Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: DqJ5uV6tnfN5NkRY+H0/jVEwMbyRwYWLnfRD69hNB8w=
Subject key identifier: 19:BE:F9:E8:FF:0F:D2:4B:A3:B2:13:86:3D:61:42:4C:00:21:B3:E8
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 01A0D08062A58473051819B87CE56F008687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 03AF
Signing time: Wed 23 Sep 2026 23:01:09 +0000
Manifest this update: Wed 23 Sep 2026 23:01:09 +0000
Manifest next update: Thu 24 Sep 2026 23:01:09 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: 9lH2gh78eecPGV59XR8fH5pUyGx2R+tPRxvkmS6WD1k=)
2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:62:a5:84:73:05:18:19:b8:7c:e5:6f:00:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Sep 23 23:01:09 2026 GMT
Not After : Sep 24 23:01:09 2026 GMT
Subject: CN=19bef9e8ff0fd24ba3b213863d61424c0021b3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:bb:ba:da:44:a9:b7:e4:90:20:bf:df:47:
bb:0b:36:4a:18:ed:b0:28:48:5b:7d:dc:8e:62:45:
46:a4:7b:25:13:c0:f9:2d:56:94:b7:82:8c:54:f1:
54:c2:c1:6e:16:98:af:94:17:fb:4a:11:c3:5d:8f:
9d:e5:ff:1a:e8:62:5d:32:b1:24:d0:68:f1:3b:57:
81:54:83:3c:21:46:9d:72:04:4d:72:e0:b0:f2:f4:
61:ca:ce:d2:c6:33:60:5a:2e:58:0f:de:be:b8:9c:
45:0a:1f:33:51:8f:0c:3e:2c:5e:a9:1f:66:7f:44:
51:5d:1b:08:1a:62:2e:c1:1e:af:bf:91:63:3a:5e:
87:c4:98:4a:5f:fc:f0:36:cf:9e:89:8f:2b:d8:e0:
0e:d4:f0:52:02:dc:3c:1b:ce:c6:62:6c:92:bf:66:
48:47:53:17:9c:d3:7e:f4:39:c6:5b:4f:fc:70:78:
23:60:3e:ad:b2:52:aa:f9:b0:4c:16:7b:8e:a0:fa:
b1:6f:e9:22:21:3d:bf:10:01:8e:2d:58:e8:29:5b:
e2:58:d3:b2:26:f8:c2:4b:0f:51:0b:ae:bb:06:ab:
e1:e1:1c:a2:2f:f3:f6:02:cf:45:c2:14:ea:a4:70:
b6:22:28:11:7c:c0:a1:ba:16:0e:1d:d9:af:71:81:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:F9:E8:FF:0F:D2:4B:A3:B2:13:86:3D:61:42:4C:00:21:B3:E8
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a0:da:d4:de:ed:62:56:a0:9a:83:fd:11:e9:f3:23:98:f2:
6c:12:58:a3:63:70:aa:a0:ad:01:d1:8a:29:38:8f:ac:c3:01:
10:f4:b6:84:06:4e:1b:0a:00:a3:dc:93:8f:90:82:b0:c9:f2:
4c:2f:bc:9b:fd:4f:24:a7:1d:95:5f:df:ad:de:6e:02:0f:b1:
0c:89:1c:3d:3c:1f:e1:04:9c:ce:fe:71:5d:c0:51:f1:24:6f:
4b:c6:5e:83:46:7f:a3:d8:3d:4e:dc:49:08:d4:e9:95:4d:9d:
4b:d8:4e:90:ee:98:3f:62:43:c3:73:0b:86:22:f5:0c:72:9d:
54:9e:f0:9a:8e:6f:53:3a:50:48:4f:fa:bf:e7:d6:ed:57:43:
48:4c:2b:53:15:99:7c:de:a5:6c:04:4f:be:98:46:17:0b:99:
de:5d:ce:84:e3:20:bf:35:be:79:b6:18:32:51:8c:d0:8e:7c:
7d:c2:7d:47:c4:90:20:d1:73:5e:2a:88:c6:4f:ce:d3:06:12:
74:7b:dc:1c:f4:e5:c4:4b:74:62:2e:6d:10:73:d7:32:f8:a9:
69:f3:ef:3b:7f:b4:e9:02:ed:28:ba:1b:9c:bf:e9:79:d7:60:
30:f6:e2:d9:a0:c9:e7:e3:ae:bf:4e:ea:54:5d:40:9a:9d:d4:
da:fb:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:53:08 2026 by rpki-client