Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: 3PYN1b2Fw+vyLYSzxqNPVLviYH81/Eqcd12j+Rb7gNM=
Subject key identifier: 51:EA:E5:1F:DD:7D:B0:83:1D:77:D9:F4:3B:6F:C3:F0:3A:38:93:7F
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 019D3789648A9C3CA537843B0DB91DF6C744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: 7qSUDilwIn+w5pJev45aPcaJlJscA4jhfIa//L4h6Jc=)
2: HcdyvfGiwyc5vyJt43ZuqDnZlDk.roa (hash: 6cPvxcqUCsTomfn2PuIbeh8pnyt4KKbDTtE7dn6MQC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:64:8a:9c:3c:a5:37:84:3b:0d:b9:1d:f6:c7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=51eae51fdd7db0831d77d9f43b6fc3f03a38937f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:2d:c3:a8:41:f2:00:02:b9:f1:81:63:73:
19:bb:de:aa:76:0a:2b:bd:27:fd:d3:5d:09:bb:67:
3a:87:2a:83:94:b7:be:fb:ab:1b:61:d5:54:f8:43:
5b:64:df:be:c5:13:a5:42:a6:be:66:41:10:5a:30:
17:31:a2:0b:c8:0a:64:86:86:d8:44:7a:e5:23:70:
eb:05:92:7a:d0:7d:cb:70:ca:32:9c:9e:af:7c:2d:
b5:ec:ce:8c:c3:ca:4a:da:ed:94:f9:df:90:bb:c2:
35:95:14:98:68:1f:1f:21:ac:97:1e:5d:a9:5b:79:
67:54:53:37:d4:8e:4d:e2:b9:78:ae:17:86:7f:e2:
c1:3a:a1:c8:2f:75:6a:72:50:c6:ca:6e:f3:5d:4c:
37:1c:62:61:4d:fd:a9:4a:15:f2:bb:98:f9:26:b4:
34:0b:95:5b:a8:bb:0e:d3:3a:10:67:4e:cc:41:bf:
41:a7:cc:d8:63:f7:1f:80:47:d0:cc:17:25:8e:55:
34:0e:c5:01:57:29:4c:23:ff:f0:1a:d4:4a:5d:59:
61:1f:8c:78:12:9f:96:ce:07:30:76:77:5d:23:88:
eb:e5:97:b6:70:a7:24:bd:bd:3a:49:73:d5:a4:61:
fb:15:22:13:97:70:fa:29:35:ca:c0:4e:54:34:6a:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:E5:1F:DD:7D:B0:83:1D:77:D9:F4:3B:6F:C3:F0:3A:38:93:7F
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:e5:9b:3e:c8:9e:64:31:f7:11:d7:0b:91:0c:29:8b:43:
0d:22:dd:65:7f:1b:f8:b9:7f:43:27:c9:a4:0d:98:a6:bb:ac:
22:ca:77:b4:1b:db:fa:e2:11:75:23:1d:88:4a:3c:3d:26:f6:
94:7c:42:e9:fc:f1:94:a7:eb:54:61:a4:d2:ea:b5:b7:7a:4f:
00:93:c5:ed:89:7d:09:10:ed:a9:11:84:c5:c1:8c:e4:31:ac:
b0:96:47:58:ca:bf:3d:cd:51:3f:9e:8c:45:bd:59:41:3a:73:
4c:1c:30:b7:69:28:1d:90:9e:7f:40:24:bf:cf:79:5b:76:38:
bc:d9:72:6a:85:be:cc:5f:d8:60:6a:cb:8d:04:7a:48:b3:cb:
e8:0b:c6:a0:79:86:b0:cf:d7:0c:80:d3:8a:90:ab:11:6b:db:
e8:60:cb:64:ee:47:1d:c7:50:da:f7:8e:05:39:73:4c:a8:d6:
99:5d:7b:1b:33:8d:bb:e4:5f:a6:ea:a0:4e:81:7f:b6:02:23:
41:d7:97:0a:a5:36:94:15:e8:62:21:09:18:d1:2b:e9:3d:55:
c5:e5:76:d8:a9:02:20:5d:d3:17:50:1e:58:0f:90:c7:d1:c6:
60:51:ee:29:7e:1a:8c:72:94:07:a0:70:ba:9c:d0:37:f1:3f:
bf:2c:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:19 2026 by rpki-client