Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: PJiDfuuYsMZivaBvZqcfwO3ekb74x/xJySZo1n3mz5s=
Subject key identifier: 25:95:CF:31:51:ED:86:02:5E:0E:A6:F2:8F:93:B0:85:D8:EE:79:B7
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 019D29612FD50407F0AA4EFBA335358E9115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0EDA
Signing time: Thu 26 Mar 2026 09:02:08 +0000
Manifest this update: Thu 26 Mar 2026 09:02:08 +0000
Manifest next update: Fri 27 Mar 2026 09:02:08 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: akcc4NjCPjEgIkuj3whtgcusQdq1YUuudIYhEfZQisM=)
2: c0qjnxMkH3o7BZA9mjDB8PjcK9Q.roa (hash: fEnYLhGdSUfVNqcVBY8ilLsCtbiLQsP9mptf7JMTUOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2f:d5:04:07:f0:aa:4e:fb:a3:35:35:8e:91:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Mar 26 09:02:08 2026 GMT
Not After : Mar 27 09:02:08 2026 GMT
Subject: CN=2595cf3151ed86025e0ea6f28f93b085d8ee79b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:5f:4f:18:4c:fb:8b:e8:c0:9c:9c:be:f0:
ef:b0:88:6a:24:46:f2:38:c8:fd:26:b0:c4:6d:db:
fd:a8:ab:08:11:42:79:1e:56:d4:61:5f:c0:dc:03:
ed:9c:51:6a:52:e0:70:f2:f7:1b:cc:01:68:8a:f6:
4a:03:f7:d0:60:13:da:8c:fc:ab:1d:fa:05:e8:bc:
dc:c3:6b:f4:09:a2:a0:8b:51:ba:b5:ba:3a:8d:56:
f6:0c:ce:3d:a6:d0:0b:7f:04:c2:0f:68:89:26:c3:
c3:44:84:d3:e2:14:2c:dd:38:29:8d:fb:c4:60:07:
bc:44:df:62:7f:35:ca:54:6a:c4:a2:62:9c:2e:a1:
64:72:7d:c7:7d:98:15:b6:ca:31:e0:16:fd:35:20:
fc:fb:c4:1d:fd:18:ab:cc:55:aa:6b:f5:3e:2c:45:
18:77:70:96:0e:58:8d:98:b6:41:bd:08:ab:f2:f8:
84:34:fa:db:47:6c:84:33:34:74:ca:08:97:64:e2:
5d:46:87:52:b7:e3:c7:70:00:b5:ea:2e:f7:8b:4d:
ce:07:c1:a1:31:ee:77:8a:52:bd:59:04:40:25:df:
06:5e:16:36:2f:82:86:4f:c0:39:23:4b:4a:95:5d:
ad:5b:94:49:9e:f3:2e:b9:93:00:42:e6:07:19:7a:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:CF:31:51:ED:86:02:5E:0E:A6:F2:8F:93:B0:85:D8:EE:79:B7
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b2:fd:8b:54:98:ef:16:3f:b6:aa:2c:cf:6a:ec:23:75:13:
7f:99:28:b8:10:d7:e4:43:0c:c4:60:01:0a:cb:e5:30:d3:4a:
12:84:1d:e4:ed:5d:d6:2c:ef:db:48:69:66:0e:83:8e:40:11:
1f:25:5f:0d:06:07:65:7c:8c:e7:0f:8a:2f:eb:95:67:b1:66:
7e:8d:1e:09:d7:c7:6f:bb:c9:d1:14:63:21:a5:ef:0c:2f:94:
a2:0f:7d:c9:eb:38:ee:c9:0d:40:56:81:05:ee:ab:fa:16:a9:
41:17:95:d8:0f:e1:e9:e4:3f:8b:96:d7:b7:50:34:35:06:d1:
70:06:59:70:f6:fd:42:ea:05:85:0d:36:cf:e8:e0:0c:94:ac:
9c:4f:2f:28:88:44:3d:9b:0f:87:b5:38:ba:e4:40:13:c8:af:
da:fd:41:d5:65:19:dc:32:e3:97:5e:b2:39:e8:dd:82:af:4d:
b5:a8:f6:1c:b8:f8:00:6e:f9:1d:79:e8:f6:a0:db:ec:19:24:
16:9b:1b:a8:8c:bb:ca:1a:26:c4:e8:66:c6:0f:43:0d:18:c3:
46:d3:d9:eb:97:36:6d:a3:f3:95:62:19:7a:41:95:0a:f8:c3:
e5:19:ec:87:c7:00:57:11:a9:dd:b4:6e:a3:b4:22:cd:64:cd:
f3:3b:59:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:32 2026 by rpki-client