Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: VC7Phw5lC3DxMdHideaZauAj4WjD280Ycutj7e4HrZI=
Subject key identifier: 19:77:E0:18:51:7E:63:4A:B7:9A:78:16:0E:EA:9F:F9:34:8E:F8:2F
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019DD49BA9A786E013DB94DF1C340AE7F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 0534
Signing time: Tue 28 Apr 2026 15:01:04 +0000
Manifest this update: Tue 28 Apr 2026 15:01:04 +0000
Manifest next update: Wed 29 Apr 2026 15:01:04 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: Q6wxDkZ9VbGCbZf2ex90Hf0b8UneC7LgH2y8/pS3Vy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:9b:a9:a7:86:e0:13:db:94:df:1c:34:0a:e7:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Apr 28 15:01:04 2026 GMT
Not After : Apr 29 15:01:04 2026 GMT
Subject: CN=1977e018517e634ab79a78160eea9ff9348ef82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:d6:71:37:a3:a8:6c:20:a9:bc:5b:21:45:
ef:70:c0:ac:cb:1f:d8:12:8a:a2:8f:b3:e0:e7:e1:
0d:b8:f1:16:00:08:c5:84:80:01:fe:3a:63:92:79:
54:8c:c4:f1:76:a2:65:af:1f:7d:13:cd:7b:c6:23:
dd:33:f6:86:d9:3e:9b:e2:ef:d0:e3:c6:70:e8:ea:
55:6b:3c:45:15:64:c6:bc:7a:50:4b:c1:cb:4b:8e:
92:a8:62:a2:80:e2:60:2d:90:21:ca:ec:7b:b9:66:
73:a7:d8:a8:bd:27:de:f1:e2:f4:af:ff:01:6e:92:
ad:c9:62:0a:c8:eb:44:31:3b:f7:79:88:f0:73:97:
ad:ae:5d:b8:8c:72:4e:19:91:d8:fd:ab:dc:8d:53:
4a:bb:88:64:eb:87:86:12:89:72:31:a1:49:dd:1d:
4b:8b:3f:42:34:b8:90:f0:bd:e3:4e:e7:74:f5:63:
67:0d:a7:c1:ee:c3:e0:89:f7:4c:e0:74:d6:01:97:
b6:2f:ff:0b:50:a5:fd:12:67:e0:4b:57:0d:a8:4c:
8d:10:3a:69:b1:09:9c:b1:10:2f:a8:18:00:2f:18:
92:e0:fe:7a:8a:37:64:98:00:87:a6:be:1f:20:74:
d8:18:c2:06:35:88:07:e3:40:b2:69:a8:33:1a:92:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:77:E0:18:51:7E:63:4A:B7:9A:78:16:0E:EA:9F:F9:34:8E:F8:2F
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e8:2d:62:bc:d8:f9:35:ec:cb:5d:3a:e7:2f:cf:16:c1:f0:
50:9f:da:6d:a9:0c:20:72:52:85:aa:4b:11:ba:37:ca:16:23:
9a:0c:6b:08:44:fe:91:a3:7b:42:3e:60:59:f1:dc:b9:b5:5f:
91:48:01:a8:7b:ec:e8:d3:9c:dc:c5:83:f4:2a:49:46:55:f7:
ea:3e:d2:ac:13:f7:23:e2:9b:62:9e:5f:72:e1:3b:7d:74:b9:
8e:35:94:1b:15:0a:6e:cf:34:12:9f:e9:82:9e:5f:96:5b:56:
66:33:ae:35:12:57:7e:74:c7:aa:c3:89:1b:26:0c:b9:83:a1:
ee:d1:e6:56:66:89:31:3b:8c:c6:b8:34:80:38:b2:63:a4:d9:
45:85:d8:ee:61:e9:af:5a:29:12:05:a5:c2:ad:43:f0:63:9e:
79:07:5e:86:b5:20:a9:bd:23:27:e0:4b:a4:e4:e0:78:6e:c0:
f2:9b:c1:36:43:2c:23:14:36:4f:03:b5:41:20:db:c0:0f:63:
d4:2c:4b:81:50:d1:d4:1b:0a:ef:fb:3e:8d:03:eb:d9:65:cb:
d7:ad:42:c4:c4:50:a6:18:61:52:4e:b6:3c:b1:10:78:17:49:
72:f4:2d:3c:ea:47:85:2a:8d:3a:4e:d2:e6:84:c2:a3:d4:4e:
99:17:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:48 2026 by rpki-client