Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: 7d50pRgZQhG7wkL+iT+ugugZ+jSsdSpeMCmTweHOTQM=
Subject key identifier: 6A:DD:B3:13:A8:D6:33:7F:12:A6:1B:5E:99:CC:6A:1C:1A:2F:A4:83
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019E1CB56FEC7311D92FC5B5AB6D3BBA254C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0BF8
Signing time: Tue 12 May 2026 15:01:53 +0000
Manifest this update: Tue 12 May 2026 15:01:53 +0000
Manifest next update: Wed 13 May 2026 15:01:53 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: Cf2X2E6K2sZt62hCHICShmitUSE2qEsKzNuR9NaqWDM=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:6f:ec:73:11:d9:2f:c5:b5:ab:6d:3b:ba:25:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: May 12 15:01:53 2026 GMT
Not After : May 13 15:01:53 2026 GMT
Subject: CN=6addb313a8d6337f12a61b5e99cc6a1c1a2fa483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:98:78:0d:f3:12:d5:e8:5e:53:62:0b:b0:
c7:43:6e:35:2d:fd:b2:10:93:f6:9a:e5:16:9b:31:
04:8f:a8:5e:84:ad:75:50:49:6e:e2:00:ed:52:1e:
67:ff:f9:f9:9c:7a:23:4f:da:23:07:5d:52:81:d3:
a3:ea:d7:75:76:5c:40:b7:4b:1a:54:da:02:d7:f2:
77:e3:bd:35:3b:f7:0b:99:2d:4e:0f:ce:50:2c:c7:
b3:96:66:95:a4:1a:94:45:60:cf:ec:73:61:30:29:
65:0f:71:83:61:f5:66:f5:92:aa:3c:8d:81:76:71:
a4:aa:d4:cd:95:25:c2:30:58:e3:50:e6:42:12:56:
56:d9:b2:9c:51:db:e7:87:48:c7:3c:ad:4a:16:87:
89:ca:45:7d:88:8c:43:cd:77:72:29:cc:e7:f1:86:
29:1e:1d:50:13:c3:03:e0:12:f9:c4:f6:e5:d4:6d:
8e:75:b7:13:27:a4:73:cb:a7:3c:2a:b9:c0:45:dd:
41:8f:4e:e0:10:f9:74:95:ad:7c:7f:18:9a:c9:45:
7b:f5:a2:64:c9:c5:8a:b5:96:e1:1e:ea:75:4e:5f:
bb:c0:61:60:f7:33:e7:f6:ba:a7:fc:87:48:67:0e:
f4:54:eb:bc:57:98:10:61:52:fb:84:8f:e6:f5:60:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:B3:13:A8:D6:33:7F:12:A6:1B:5E:99:CC:6A:1C:1A:2F:A4:83
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:2e:13:d0:bb:ec:72:9b:37:7b:4e:07:01:4d:35:16:5a:
80:a3:d0:55:0f:b8:fb:b8:ff:90:76:6d:e4:17:c4:80:24:9d:
42:31:1e:d6:63:b1:ad:12:cf:99:a6:ee:0a:54:e7:e0:b3:24:
f1:ca:f9:9d:bb:8a:07:08:11:35:e3:c3:ff:76:81:4b:ae:8c:
72:b9:83:7a:5a:32:2a:31:0f:64:6e:6d:74:3e:5f:19:4d:85:
de:f5:2f:c7:05:04:09:d2:a7:6d:45:44:7a:52:d5:6a:9d:73:
52:1c:ec:76:00:54:55:8a:68:a7:8b:a0:c8:2a:9e:1b:df:f6:
f8:bf:20:e3:cc:0c:3d:6e:39:f8:b2:7f:38:6a:60:39:ec:1a:
76:05:41:e6:65:9f:e7:d9:84:98:a7:12:98:4c:d5:59:e6:2f:
e3:ec:10:84:f9:85:f9:35:e7:ba:68:73:11:b0:35:de:b9:66:
22:06:a0:af:b1:b7:bd:c4:53:47:7f:bd:25:cc:8a:c0:88:e0:
a3:e7:1e:f4:5b:68:f3:35:74:be:01:0c:4b:0b:7b:8a:e7:d6:
b9:7a:b7:48:7c:c8:be:0e:ad:49:88:fe:8b:60:5a:fd:f8:1c:
6a:26:a7:ae:bc:f3:e6:e4:25:b4:e6:38:90:ea:f2:e5:82:03:
27:8e:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:02 2026 by rpki-client