Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: m7d8nHxPOeQHnErNbhezu1+eLy3dFgdRXl48WQPxHhw=
Subject key identifier: A2:95:C2:13:7F:8E:E8:C5:47:7A:9E:43:2E:E7:78:51:37:0E:3C:73
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 01A13CDC9AC810C34797E59F90911493F0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 00:00:52 +0000
Manifest this update: Thu 15 Oct 2026 00:00:52 +0000
Manifest next update: Fri 16 Oct 2026 00:00:52 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: JP7tJoDnx7BVi/rtNh086CnzB2Jx6t2dsvDujcWxSMc=)
2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:9a:c8:10:c3:47:97:e5:9f:90:91:14:93:f0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Oct 15 00:00:52 2026 GMT
Not After : Oct 16 00:00:52 2026 GMT
Subject: CN=a295c2137f8ee8c5477a9e432ee77851370e3c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:34:1b:b2:bb:67:ec:c5:05:1f:16:9e:36:
4a:81:ce:9f:3a:e5:88:d2:16:e7:49:14:9e:6a:91:
5c:d7:02:ab:24:f6:ad:a4:7b:35:11:5e:aa:50:0f:
de:48:ed:e7:de:b4:56:c9:8d:84:b1:d2:b1:bc:53:
ac:60:a2:f6:a3:7c:dd:79:42:63:4c:8e:f7:6b:7d:
22:87:0a:51:2f:d5:4b:ae:73:8f:6c:d5:7e:34:86:
91:fb:0a:a4:0d:c1:2b:ed:ff:70:35:5a:fe:c3:a4:
1b:f5:a5:91:3a:c7:c7:b2:8e:40:bd:1d:00:0d:49:
c5:ca:8a:91:dd:5d:31:cf:f2:53:c9:81:fc:71:11:
0c:d7:af:b9:8a:1e:01:8d:34:c1:38:52:34:e0:81:
a6:64:91:42:c0:64:56:fa:42:57:e7:a3:61:c3:b7:
2b:72:f8:ba:c8:7c:73:a3:f8:6d:6f:07:cb:53:fa:
33:e2:f3:32:72:de:30:85:b8:66:78:f9:a9:e6:57:
98:6d:2d:21:32:1d:d1:61:59:e2:5b:67:b7:95:e2:
bc:8d:b9:03:f5:2c:ed:bc:ce:42:67:43:b5:ca:61:
97:e2:3a:70:8f:c8:a0:cd:ef:90:22:eb:1a:a7:b9:
32:42:2d:e5:41:89:e7:d8:57:4c:5c:b4:0f:3b:61:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:C2:13:7F:8E:E8:C5:47:7A:9E:43:2E:E7:78:51:37:0E:3C:73
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:43:fd:5e:39:b3:42:ae:23:a1:a0:ee:7b:60:57:0c:9e:
b5:c1:3e:dd:80:c3:cd:0f:d3:6c:ea:3d:0d:4f:ae:78:d2:86:
ae:66:18:14:b8:d7:d5:7a:86:1c:8b:c3:12:3c:39:12:a7:44:
f1:06:28:77:6b:be:20:bb:12:c7:74:9b:07:d4:25:89:44:c7:
24:aa:df:11:e2:36:8d:8c:4d:12:88:f6:cc:a7:a1:b7:12:f6:
4c:87:d7:93:55:ed:f5:74:bd:03:94:e2:3d:67:6a:a7:04:fa:
d7:c9:86:87:2d:ec:74:65:e0:e0:f6:25:e0:d9:b1:84:8d:a0:
67:5c:eb:b1:25:c0:74:9d:10:2e:7b:92:ba:67:d1:53:ba:21:
91:d3:e4:b0:96:a9:96:0d:9e:64:47:af:d3:b3:99:f0:e4:9f:
54:3d:36:87:f7:67:ee:21:ea:e5:b0:46:ec:91:17:9b:55:2b:
85:9b:3e:37:08:b9:9a:8c:d6:b4:8c:7a:6c:7d:66:0b:20:f7:
93:28:8d:96:73:98:fa:9c:d3:bd:ef:22:50:6d:fe:86:96:2f:
24:66:ff:59:53:db:e5:93:6a:b8:4d:4f:16:2b:6c:db:7d:68:
e7:ca:61:3b:81:90:7c:78:29:7c:6d:dc:5e:8c:7c:5d:f5:a5:
ae:75:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:37:04 2026 by rpki-client