Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: zll1KMFipWLNq+a/PQQNZpcpERmPuvTzGtWXPuhqoSg=
Subject key identifier: 0D:45:19:AB:CD:12:A7:59:FF:13:5D:38:5B:DF:69:C6:79:22:23:D4
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019D375212F30946A0EE4E4B6F56DD42B2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 02:00:18 +0000
Manifest this update: Sun 29 Mar 2026 02:00:18 +0000
Manifest next update: Mon 30 Mar 2026 02:00:18 +0000
Files and hashes: 1: 5Fc5Z8AnH0CEYZ9rDApWFLM4Ixc.roa (hash: AfLLM9oPN1KP8gzsCP5Hel58qUP2VR96r0FexXMNtMk=)
2: 78KXix6rmYz3_6bjL4D3DTcmOIY.roa (hash: 433c72hgwpEH/NcLGuRwMnl4ZIIE9aHeVVH8ucIJKQE=)
3: Wrt-X9W1hj7LG9tZllnLvca6Q2M.roa (hash: IGQB/HiWV8olKcPujLoPipVp2mVqdIGDDzfyLjI1mJg=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: PxLvch1ALsIKKvLt2C7Op8hxv4RfqGrxBYVuYsN0lMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:12:f3:09:46:a0:ee:4e:4b:6f:56:dd:42:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Mar 29 02:00:18 2026 GMT
Not After : Mar 30 02:00:18 2026 GMT
Subject: CN=0d4519abcd12a759ff135d385bdf69c6792223d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:82:36:8a:36:e0:43:b7:8b:4d:60:06:92:
a7:9a:a7:05:7b:bb:fd:01:02:2d:15:98:51:0d:22:
a2:56:44:32:ef:20:f8:1d:5b:32:46:19:3a:fd:83:
2e:16:8a:b9:f7:0a:bb:19:b3:07:86:f0:b1:a5:e3:
ca:d7:cd:0a:97:95:f8:d9:c9:75:94:d9:5a:4f:ee:
fc:b2:19:f7:64:41:22:ef:9e:5c:44:e7:3a:7d:a2:
59:cd:4b:d5:35:cc:1b:25:02:01:fa:a8:23:c2:d0:
0b:0f:76:3e:95:f4:3f:55:e4:32:be:99:4c:4f:9e:
00:8a:1c:9f:c8:6b:c4:75:e8:cf:5d:b7:25:fc:bd:
34:9c:4c:a9:f9:8b:d2:19:39:7a:e5:8b:e3:5c:04:
1f:bb:99:f3:4e:a8:6a:58:53:cb:75:a1:23:09:61:
98:1a:5f:e9:61:a8:cc:d6:02:f2:a6:38:dc:48:b4:
17:72:be:89:3f:34:e0:0c:60:de:33:3d:b0:e1:42:
1b:24:17:82:76:0f:a5:d7:6b:27:f2:85:ad:e6:ec:
16:f3:2f:3d:eb:f2:b4:74:34:0b:56:c4:f0:9d:6b:
28:f5:bc:9d:d8:1d:ce:0c:cf:c5:dc:de:53:e2:89:
01:92:2d:11:35:75:75:0d:59:06:69:a9:99:99:7c:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:19:AB:CD:12:A7:59:FF:13:5D:38:5B:DF:69:C6:79:22:23:D4
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ef:58:e6:5f:b8:56:d8:ad:cb:22:58:c2:b2:b9:18:54:7b:
8a:40:77:8e:df:40:31:98:57:00:94:d6:1f:27:62:1a:e4:6d:
3b:3d:fd:15:f9:be:96:3a:58:77:03:22:cb:d3:6e:4a:c8:b4:
b3:e2:cb:74:dc:3f:d0:9a:19:42:ff:6f:b5:dc:60:45:30:ee:
d4:d3:03:30:8d:57:4f:0d:3d:b8:52:fb:7b:72:8d:ed:2f:ee:
47:81:b6:12:c3:d1:df:ba:bc:7d:a0:eb:e2:06:91:99:fb:63:
f2:ef:74:4f:d3:42:e2:89:fe:d6:5c:19:5e:09:2e:0a:8d:18:
e4:fb:90:52:85:7b:de:91:97:7a:11:79:3d:82:ec:c3:e6:ae:
7a:b2:d3:73:49:ce:04:76:a0:ad:b5:aa:ab:bc:bd:70:ef:67:
b5:39:06:98:fb:f1:aa:a9:3e:84:2b:cd:9f:cc:e3:c4:3b:19:
36:27:03:1b:ff:50:86:52:2e:05:b5:60:ef:7d:67:0f:4f:6e:
dc:d8:34:b5:d5:2d:5e:41:48:79:89:fb:65:3c:7b:68:d9:d4:
53:77:d2:18:8b:eb:e9:7f:12:f4:83:46:bd:5c:75:df:90:89:
c2:d2:3c:08:5d:21:47:36:40:4d:00:96:4e:94:65:3f:f2:14:
34:1d:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:05 2026 by rpki-client