Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: ukK14qyytkFiNjN9cDJVAjjjCVkjvOlWqEgMqTjICk4=
Subject key identifier: 28:20:1F:23:A3:1B:4C:A0:0C:80:28:69:4A:6E:8F:29:9A:91:97:26
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019D25834B86082B4A143EEA88921BBF9156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0B78
Signing time: Wed 25 Mar 2026 15:00:54 +0000
Manifest this update: Wed 25 Mar 2026 15:00:54 +0000
Manifest next update: Thu 26 Mar 2026 15:00:54 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: kXxThFtXOSBDolgXag7wxZ6dvNP+PK5Bew9SPq+EzFw=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4b:86:08:2b:4a:14:3e:ea:88:92:1b:bf:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Mar 25 15:00:54 2026 GMT
Not After : Mar 26 15:00:54 2026 GMT
Subject: CN=28201f23a31b4ca00c8028694a6e8f299a919726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:e6:72:03:b2:5a:b5:2b:60:95:45:28:0d:
b2:a7:9e:c0:d2:61:c6:a1:08:f7:e0:c4:da:2d:4e:
d4:44:70:78:5a:db:cc:62:8b:9f:4b:1c:44:81:28:
53:27:74:0d:ec:72:18:15:c5:31:10:dd:a6:ce:6f:
e2:d3:05:72:f7:cc:c3:d4:48:a0:b4:ea:2b:dc:d5:
98:89:44:c7:9e:52:62:f6:68:89:c4:5e:35:da:3a:
e8:90:d6:f3:1e:2d:58:fb:3a:85:55:76:22:21:53:
d6:e0:ed:39:53:e6:fd:a4:f5:69:52:2a:8b:fa:bf:
48:d3:37:c9:fa:d6:00:05:8d:50:7b:e5:42:05:59:
9e:46:b4:41:c0:07:67:95:71:92:bb:5c:fb:2e:da:
73:1b:16:00:cf:42:5b:a1:30:f4:04:0a:69:2e:e4:
d5:4e:e3:c1:f9:87:17:55:7a:23:b5:8b:7b:21:97:
04:f0:87:a2:e2:63:42:ec:ae:ed:a9:62:33:3e:85:
0e:c0:50:89:8a:c4:4e:02:06:9f:9e:68:4e:47:36:
b4:63:4a:43:2a:50:1e:fe:31:6e:f0:1e:a2:a4:3f:
94:dc:5e:ed:b8:e1:87:7a:51:cf:16:c9:57:29:af:
47:2b:9b:d5:eb:27:29:2e:3d:da:6b:cc:21:9c:97:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:1F:23:A3:1B:4C:A0:0C:80:28:69:4A:6E:8F:29:9A:91:97:26
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:06:55:52:a5:da:cd:14:f4:22:c7:66:fb:91:b9:8c:be:
e1:f0:18:98:2f:53:a8:5b:95:49:59:c3:1f:40:38:8e:dd:d9:
8f:13:85:32:67:e6:03:95:f6:ce:02:2d:d9:0e:a0:19:06:eb:
ef:97:07:03:c8:fb:f3:f4:22:91:0c:b1:d0:d0:d6:66:e9:46:
ec:83:fa:34:42:3c:98:9a:ec:75:98:de:2e:97:03:a2:f2:bb:
29:32:8d:da:bc:a9:5c:73:3f:2a:b2:a7:85:00:38:ee:2f:9c:
3a:9e:ab:a4:08:3d:82:86:28:14:42:00:4e:e1:27:84:ac:cb:
65:82:f4:70:a0:17:6d:f9:28:bb:93:ab:2b:3a:69:89:f8:a8:
bf:f8:68:a8:3b:4f:a6:ba:ab:52:97:80:db:5f:c9:e9:95:0a:
34:86:b5:a0:26:0b:60:52:f6:0b:f2:76:12:72:48:60:18:e1:
b0:82:f8:8b:2d:da:3b:25:6b:82:20:90:c3:b3:79:c7:48:1d:
a5:e3:49:50:51:19:dd:97:6a:8a:3c:3f:03:82:33:cf:9f:c3:
c4:11:9d:87:30:2b:1e:b6:e7:68:6b:73:e1:fa:b6:3e:2e:6d:
5f:d9:2c:b6:f5:39:a3:dc:8b:22:d9:c7:8a:c3:5f:90:87:30:
ea:a0:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:08 2026 by rpki-client