Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: QWC62TMVre0K5yW8OrZCX5cbKzTUCPo0ZoI0Di2teDw=
Subject key identifier: E3:52:FA:DE:31:F3:6C:76:76:9B:8B:E6:4C:A1:7B:99:54:43:8A:C4
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019CECDD53DF21225075814CB84F1634CFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 04BC
Signing time: Sat 14 Mar 2026 15:00:53 +0000
Manifest this update: Sat 14 Mar 2026 15:00:53 +0000
Manifest next update: Sun 15 Mar 2026 15:00:53 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: 7ukiK6uspz8KfVs2E6HubOiWgmac9RCYg5c2Or3EauA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:dd:53:df:21:22:50:75:81:4c:b8:4f:16:34:cf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Mar 14 15:00:53 2026 GMT
Not After : Mar 15 15:00:53 2026 GMT
Subject: CN=e352fade31f36c76769b8be64ca17b9954438ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:3f:5b:56:0f:11:09:2e:83:95:28:26:32:
ac:e3:95:9a:2f:c2:7f:ad:5f:53:59:40:64:65:79:
4e:11:1b:d8:6a:60:ee:4d:1b:cd:20:ef:04:b8:94:
94:2a:62:62:48:16:45:94:f0:d8:c4:87:59:cf:b1:
b6:f9:73:e3:01:63:30:2c:ea:f5:58:b4:01:70:d9:
e2:3c:dd:51:fd:c6:23:e1:d5:da:39:b6:3b:82:b4:
eb:cc:53:30:ce:75:5f:b4:ca:2e:88:a5:8c:b3:8f:
75:02:1b:9b:01:f3:bf:9d:e1:49:22:86:55:81:c9:
09:6d:d8:71:e1:66:66:56:8a:c0:55:fc:ea:7e:b7:
48:1b:03:aa:ba:b8:39:77:bf:b0:34:cb:e9:d7:94:
d2:12:c4:d0:cd:43:df:36:32:0a:f9:cd:22:94:9b:
20:9f:fe:0a:20:70:c3:62:c1:f1:98:83:7f:b0:7a:
d8:0a:42:79:da:76:9c:e1:fe:97:e6:a1:48:1f:67:
12:c0:ba:19:f3:80:96:6c:ed:8d:dc:b5:96:da:c5:
af:1f:74:60:4d:3a:a0:fd:27:d1:bc:a7:e5:b9:df:
25:7f:84:a4:4c:27:b1:58:72:02:21:8c:9a:ce:43:
d7:d5:33:7b:74:d0:b8:5b:28:85:57:23:c0:d0:f0:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:FA:DE:31:F3:6C:76:76:9B:8B:E6:4C:A1:7B:99:54:43:8A:C4
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:56:77:91:fa:43:08:ce:4d:80:57:24:ae:f4:e2:28:c4:
aa:14:b3:cf:92:a8:a5:43:24:a0:3a:40:0b:5a:c7:ab:2d:4d:
19:f8:f0:b5:37:b6:08:21:71:21:94:0b:2d:04:a7:a9:5f:8d:
d5:75:66:15:10:76:d5:28:60:2f:fc:a9:6a:3f:1b:97:5e:54:
58:a5:bc:30:dd:e6:00:d7:63:54:af:3c:ee:8c:fe:33:a8:9f:
e8:87:7b:23:cc:14:15:c8:28:81:a9:32:ca:51:bc:0d:58:06:
82:5c:5c:05:a7:58:5f:7d:57:66:6c:6c:b4:0e:f6:85:f6:83:
a0:8c:d9:e9:79:57:71:65:4b:b0:60:63:ca:a6:c5:1a:25:e1:
2b:97:23:c1:92:0d:fa:05:94:32:92:ea:02:47:de:20:57:d6:
3f:0a:08:a2:92:42:ed:61:c6:ad:a7:1d:b1:ae:fa:df:6a:09:
57:db:15:71:39:27:fc:3b:77:1e:a0:b8:c1:a7:b9:6c:8e:64:
b9:e2:b7:87:f3:8b:4a:9f:01:25:b6:70:e4:0b:1b:fd:03:65:
e5:88:f7:f6:74:21:d7:89:fd:18:71:09:40:ab:85:02:db:2d:
08:68:df:df:a4:bc:e4:51:3e:02:26:14:86:da:69:26:2d:25:
55:75:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:55:36 2026 by rpki-client