Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: IhB2cB7R/PLWxcG5XJtgTEbwiHAktda22X7FBp6nwgA=
Subject key identifier: 05:FB:1A:3C:29:6D:EE:58:F2:A6:19:2C:0F:6E:92:8D:F0:6A:A6:0E
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019D269641B32C867B84F4D084C6680018A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0FF8
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: hA/YTmBLiIZr5WZmjXNiaHmvwfcuNqjGdpSY8zvZlgo=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:b3:2c:86:7b:84:f4:d0:84:c6:68:00:18:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=05fb1a3c296dee58f2a6192c0f6e928df06aa60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:1b:7a:34:e5:82:58:9b:ca:33:7b:aa:3d:
9b:24:f5:ec:40:80:b6:00:5a:40:e3:bf:b3:f3:48:
a7:66:62:0e:8c:94:65:ce:3e:75:e7:d5:14:60:95:
3b:c5:a4:7e:c2:6a:d9:ed:53:f4:74:c5:ce:95:3d:
51:27:81:a6:a8:3d:39:63:04:11:1d:18:bb:40:31:
e9:54:02:07:a6:7c:06:a1:0f:59:69:ff:02:b2:4f:
51:65:0c:45:db:68:52:9b:0d:bf:dd:9c:86:e4:1a:
43:c9:17:96:c9:2b:2c:fc:c2:6b:39:b4:96:0b:88:
12:a7:1f:3f:67:1d:d0:2f:13:5e:50:3e:bd:37:c2:
87:7c:17:94:de:82:5b:ac:a4:4a:ad:e0:1b:5d:96:
35:81:80:06:e0:b0:7b:c7:80:67:42:8c:4b:e4:8f:
2a:12:3b:00:bd:ac:e6:78:14:85:b8:c8:5c:10:69:
a4:10:8d:e9:9f:9d:3e:b0:e4:7c:d0:94:e2:48:79:
50:b7:59:6b:41:a2:34:01:56:a7:0f:3b:ef:61:9d:
72:5d:bf:fc:6d:1f:30:f4:24:37:dd:42:92:0d:8c:
21:67:c9:ec:4f:aa:cf:82:a7:b5:e4:5c:bb:2c:b7:
bc:af:f7:c1:82:61:c2:99:15:3a:22:03:b7:47:8d:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:1A:3C:29:6D:EE:58:F2:A6:19:2C:0F:6E:92:8D:F0:6A:A6:0E
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ae:d9:b7:da:ae:8e:75:c3:e7:f9:05:3b:68:44:9a:b4:d4:
7d:a4:f5:b3:da:2c:44:ac:bd:cf:b8:68:6b:12:f4:c0:05:1b:
5b:55:22:24:40:e0:31:0f:6f:65:9c:42:00:86:e6:e5:5e:8f:
7a:b2:56:c4:d2:2f:08:22:27:7c:a5:20:92:21:46:d9:66:48:
68:c1:d0:db:12:57:9f:15:cb:41:5b:bf:25:4a:e3:0b:a0:e7:
62:79:97:43:24:b2:98:a9:a5:8f:39:a1:52:d2:12:fa:1d:b9:
b6:85:83:44:04:5f:b0:a2:7d:5a:7d:52:11:81:03:84:f7:eb:
56:7c:d1:8f:62:45:5f:72:4e:58:ef:1e:9c:02:69:98:a5:cb:
7e:3d:a9:30:56:3f:df:4e:22:1e:f5:2f:d1:48:a0:b2:91:80:
2f:45:5d:34:e5:b6:b0:3c:76:42:19:6b:30:3b:57:a4:1f:65:
cb:d2:a8:c6:16:28:dc:cd:cf:44:74:20:89:a0:6a:37:27:4c:
56:20:49:02:1d:ec:6f:e3:15:0e:ad:63:0a:6b:a0:df:09:79:
ae:f6:38:ee:82:ef:9b:db:17:53:af:8e:cc:3e:32:e9:bd:c7:
f7:5b:3a:52:9b:dd:ec:55:89:fc:06:3f:21:f1:2c:40:73:aa:
09:c0:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:12 2026 by rpki-client