Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: QN3VXIeA5tsQb5XF1ACOlX6SP1Ru4GvYs3oHKhjkd0o=
Subject key identifier: 69:0F:DD:B7:1C:42:5C:D7:FC:D4:B7:B1:41:19:30:09:CD:3E:5E:8F
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 01A1DEA7A72831F85774DD04AFB8469B8ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0FD7
Signing time: Sun 15 Nov 2026 10:01:31 +0000
Manifest this update: Sun 15 Nov 2026 10:01:31 +0000
Manifest next update: Mon 16 Nov 2026 10:01:31 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: MG0ZaJt085Ae5azUnIHO4hXKiczVMLqPCOiMehI/LZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a7:28:31:f8:57:74:dd:04:af:b8:46:9b:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Nov 15 10:01:31 2026 GMT
Not After : Nov 16 10:01:31 2026 GMT
Subject: CN=690fddb71c425cd7fcd4b7b141193009cd3e5e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:e0:d2:e8:be:c8:97:63:80:8b:ad:9d:1e:
a7:59:88:ea:57:f5:53:0d:d0:97:fd:c4:e6:f8:81:
92:1b:bf:7a:5c:42:94:9a:e0:52:b1:89:f3:29:ab:
ed:40:a1:ff:8f:43:c9:5e:62:9d:29:51:7e:fc:07:
61:1c:6f:46:cf:97:52:e4:1f:35:1f:7b:1b:3b:00:
84:ee:fb:b4:db:3b:41:49:ae:d6:87:48:57:ba:e3:
ef:37:74:df:0f:9e:85:c4:e5:df:41:93:88:21:10:
44:fc:22:47:63:8d:c3:7c:e0:27:19:3b:04:8a:75:
5d:78:73:4a:7e:39:19:42:f5:5e:aa:e4:ac:54:9b:
3e:db:8c:0b:4e:b6:7c:e1:a2:09:e9:97:31:25:e1:
37:17:bc:e3:f3:99:a0:7e:f9:83:10:cd:cd:6f:e9:
df:c8:cc:c1:6e:10:5e:03:50:91:65:6f:44:4e:7d:
9a:21:0f:55:f5:77:2d:b8:d9:bc:e3:b0:52:55:ae:
2b:b1:1d:c3:bf:1d:5b:24:b2:59:fb:75:ce:28:0e:
68:95:9b:bf:6d:82:3c:20:76:97:13:a9:0e:fd:c3:
05:8c:55:a4:a9:08:8f:85:cc:87:ea:a2:26:72:1b:
40:86:cd:6f:1d:b2:77:64:85:62:19:f5:61:fb:a2:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:DD:B7:1C:42:5C:D7:FC:D4:B7:B1:41:19:30:09:CD:3E:5E:8F
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:a5:33:a2:28:bb:ee:25:8a:b8:bf:e3:1b:eb:41:91:21:
3c:23:5c:21:15:6a:db:7a:ee:c6:93:78:c0:ec:33:c2:57:b6:
ff:d8:10:46:1f:fc:9b:7b:2c:52:9c:c4:a8:f9:f4:3c:7c:22:
6e:c6:f6:69:b9:18:c9:b6:20:32:e6:87:d4:e7:ef:df:53:e4:
c2:49:0e:bc:22:cc:17:dd:b4:a4:93:a3:b2:11:a8:e2:61:4c:
98:68:60:58:e2:b2:1f:d8:28:45:dd:6e:57:cb:27:64:b2:95:
66:7e:1f:be:40:13:0b:7b:4b:35:10:4b:a0:36:44:b2:1d:0a:
a8:bb:a9:61:02:aa:e3:fd:05:e5:c3:60:85:17:06:8e:72:ab:
51:49:7f:10:17:00:fb:2a:3e:37:3f:99:02:fd:d9:4d:9a:91:
95:47:e8:41:88:84:a9:1c:58:3c:2c:75:b0:4e:b4:91:8d:fd:
59:4c:bb:cf:40:0a:08:2e:48:2d:2e:80:1b:1e:a7:df:cc:2e:
8d:14:2b:58:3e:aa:71:6e:1d:b7:3b:e7:3e:f6:8f:cf:29:9f:
e0:5f:d9:60:d9:0c:be:cb:ab:47:60:78:a6:d2:46:82:d6:be:
9a:b9:c6:b8:d0:aa:9d:6a:3c:f3:62:a7:85:89:c4:0e:c0:22:
f2:61:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:24:12 2026 by rpki-client