Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: JPaspZ13F9wfJXfmiveVqdq9QgpC/SA6X7LERCERGBQ=
Subject key identifier: 5C:15:E2:E3:83:98:BA:76:B5:72:1E:BF:1E:A2:E2:31:46:5D:0F:99
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 01A1E027C0A56E111C0126E9540103E32DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 12F9
Signing time: Sun 15 Nov 2026 17:01:03 +0000
Manifest this update: Sun 15 Nov 2026 17:01:03 +0000
Manifest next update: Mon 16 Nov 2026 17:01:03 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: qOsantPBuggeWHIgG6IMKTueXuv+RPQv/Mbb2K0lqT4=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:c0:a5:6e:11:1c:01:26:e9:54:01:03:e3:2d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Nov 15 17:01:03 2026 GMT
Not After : Nov 16 17:01:03 2026 GMT
Subject: CN=5c15e2e38398ba76b5721ebf1ea2e231465d0f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:60:f5:d4:d6:50:ee:e9:3c:f4:ad:68:83:
49:c1:87:31:cc:e4:d4:2b:47:0a:e2:ae:7e:50:ba:
02:1d:60:6c:65:52:96:28:ba:3b:00:98:b5:55:71:
5b:0a:15:ea:b5:c1:49:5a:d8:71:c2:57:a1:8b:7e:
03:b9:16:d2:46:39:b1:7c:f1:dc:c5:b4:a3:72:c8:
9c:0f:b7:49:f6:bf:fa:31:42:c8:b3:a8:89:d1:a8:
de:7e:a7:32:b1:e2:ee:d7:3c:bc:c0:29:b5:18:67:
f9:ba:4e:d9:45:01:44:dd:3f:3e:75:46:72:a1:ee:
d9:b9:a5:5c:85:39:3b:2e:32:b5:e6:d9:f7:50:9d:
de:2e:60:d2:7f:e7:bd:e6:00:f8:64:0c:e5:55:4e:
43:45:c4:86:4d:04:17:e8:7f:0e:41:48:ac:7b:50:
44:d3:cc:75:a3:a4:c7:f3:59:c2:0e:33:27:a1:37:
72:58:0a:98:4a:e4:91:0b:b5:a5:6f:41:c4:eb:cd:
d9:6f:84:94:e1:b4:9e:70:56:fc:02:22:d1:9b:4e:
4d:79:8d:24:9c:ae:51:18:52:ff:11:bd:52:d8:b6:
a6:f7:88:c0:eb:9d:41:0c:23:b8:0a:1a:3c:60:67:
1d:eb:d0:70:70:13:dd:ad:83:24:c1:ef:76:70:cd:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:15:E2:E3:83:98:BA:76:B5:72:1E:BF:1E:A2:E2:31:46:5D:0F:99
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:13:7b:29:1d:b8:0b:d1:84:5d:41:a0:0d:30:44:bc:4b:
14:49:ad:69:0b:7e:7d:f2:de:d7:1a:26:32:90:e8:b1:2b:15:
5a:27:4c:80:9d:7f:29:f6:fa:06:eb:e0:c0:8d:f2:e7:87:f5:
4d:57:ed:07:50:66:c2:bb:b4:fa:85:35:51:85:f0:ec:be:75:
b3:54:ca:8f:0d:52:e7:e0:77:f8:b7:20:3d:71:5e:df:b8:88:
86:e5:f2:df:24:66:94:45:0f:d0:f8:34:5c:8f:8a:54:74:d2:
a3:26:ee:dd:30:4d:11:dc:a6:26:7e:1b:3f:30:e4:17:31:d1:
db:bd:0b:da:d8:8f:49:f7:8c:43:bb:16:b1:d9:32:cf:9a:4e:
10:cd:fd:30:1f:33:88:7d:40:4f:7b:67:69:92:cc:4c:a2:02:
49:ee:53:8c:ea:4a:a6:34:ea:65:1f:2e:2b:44:82:3c:d6:8c:
cb:36:a5:de:70:21:9a:b0:a4:3a:2a:5e:c4:ef:58:04:73:0e:
60:ff:e8:f8:ce:54:24:8e:f3:d2:1f:c6:e1:97:e4:01:35:a2:
f4:07:0e:62:8b:94:80:05:a4:dd:b5:0c:80:73:46:a3:85:45:
8c:e1:b4:21:8d:43:fb:fe:96:82:16:f4:19:52:78:9b:04:28:
e9:ac:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:57:17 2026 by rpki-client