Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: oDBbopDfN6DxONCM9T2KF6xQpY8QV+WKDIrKyWDhadg=
Subject key identifier: 67:15:6C:5A:63:4F:B8:67:C3:76:CB:57:ED:9B:36:92:C0:B5:AE:EE
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 019D38D370674D4D0ABA4B1FAD08C6125302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0EE2
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: 22CB5yR0bRMROSIzaSt71CqU4G9yKGdeCPDGMhpvC+E=)
2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:70:67:4d:4d:0a:ba:4b:1f:ad:08:c6:12:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=67156c5a634fb867c376cb57ed9b3692c0b5aeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:29:b9:c0:6a:36:c8:57:a7:d4:4c:69:7d:
ca:d2:ca:27:48:04:c2:9c:14:61:56:62:7f:b0:12:
f8:b3:6d:cf:5c:93:f6:34:d4:41:13:de:fb:dc:38:
99:15:6d:e8:e9:75:45:54:bc:f4:31:14:9c:3c:6b:
e8:cd:29:9d:54:43:6b:39:6c:ca:85:c6:fa:28:3d:
0b:f1:6d:ca:1c:99:5d:09:a2:6b:a4:07:87:f9:52:
91:af:5b:7f:ef:2c:73:6a:d2:6a:93:66:fb:59:ef:
74:cb:ec:9c:97:f4:8f:3f:ae:e6:3f:5a:f7:36:b6:
f2:49:da:02:b2:3d:c1:d7:3a:f7:c0:93:5f:d5:fd:
62:4d:e4:37:78:c1:6b:c2:86:1e:c2:d9:1b:a8:51:
03:cf:c6:70:16:4e:07:63:6c:77:7d:85:27:b5:aa:
60:f9:6e:56:46:c1:c3:76:74:47:4d:5a:7a:55:a0:
e0:9b:f9:e5:73:86:ae:2b:b9:03:16:85:58:cd:4a:
76:08:51:17:82:9f:c3:57:f0:62:7c:78:37:0c:01:
ae:b7:8f:56:ce:9c:47:81:59:b1:e9:80:f9:a8:cb:
7c:61:74:f8:a5:3f:a0:d9:dc:a0:58:10:af:b9:f5:
18:75:40:f1:f9:5c:09:65:bb:7e:cc:a9:5a:98:81:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:6C:5A:63:4F:B8:67:C3:76:CB:57:ED:9B:36:92:C0:B5:AE:EE
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4c:62:94:f2:13:b7:9c:14:be:ae:95:d4:3c:c3:ca:07:72:
58:70:43:11:41:fe:83:35:e9:aa:80:84:7d:74:8b:37:c8:1a:
2c:dd:a6:36:0f:86:52:d6:2c:d7:f1:fa:4b:9f:00:85:c2:3b:
c6:61:24:77:bf:b9:06:90:3d:85:27:66:2e:db:b6:db:23:1f:
0d:93:24:12:0b:08:06:5f:45:fe:21:dc:26:45:c1:54:97:70:
34:35:1d:15:18:65:a3:d8:45:78:75:9d:14:b9:24:85:57:b9:
4c:63:30:51:8c:4f:18:04:01:2e:ad:3e:2f:b5:b8:a1:4d:5f:
ac:d8:c4:29:f2:61:1e:ff:7b:75:48:d5:6e:4f:c9:df:d5:38:
2d:8b:7f:50:69:f6:00:68:6b:d5:b3:ab:30:fc:9f:5c:ca:09:
8e:b3:74:4f:e6:43:b5:e9:08:26:d7:38:9a:86:b6:1b:52:fd:
d1:4f:83:d8:5c:42:7c:ee:b8:ca:24:6a:83:7e:a9:50:1b:1f:
68:ff:fb:a9:bc:b5:b6:2c:ba:d7:1c:f7:59:e3:10:2f:4a:54:
b1:ab:3f:4b:2a:5c:e6:70:50:b1:23:58:bc:cb:fe:32:bc:0d:
3e:25:cf:cd:72:94:85:68:59:d3:7a:f5:44:69:38:33:de:f8:
e0:4d:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:50 2026 by rpki-client