
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: N/miu+yqLXAcFmj1ADKf6a+dqrUbmgL96/z3o5oZ1o0=
Subject key identifier: 8A:E6:B1:0B:B4:F8:FE:9E:3C:C0:DD:78:07:7C:11:4C:EF:E0:FB:18
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019F946E0CBABD0BBCB2AA24F725755B2321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 113A
Signing time: Fri 24 Jul 2026 14:01:07 +0000
Manifest this update: Fri 24 Jul 2026 14:01:07 +0000
Manifest next update: Sat 25 Jul 2026 14:01:07 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: sY+fLEb9BnYUZ/JCyIrSt3DtJCHo3EPTjK0L4MzquOA=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:0c:ba:bd:0b:bc:b2:aa:24:f7:25:75:5b:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Jul 24 14:01:07 2026 GMT
Not After : Jul 25 14:01:07 2026 GMT
Subject: CN=8ae6b10bb4f8fe9e3cc0dd78077c114cefe0fb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:06:8d:7a:f4:c2:6b:46:ee:80:5d:17:f9:
87:4c:50:ef:df:61:25:7e:78:ee:f7:77:02:9f:8e:
ca:e6:37:a9:a7:bb:54:1a:49:90:ae:54:7c:d5:e7:
f8:00:78:25:ed:a5:a0:b2:bc:8e:2f:54:91:63:f6:
88:7d:b4:27:99:94:e6:c3:20:a3:1e:cb:c6:f0:11:
d9:29:9e:42:9c:ec:ae:89:b6:c9:1b:a3:21:ad:ac:
41:c3:ea:9f:f3:3d:66:cb:d5:55:ec:49:27:42:12:
cd:ee:23:e3:c1:7e:61:d1:61:79:1b:15:7a:85:51:
67:e9:51:f4:6f:e3:64:80:ca:9a:12:fc:00:62:d0:
b8:fb:ef:86:66:b4:58:b8:1b:d4:69:40:b7:92:d5:
4a:ae:83:88:47:62:67:07:48:99:d8:be:dc:47:d5:
51:d8:59:41:06:d5:ad:7e:93:47:f5:4a:fa:8d:f6:
f0:57:f0:b6:ca:f6:06:22:a7:54:e3:82:40:8a:f0:
4c:bc:c3:5e:72:f1:0d:6b:11:c4:a5:7d:00:13:20:
69:a1:c8:99:04:69:89:42:80:09:af:85:67:e0:3a:
b9:07:6d:9b:7d:14:cd:18:26:5b:77:55:fc:33:44:
2f:54:e0:50:ff:62:b5:86:c7:a2:22:97:f8:3a:3d:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:B1:0B:B4:F8:FE:9E:3C:C0:DD:78:07:7C:11:4C:EF:E0:FB:18
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:81:02:84:1d:95:f9:77:81:99:f3:db:ce:67:56:25:1f:
87:a2:e7:24:ba:f9:1c:1f:c4:b0:71:ae:cf:d7:fa:e2:d7:13:
ee:0a:fe:92:ef:ba:ee:09:25:e5:5d:4e:44:5a:63:19:6f:9e:
7e:d4:31:19:ee:77:cc:f7:39:3e:42:e7:5e:35:11:9f:15:ec:
a6:1f:9c:83:73:08:25:31:e4:ba:06:e2:76:ed:77:54:8a:a1:
d3:83:05:e5:14:8d:7b:ca:ed:b9:e1:bb:93:76:8d:9f:50:a5:
19:d9:14:27:59:8d:f7:be:3d:51:b5:61:0d:19:c0:41:ac:e6:
da:f8:26:51:69:b6:80:ce:92:79:1f:ca:5e:48:7f:a9:0f:9b:
37:7c:29:26:37:11:1d:9b:0d:ab:16:8d:95:d3:da:ca:00:53:
4c:54:ae:8b:14:25:43:cb:20:cf:fd:89:aa:c2:95:4c:a6:07:
dd:86:6c:4b:50:ac:60:e1:a5:13:6a:0b:32:b8:05:34:de:4b:
56:1c:6a:0e:ba:ca:d2:1a:28:21:9b:31:30:64:2a:28:b9:a5:
bf:62:a9:6c:91:83:6e:80:45:81:9f:8e:19:84:7c:e2:d1:15:
97:d2:df:dd:a2:ee:2e:a9:60:d8:03:de:cd:84:50:65:b6:87:
3f:44:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:28 2026 by rpki-client