Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: dELD3wwmqvSk04Wz0gELDVrCGx9nFjzpAXj4jnyZSxc=
Subject key identifier: F1:75:2C:0D:CB:60:65:EB:C4:EE:F0:6B:00:33:76:20:A1:4C:36:A9
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019F17C2EE409289BD64CBA6CABC62087A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0C7A
Signing time: Tue 30 Jun 2026 09:01:18 +0000
Manifest this update: Tue 30 Jun 2026 09:01:18 +0000
Manifest next update: Wed 01 Jul 2026 09:01:18 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: M4qv9NaShkaXZrc9GjDWDyh856PFtDiTxUhgNZHRNGU=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:ee:40:92:89:bd:64:cb:a6:ca:bc:62:08:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Jun 30 09:01:18 2026 GMT
Not After : Jul 1 09:01:18 2026 GMT
Subject: CN=f1752c0dcb6065ebc4eef06b00337620a14c36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:28:68:14:c4:ef:8d:a8:a4:da:db:43:51:
42:92:b8:e1:f5:0a:8a:71:0c:e1:2a:3e:27:e9:3a:
22:11:50:97:80:9e:0e:18:23:d7:7e:67:b8:bc:a4:
01:52:da:b7:f1:9f:de:63:c0:ba:ce:51:22:86:aa:
4f:ec:98:5f:05:0e:d5:b7:c0:1c:42:29:27:95:2e:
b9:7b:f2:f6:a0:72:92:c6:12:e0:7b:46:a8:d4:d5:
5e:f4:7d:6d:9b:82:4f:f8:47:cd:ef:34:d4:b2:60:
7d:d9:92:c3:6c:86:60:6c:ba:c1:09:78:af:6a:a8:
51:e3:aa:ab:26:49:f4:fc:19:30:38:d7:0e:28:9d:
fe:64:e8:68:8a:c5:66:25:8f:a0:ee:f0:20:6c:b6:
13:5c:ba:d9:48:34:d8:70:7b:e1:2e:d4:fc:b9:76:
72:e0:2c:22:3a:78:ea:16:1e:03:d1:b5:fa:86:a6:
d1:98:dc:c4:ec:df:d3:b6:a9:6f:f7:64:c8:d5:69:
7b:46:6c:26:e8:6b:77:c7:8f:41:2f:c1:0a:b8:da:
6b:7d:f2:98:49:97:ef:ac:49:c2:8f:c2:69:03:bb:
c7:67:f2:e3:7a:62:57:1e:6b:51:08:69:96:11:8f:
e0:51:8f:3b:f5:22:41:36:cc:7c:aa:93:34:34:8c:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:2C:0D:CB:60:65:EB:C4:EE:F0:6B:00:33:76:20:A1:4C:36:A9
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:84:48:c2:5b:81:03:62:2e:75:95:65:3a:15:a4:16:12:2d:
17:82:1e:63:13:c8:1f:b5:dd:69:7f:f0:4d:4b:42:bd:93:8e:
9b:80:81:62:bb:7b:2d:06:16:47:50:1d:eb:6d:73:1d:61:4d:
11:e8:52:a7:f1:1a:fe:63:c6:0d:5a:ae:3b:c9:13:44:8a:b9:
1f:ab:2a:e4:da:56:c2:00:c9:fe:0d:00:2f:45:81:4c:62:b9:
fc:e8:36:8b:ea:ed:d8:39:26:47:11:10:b4:7c:97:8d:1e:79:
9f:02:93:41:50:b1:a3:a1:8b:53:23:d9:42:45:3b:30:45:af:
f1:53:6f:34:8d:a6:20:fb:38:1e:87:6e:3d:0a:a4:8f:65:af:
4d:18:6e:92:99:8c:09:bb:02:6a:78:4f:b7:fe:0a:d9:89:0b:
04:ec:c2:f7:7b:5e:87:77:2e:16:b9:54:ad:66:24:b7:01:61:
84:26:5f:ea:74:c0:04:72:ab:6e:e3:ef:ea:86:5f:08:8c:cc:
88:82:28:37:5c:bf:69:e3:7f:80:80:16:a5:0e:c8:33:bb:e9:
f2:89:c8:d2:81:32:5d:d7:61:84:cc:df:30:55:7e:71:a1:fc:
10:99:41:16:64:d7:78:9a:e1:ce:16:89:3f:38:06:3d:7d:73:
f7:c7:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:36 2026 by rpki-client