
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: YHYp6/cB3OOvPGS8CHVPrhlyV15vPr64A32KAG3GggI=
Subject key identifier: DB:C8:EE:2E:66:16:C2:99:3C:24:44:AF:79:BD:DC:27:A2:C5:58:32
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01A0016FBC1AD80CB6EE43F6803A778F75EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0CF3
Signing time: Fri 14 Aug 2026 18:01:34 +0000
Manifest this update: Fri 14 Aug 2026 18:01:34 +0000
Manifest next update: Sat 15 Aug 2026 18:01:34 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: 71JQ2KrvZFv28SzxFifa+3O6LkjXLZatuj3kmfGU8Bc=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:bc:1a:d8:0c:b6:ee:43:f6:80:3a:77:8f:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Aug 14 18:01:34 2026 GMT
Not After : Aug 15 18:01:34 2026 GMT
Subject: CN=dbc8ee2e6616c2993c2444af79bddc27a2c55832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:75:1e:d1:ef:b2:f0:75:8f:35:91:7f:13:
4b:06:ee:bd:a3:c2:23:67:db:02:57:b0:d4:9b:0e:
a7:b5:29:e1:98:8f:07:20:98:cc:b7:6a:ee:10:2e:
89:fe:46:2a:0b:4a:7e:51:49:f7:32:32:2f:ca:56:
e8:02:ec:c1:66:e2:04:b2:b5:da:43:27:73:4d:32:
bb:28:a9:3a:46:59:b6:6b:80:eb:fa:1c:28:d3:fd:
a8:12:45:58:39:20:72:60:c5:a8:9a:f4:52:ae:60:
05:9e:ca:2f:80:41:c0:56:1a:20:e2:28:38:9b:d3:
51:bf:73:de:91:52:d9:6f:0b:69:cf:51:9c:4f:23:
12:57:65:23:a8:b3:58:31:ab:30:63:7c:fb:a2:8e:
e3:1d:4b:c6:6a:fa:46:ef:99:c3:59:30:30:c9:55:
9a:fc:60:dd:20:2e:f3:4d:20:b5:f2:7c:c6:71:4b:
3f:a3:1d:1e:ce:f2:6a:41:33:d9:96:2d:18:7c:84:
e4:8a:25:4e:e4:b4:14:40:ad:f5:72:b8:3a:16:3a:
9b:5a:89:f6:d3:85:dd:04:31:87:be:73:31:6b:c7:
67:30:08:81:35:a3:56:0c:d5:2f:cb:c6:16:f4:72:
f6:91:6c:54:32:a2:ce:4c:9f:0b:85:4f:8d:56:3b:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C8:EE:2E:66:16:C2:99:3C:24:44:AF:79:BD:DC:27:A2:C5:58:32
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e2:c8:1f:e9:7e:37:e8:79:ca:d6:55:fc:4c:98:d4:02:16:
00:d4:bf:3d:d4:d3:38:2d:f6:bc:3b:4a:f9:c5:e0:c9:83:b7:
06:a0:88:62:54:7e:dc:c7:a5:af:b0:6d:73:e9:a3:40:9b:5b:
61:8d:a3:38:fc:21:31:71:ca:20:74:d2:0f:c7:b2:52:ed:9b:
df:8b:28:ad:f6:2a:93:4a:f1:12:0d:e0:1c:05:5d:0a:3d:2c:
93:ca:20:7e:ad:e8:5a:96:80:b2:e4:3f:0c:78:f1:87:9b:12:
3f:ea:ac:0c:9e:8d:4d:a1:68:37:8a:b1:99:8d:c7:0a:68:63:
9c:03:16:2d:ee:87:8a:25:6c:fb:43:90:af:14:1c:03:ee:84:
0c:70:e4:44:81:6a:21:7e:a4:dc:1e:f5:45:03:54:c8:0d:f6:
b4:ba:79:13:5e:2a:ba:4f:a0:87:06:b1:0f:09:63:f3:62:64:
c1:19:41:bc:14:60:54:2f:d6:47:93:6f:ff:c0:ec:52:b0:5c:
3b:4d:c9:db:d1:dd:af:d1:1c:77:e8:d8:e8:c9:cd:b8:f0:1a:
b6:16:ca:42:31:05:41:df:b4:31:a1:c1:91:74:99:c5:3a:f6:
1f:c8:68:26:f6:f9:92:10:7a:b0:2b:77:1a:45:c6:af:f2:88:
03:16:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:56 2026 by rpki-client