Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: HqGa44dCTPakx9VX2bk90wsBT7++RVa4l7CatBtro5E=
Subject key identifier: DA:82:3D:75:97:C8:72:47:15:D4:65:6E:E7:80:47:8C:9B:11:3E:E8
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019F91DA7FE80E9D3EAAB747B1B361CD8F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 030A
Signing time: Fri 24 Jul 2026 02:00:43 +0000
Manifest this update: Fri 24 Jul 2026 02:00:43 +0000
Manifest next update: Sat 25 Jul 2026 02:00:43 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: wqyMPsT++AagFCNI290jwBHOfv5R7r03td7zT1eMt8M=)
2: 67yNIuDKXUtDVtgojpsh7omuexw.roa (hash: r3ainpcf/xaLFwsqpjAVbwM2zKjxaJVfsZCxDMXSgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7f:e8:0e:9d:3e:aa:b7:47:b1:b3:61:cd:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Jul 24 02:00:43 2026 GMT
Not After : Jul 25 02:00:43 2026 GMT
Subject: CN=da823d7597c8724715d4656ee780478c9b113ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:e6:e4:72:85:5e:35:46:be:4d:df:90:7a:
ce:2b:63:9a:f3:8c:a4:84:fb:3a:db:2c:2e:7c:ae:
63:1f:d6:c8:46:a1:0a:ab:57:a5:d0:92:19:7a:ea:
a8:42:6e:c9:b2:07:85:0f:9c:ae:7a:f5:b2:df:44:
c5:17:93:1b:9c:f0:32:ed:8e:2a:c3:9a:3e:e6:cd:
60:2a:4a:4d:c6:64:17:56:6a:9c:bd:27:42:f2:17:
67:40:22:6d:25:8d:72:d9:0a:b2:01:be:99:97:ac:
c8:d1:0f:eb:b4:88:75:97:6e:74:96:38:23:d0:ea:
f0:44:e5:6f:7c:a0:5e:d9:70:5e:24:c6:41:a9:ca:
f1:c4:ff:3a:76:73:61:77:a4:25:dc:fc:54:5a:90:
57:78:3e:a5:15:8b:73:f6:09:64:72:64:ba:be:18:
c5:f7:6b:b3:ea:e8:d7:84:ce:43:cd:94:7b:7f:e6:
fc:e4:bd:d6:05:4f:69:ed:c0:ed:71:4c:c6:df:2c:
a1:e7:50:b9:95:78:99:42:a1:3d:e1:bf:36:a0:7a:
e3:db:ca:40:74:65:dd:60:29:64:4d:56:00:eb:e9:
7c:52:1f:ad:9a:40:fb:3c:ff:a4:db:3d:19:3d:eb:
a5:f0:ab:48:73:d8:d7:8b:ba:66:9b:bf:53:8f:d2:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:3D:75:97:C8:72:47:15:D4:65:6E:E7:80:47:8C:9B:11:3E:E8
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:91:5b:9e:d8:02:8f:b3:20:7e:f2:d3:a9:93:a7:54:37:28:
d8:aa:41:b7:d3:a8:b6:3a:81:da:47:0d:06:3d:66:ac:e9:f9:
c1:d5:3c:19:5e:79:23:2e:c9:6b:b1:98:be:57:84:13:89:f0:
c2:8b:5a:a4:6c:50:36:7f:5b:66:46:7c:f2:6c:37:5a:98:b9:
f7:6c:a1:73:fa:7c:2e:5b:47:82:0d:d0:1a:82:cf:fb:0a:4d:
f2:ab:0c:92:44:d2:6b:f4:57:f2:1f:db:70:71:25:88:4c:a8:
3f:93:fb:23:0c:c2:85:53:78:b8:41:2a:cb:8a:83:a4:38:49:
a1:70:ab:20:91:c8:e7:a8:dc:3d:f3:a9:4c:ef:71:73:24:4b:
08:5e:87:56:bb:de:76:fb:00:cb:38:76:a4:90:17:1c:51:92:
31:e0:f9:7f:3b:99:0d:97:cd:ef:5c:ca:2c:76:86:df:92:a2:
60:c2:0f:59:34:d3:3c:b5:44:a4:ea:93:b8:16:29:a1:0a:b3:
28:9f:e2:f8:04:11:71:ea:09:b5:e7:a5:38:17:ef:fd:eb:c2:
2c:d8:dd:a0:34:93:c3:12:54:c3:be:84:65:a7:ec:9b:03:f1:
cf:a1:1c:33:55:93:56:0e:0c:e1:b3:c9:d3:a4:af:0a:ab:44:
39:e2:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:46 2026 by rpki-client