Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: kU5eN2b47n8axqfG6ME6gTAiBvZEai8wIi+yRDmb9Uc=
Subject key identifier: B0:EE:6D:25:F8:D5:69:93:59:99:8B:2B:B8:B1:AC:BA:75:DE:EE:BE
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019D38D2B3CB55257FDE7CCCC7979A164D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0B82
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: fggbPgzdSlnNZEArRT0wOCYFRM5aTHbKtz6gmM/shRc=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:cb:55:25:7f:de:7c:cc:c7:97:9a:16:4d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=b0ee6d25f8d5699359998b2bb8b1acba75deeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:28:7d:39:ec:a6:c6:90:7e:88:a9:81:38:
ef:b3:09:c1:85:43:bd:22:ca:55:68:35:64:2b:5b:
48:bf:fe:89:47:4c:7f:ab:74:d7:ff:9d:47:4b:4e:
b8:d8:3f:49:d0:8d:e5:8e:f2:f9:7b:3c:e5:42:66:
40:b6:86:de:4b:08:98:79:6c:3c:4d:7e:71:a5:17:
e9:cc:9b:16:3f:c3:6e:30:65:0e:8c:1f:6e:1b:cf:
c7:47:eb:25:71:2a:87:65:63:96:c7:88:14:3e:1e:
d7:42:bd:e0:cf:af:23:00:d6:6c:16:06:b6:bb:4e:
d1:ed:3d:cf:08:b3:f0:22:63:39:72:85:cf:bf:3c:
fc:94:a5:d4:27:e4:3b:7b:a8:70:4c:6c:b3:6a:12:
6b:cd:f7:d0:81:9f:a4:5f:0b:75:3a:d3:13:8c:41:
24:c0:7d:61:d4:72:16:9c:39:e6:48:2f:bd:b3:1d:
f6:a4:02:b4:71:57:3f:9e:ff:7d:36:25:a1:8d:22:
2b:d6:89:80:00:e9:69:c7:60:12:51:6a:0b:d8:8e:
51:11:72:5d:95:1f:ca:29:04:40:18:74:20:39:97:
2b:58:f7:3e:e2:c5:12:f9:72:d6:35:a0:4b:b6:19:
42:fa:cf:f5:0a:8c:29:e9:af:32:91:a5:0a:14:e2:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EE:6D:25:F8:D5:69:93:59:99:8B:2B:B8:B1:AC:BA:75:DE:EE:BE
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:ef:e9:c5:88:77:3e:48:52:14:f1:d4:ed:05:1e:6e:e9:
4b:46:9b:3a:22:8c:71:a5:ba:30:dc:6c:a6:28:13:c6:a8:e2:
c3:4a:c4:74:76:50:eb:86:dd:5e:1d:f0:f1:9e:36:c5:58:c0:
3e:cb:e0:dd:53:f8:9b:0d:0a:ef:b2:9d:a1:58:fc:fb:cf:1c:
1f:06:b6:df:f7:cd:8c:7a:5e:8e:3c:69:c6:05:96:fe:ec:59:
11:a1:96:4d:ec:98:87:07:2a:88:b6:43:22:c9:0e:20:1a:d5:
7e:32:2b:b6:a0:a4:cb:a2:13:8e:f0:76:7a:39:c5:33:72:69:
0b:07:99:3c:19:5f:9e:fc:c8:d2:2a:45:a7:5f:4f:44:4c:ee:
8f:a2:33:4c:44:e9:99:42:cf:94:f9:d1:6e:c2:b8:00:38:b3:
c0:83:ba:16:9f:b8:ca:ba:7f:d1:e3:bf:d5:8f:79:24:85:ce:
2e:c2:58:82:ba:5b:78:f0:76:95:5f:9b:1b:f8:b8:2e:94:4d:
7c:5a:18:6d:5a:d7:1f:b7:10:fa:d3:f0:5c:7b:cc:80:78:37:
a9:4f:db:bb:cb:a3:5c:86:51:9b:f3:b6:04:2c:c5:bf:9a:5b:
60:74:9b:2c:60:41:1e:af:04:61:7a:5f:24:97:f8:20:19:71:
36:f5:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:42 2026 by rpki-client