9c:e7:ac:b6:22:5e:6e:9b:4f:db:f0:67:7c:65:
49:78:e8:e0:cf:d0:26:3c:b1:90:87:0f:43:b0:bc:45:28:86:
ba:a1:5b:3e:3c:56:63:ac:32:d6:f5:6f:12:85:5d:61:b7:47:
14:31:fe:ef:c9:3a:58:dd:61:33:97:fa:cb:7e:8f:de:bd:d3:
79:2f:6a:ac:f6:e0:eb:c2:ee:7d:ef:d7:03:e3:e2:d0:36:5d:
d1:dc:4c:90:9d:2c:7a:10:f3:e5:78:2e:64:97:5a:3d:41:81:
c6:e9:98:05:2b:19:c0:56:81:a8:90:62:8a:61:f7:ce:8a:77:
5d:bc:f7:92:25:4a:b0:f4:de:c2:1d:5c:8f:46:f1:5e:60:36:
ba:22:cb:97:60:29:29:d9:f7:43:5e:25:9a:79:21:8b:82:4a:
fc:50:35:60:0a:3c:84:cf:0e:bc:a9:9a:07:76:9b:ac:49:7e:
47:dc:02:28:b8:be:05:be:34:3a:82:fc:d8:a1:b4:a2:7d:d8:
e1:9c:ca:5a:dd:1f:a5:02:8b:46:74:31:b5:2b:41:0a:4d:f1:
2e:2c:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:08 2026 by rpki-client