Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
File: bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft (raw, json)
Hash identifier: kvXd8AiHZsGIMRP2uwf5zfggLjd9zlW848W/M12eZK8=
Subject key identifier: DD:D0:56:F4:1B:A4:53:01:F4:BF:27:3F:E8:65:E5:25:BC:1B:CB:1B
Authority key identifier: 6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
Certificate issuer: /CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Certificate serial: 019D37F70CA5D6EA94C3289CE480D49F0440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
Manifest number: 016C
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: Iuspe14G5QMlx5dSWpRrg05Ny9A.roa (hash: 7VI2D5eUznCeqx3Pi1ABWFNpA0b/azhPfenbDmlUGG4=)
2: bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl (hash: kJBD/RD9hrkdu81vPn8uWvDxVKKKGgIbGa+dSflaD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0c:a5:d6:ea:94:c3:28:9c:e4:80:d4:9f:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce79a6167aa3fcbfd44070134c9d93a6ce398bc
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=ddd056f41ba45301f4bf273fe865e525bc1bcb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:54:0d:93:54:96:4d:8e:da:11:bf:2a:31:
10:2c:58:61:a5:f1:4b:4f:36:71:69:8f:6f:b7:e9:
22:1e:c5:4f:f1:3a:12:11:b6:18:a2:7a:a8:03:30:
f4:73:91:f6:c8:c7:6b:14:e4:f9:8c:d4:2b:0e:b5:
de:8a:4c:1a:73:4f:88:f7:4a:4b:83:89:97:c7:6a:
58:84:69:41:30:df:4c:45:96:2c:e3:96:b5:e4:28:
24:f6:30:9b:5e:ff:65:db:3b:60:6d:7c:24:0d:51:
f7:6d:b5:c6:72:f9:32:3c:68:d7:6b:57:d2:ed:41:
3e:74:ab:df:2f:a5:0b:c8:ca:98:ac:1f:1b:53:46:
fa:19:d1:c1:ec:09:52:bd:98:33:65:16:5a:be:f4:
da:5b:16:43:f4:a1:a6:c4:5f:89:29:4e:41:a8:a9:
03:b1:a8:b3:48:42:29:b0:6a:df:52:ff:a1:ca:42:
d7:85:3c:be:20:54:71:0e:2c:90:7a:80:de:a0:2f:
2a:42:c1:8e:c5:25:96:29:bd:62:1b:c1:e9:b7:59:
dc:d5:55:d7:8c:ca:0e:28:84:f7:2a:fd:fc:52:b6:
a0:9a:38:e6:f9:db:3c:7b:77:d7:55:a0:1b:2f:29:
36:84:4d:9c:d3:c1:0a:40:e9:98:07:1e:56:36:00:
62:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:56:F4:1B:A4:53:01:F4:BF:27:3F:E8:65:E5:25:BC:1B:CB:1B
X509v3 Authority Key Identifier:
keyid:6C:E7:9A:61:67:AA:3F:CB:FD:44:07:01:34:C9:D9:3A:6C:E3:98:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOeaYWeqP8v9RAcBNMnZOmzjmLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f3376c-431e-4d5d-a7b0-4f4018504960/1/bOeaYWeqP8v9RAcBNMnZOmzjmLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ad:0d:85:d9:d7:06:d1:1f:0b:57:c6:27:9b:d8:81:0f:96:
d8:29:f1:ee:61:53:f6:71:4c:3b:ee:a5:5c:22:23:c3:eb:af:
dd:98:e7:49:5b:cf:80:9a:5f:43:41:30:e4:ac:82:10:de:c4:
90:bd:a4:68:db:a8:1d:f9:8e:9c:a8:c8:f6:dc:d0:cb:f2:79:
88:57:e2:5b:99:3f:e1:6e:d3:b7:22:c6:f9:80:42:be:8e:d8:
9e:2c:c8:65:1f:50:22:bc:6b:d1:fb:d6:67:b7:32:68:9e:1a:
0d:65:18:be:4e:12:73:e8:66:02:e2:64:03:e7:89:5c:b7:9e:
18:35:c3:6e:67:36:f2:a5:6f:5c:f8:9f:3f:07:0d:18:59:f1:
34:93:d4:d5:7c:28:b5:fe:97:10:de:f7:ca:35:9c:8b:af:c3:
21:bb:d6:2d:42:09:5c:88:48:f8:a3:31:04:c9:3f:0e:94:68:
d7:8f:21:33:cc:e1:bf:1a:33:30:60:dc:d1:66:92:60:c1:7d:
5c:b5:91:e1:95:86:c1:50:6b:12:83:cb:77:68:f7:71:cc:4e:
8c:13:f8:ee:16:eb:16:4f:ed:9f:ae:db:92:65:26:13:4d:47:
cc:f0:ab:3e:fe:40:83:29:8d:83:46:c7:99:bb:9b:0b:ad:11:
78:04:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:16 2026 by rpki-client