Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: 0o1w86y0BvTUvmBWpLeN8oell51VNPHFR3wpuWSU0Ag=
Subject key identifier: 0A:FC:3C:BC:02:9F:D5:78:95:A8:20:4C:C8:D2:5E:AB:8C:A2:CD:8A
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019F916D5CBF4B0D9436A61441DC5B3D54CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 081C
Signing time: Fri 24 Jul 2026 00:01:31 +0000
Manifest this update: Fri 24 Jul 2026 00:01:31 +0000
Manifest next update: Sat 25 Jul 2026 00:01:31 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: 0Vzscbx4K4ZTLMiGlD1Ftt1M+VgGWcsZDHn9PtbEDjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:5c:bf:4b:0d:94:36:a6:14:41:dc:5b:3d:54:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Jul 24 00:01:31 2026 GMT
Not After : Jul 25 00:01:31 2026 GMT
Subject: CN=0afc3cbc029fd57895a8204cc8d25eab8ca2cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:da:07:53:f9:a7:5c:9e:03:93:ec:ad:e1:
9f:87:f2:ec:06:84:45:5f:17:bd:13:68:3f:db:3b:
66:75:36:74:19:af:f5:a1:7e:5c:64:3e:15:0a:3e:
20:0b:2c:52:a7:dd:30:3d:e5:84:ac:01:d8:a7:55:
09:91:5c:4a:97:4c:fe:12:6f:95:bc:ff:ad:67:b4:
6e:bb:6e:f8:d9:43:ca:39:d7:4b:ab:a7:e5:5b:7f:
5e:78:14:8f:f8:de:fc:c1:fa:51:dd:0b:30:71:51:
c7:15:ec:ec:5f:cc:83:8e:d9:b9:df:23:dd:41:8c:
f0:76:98:61:ad:1b:50:b3:f2:45:c8:dc:30:d8:b3:
0a:64:2e:dd:7e:a3:56:91:44:4e:65:cf:7a:0e:24:
f0:d2:ad:35:64:16:7c:ce:94:3f:4e:0b:01:d3:bd:
38:c4:15:36:e2:92:f5:1c:9c:c2:cb:a1:ee:bb:c1:
a6:b4:e1:02:10:c9:87:ba:a8:a7:da:02:38:46:99:
28:fa:88:d5:3f:d0:48:93:e2:ab:bd:fe:6e:d9:23:
21:82:31:39:01:d4:3c:f5:64:5d:3b:53:6e:2c:ea:
79:14:98:e4:c8:1a:cd:57:c1:fb:9f:72:d4:a0:4c:
35:7d:10:4d:9a:f6:13:c6:14:4a:4a:34:0b:45:4e:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FC:3C:BC:02:9F:D5:78:95:A8:20:4C:C8:D2:5E:AB:8C:A2:CD:8A
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:ba:2b:68:6b:88:2d:cc:27:02:a7:ad:e7:e9:9b:d5:1b:
e3:1e:c3:fb:95:52:28:94:39:49:88:3e:a9:25:87:ed:d8:32:
6b:24:30:a7:0b:e7:3f:fb:9a:06:68:e3:b7:cc:27:5a:37:58:
6b:d3:c6:a5:a9:0f:49:68:93:72:14:7c:ab:f4:fe:87:21:8f:
42:03:31:40:4f:b1:52:28:3b:0c:1f:67:a5:41:3d:a5:24:cb:
66:06:be:50:d5:26:ca:bb:a8:6c:0b:6e:28:24:82:9e:cc:db:
47:c8:a1:6d:d5:6f:b4:68:8b:6e:bb:9f:ad:0b:a8:46:4c:5a:
13:2b:8b:a6:c8:91:85:28:10:9c:c7:74:41:b1:89:e7:6c:2b:
7c:be:2a:da:f8:0a:33:f8:bb:5d:65:be:86:e4:04:b8:f9:77:
64:5a:3f:f5:3d:2b:0a:11:8d:49:e5:42:fe:b4:91:0b:92:a7:
3c:be:bf:56:1e:1d:fe:4d:8a:f3:48:7e:74:15:00:4e:13:f2:
73:8f:fc:94:1d:72:e5:2d:48:07:de:b5:54:61:1c:00:af:c1:
d2:3b:17:f0:fe:d2:2c:34:8f:35:78:54:c7:96:3e:60:1b:e6:
c2:73:f4:71:70:a1:9d:90:85:62:e3:5c:3b:8a:ee:dd:d4:c2:
2d:ab:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:07 2026 by rpki-client