Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: ZdgECddgeTRMawC8g4uSnypb/wmFyFW4OlBJFhbY5tM=
Subject key identifier: F7:C8:06:86:52:7B:EF:25:A1:EE:F3:6C:20:28:A6:BF:29:AA:C8:1C
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 019E2FCD9630E9BF2C46C5EB789F18FFD3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 1110
Signing time: Sat 16 May 2026 08:01:02 +0000
Manifest this update: Sat 16 May 2026 08:01:02 +0000
Manifest next update: Sun 17 May 2026 08:01:02 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: H6D6Tp5olmO3YUw2TE5JxuXMjkD+Yqe2OpqRAFysJ6U=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:96:30:e9:bf:2c:46:c5:eb:78:9f:18:ff:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: May 16 08:01:02 2026 GMT
Not After : May 17 08:01:02 2026 GMT
Subject: CN=f7c80686527bef25a1eef36c2028a6bf29aac81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:36:f2:bb:5e:92:9b:ee:af:9f:36:ee:ab:
2a:96:69:94:76:98:c9:c3:6b:11:cb:2b:1c:31:ac:
eb:02:3e:ce:ba:dd:17:c6:5e:65:27:3b:3a:cc:b2:
cf:af:4b:38:47:ff:0b:06:f8:17:c8:c7:f8:f7:3e:
b2:ab:da:0d:04:ff:a1:4d:48:93:52:ba:ec:b4:ed:
bb:cd:d6:91:46:3b:18:9e:2a:7d:be:61:f1:5d:81:
70:b8:7f:71:13:ff:b8:09:8a:7a:15:2d:6b:16:7f:
cf:69:92:d7:69:24:c2:47:44:10:fb:b9:6c:f1:0e:
4f:8f:07:fd:01:94:2b:e5:0e:6d:b3:05:0b:83:d0:
d8:4c:83:6b:8d:1f:be:88:9f:ba:88:a7:83:85:be:
ac:57:4c:45:be:10:5f:34:26:ab:be:30:09:7a:0f:
66:7e:dd:09:41:60:b6:7c:ab:ec:5d:c2:29:d4:34:
e2:77:03:b4:1e:ae:42:f2:22:7b:49:de:a6:6c:10:
c8:b5:11:e5:18:ac:c1:3f:bf:16:71:39:95:df:7d:
0f:a4:b4:19:54:8e:9a:82:f8:44:69:95:23:17:e4:
27:35:8d:a3:94:9f:f3:da:79:f9:f7:ae:f2:ab:8f:
51:78:1d:34:d6:86:2c:6b:08:13:eb:a5:94:0d:76:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:06:86:52:7B:EF:25:A1:EE:F3:6C:20:28:A6:BF:29:AA:C8:1C
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8b:01:83:8b:d9:f2:9c:d0:30:2f:40:5a:83:7a:76:03:ff:
c4:e3:9e:5a:21:ac:6c:02:65:a3:38:d4:a1:65:3e:2c:03:f4:
b0:57:8b:0b:91:80:5a:d6:a9:89:d0:80:04:a1:d3:d3:33:c6:
38:48:9c:a2:25:f2:e0:b4:88:53:44:65:77:bd:41:3c:aa:6e:
f8:89:6c:2a:fa:15:c6:95:c9:7d:86:18:70:38:79:78:41:34:
20:14:ae:55:df:31:c3:cf:39:09:0f:75:04:77:38:81:3c:9c:
ca:08:4a:b3:f9:7f:b5:c6:37:f1:23:e5:1c:56:ed:5f:ca:3e:
1f:7d:b0:32:66:9b:d1:d4:44:0d:2e:e2:cb:4e:78:b9:fe:b6:
85:5c:ff:9a:69:5f:1d:db:6b:12:f5:e6:f5:0c:48:ce:b5:f7:
3f:d5:a4:bd:60:63:c9:9d:8d:27:ae:ed:aa:b6:3d:b4:74:00:
5d:4d:d9:a7:26:b6:73:16:a0:72:3e:ec:be:0b:24:97:91:aa:
d4:bd:ef:23:52:3f:81:a2:d1:45:eb:16:47:60:2f:d6:3e:ed:
33:b4:b4:c8:45:a9:d2:e4:5f:a5:1d:7a:68:d2:05:a9:3e:1f:
71:a4:44:80:3f:b6:dc:49:a1:64:88:4c:4a:33:ac:72:03:99:
ec:0f:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:12 2026 by rpki-client