Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: zOxhMQ49qvGorja20ZzxPqzmDX1K9ILtebOKHz1YHsA=
Subject key identifier: CF:10:15:7F:09:98:0D:82:DE:63:9D:52:E4:29:03:F1:8B:2F:F3:F1
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01A0D8DF3D061717666CC0442603F00A4801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 11E2
Signing time: Fri 25 Sep 2026 14:01:43 +0000
Manifest this update: Fri 25 Sep 2026 14:01:43 +0000
Manifest next update: Sat 26 Sep 2026 14:01:43 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: UWTucuWuotDeojtbL4Mr1Ovpwx9f8g0HaM2GUqnjFSU=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:3d:06:17:17:66:6c:c0:44:26:03:f0:0a:48:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Sep 25 14:01:43 2026 GMT
Not After : Sep 26 14:01:43 2026 GMT
Subject: CN=cf10157f09980d82de639d52e42903f18b2ff3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:66:cd:53:67:01:bd:41:4e:f3:b2:da:d4:
11:34:fc:92:37:99:42:95:3b:6d:7c:3a:f5:99:e5:
64:25:fb:dd:16:3c:5c:ec:b0:0b:a6:6b:72:08:4b:
f5:55:bd:0b:f1:bc:66:e4:55:a1:09:7f:e0:f2:92:
96:4c:b9:0c:f1:ce:35:0a:1a:3d:d3:4a:0c:31:57:
73:d2:73:0f:ac:c1:f3:2f:c4:02:24:f8:8b:d9:8d:
d8:b0:bc:cb:07:9d:e7:b0:e9:8c:0b:1d:3b:37:ad:
81:e3:e7:66:3f:16:3c:ff:f0:83:8d:bb:95:9f:96:
27:85:5a:53:62:e0:76:01:d1:f6:4a:f7:44:82:db:
d3:32:85:62:a0:b3:3e:52:1d:20:fa:20:74:e0:50:
31:3d:8f:d7:0b:0a:24:f9:b1:40:ff:b2:d4:5b:5d:
f8:af:8e:72:a7:78:8a:41:22:29:96:35:a9:0f:9c:
c9:35:5c:b6:d4:12:76:e4:17:f6:d6:d7:61:02:f3:
ef:40:43:21:c7:54:0a:79:9b:e7:07:6d:69:ea:22:
91:c4:37:24:f9:02:b5:29:ab:0e:24:fa:7f:8e:db:
c4:6e:8c:8c:e2:d8:d8:1e:fa:78:d0:ed:c4:69:40:
53:a6:b6:e6:29:e7:91:ee:d6:39:92:0e:7e:a5:31:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:15:7F:09:98:0D:82:DE:63:9D:52:E4:29:03:F1:8B:2F:F3:F1
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e7:74:24:ed:0b:3d:fa:11:3f:08:3c:e6:4b:8c:6b:09:51:
69:41:1b:f0:8d:2a:75:31:01:7f:53:08:16:37:55:cf:30:80:
f7:23:3c:69:6b:67:9b:a4:42:c1:b7:aa:7b:2c:2c:45:e3:b7:
b9:2c:0a:6e:54:3e:bd:a7:19:66:b0:29:57:f4:4f:90:99:7b:
75:66:50:a1:92:86:e7:49:01:50:a5:a1:0b:a7:b6:e6:b4:43:
30:d1:a7:c6:9d:99:eb:26:05:06:e1:c5:4b:f3:57:70:41:e5:
99:37:78:cd:7f:6b:0b:df:c7:9f:63:45:f7:c3:fa:78:14:a4:
bd:89:18:38:24:28:e6:a8:6f:73:d5:81:0e:02:0b:3b:cd:1b:
db:35:ef:18:ed:5e:9e:b0:59:6a:7b:14:80:27:55:8f:f2:ac:
4f:93:aa:e1:a7:53:04:5a:8e:da:16:60:18:fe:3f:28:17:ed:
1f:a2:a1:6c:a7:d1:2d:41:16:55:09:62:17:cd:9a:ba:a4:5d:
b9:1b:92:6c:be:06:da:67:46:73:36:e9:0d:06:47:31:10:a6:
e3:a9:d6:14:2e:8d:f2:a6:59:a1:0d:87:07:55:4c:b4:51:09:
f0:03:d5:98:70:d4:09:eb:62:2c:69:01:8a:a2:35:b2:c3:42:
82:79:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:19:34 2026 by rpki-client