Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: 4AdF3n5YZQSv0BWYbuHh/VC0wQJIM7TeAUHTjyuO8ow=
Subject key identifier: DB:E6:B6:85:1E:D0:38:9C:C8:4A:4D:3B:D9:E0:A3:39:31:7B:29:50
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 01A0CA47AC098009A5D7BCF166D6F8356887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 18:01:29 +0000
Manifest this update: Tue 22 Sep 2026 18:01:29 +0000
Manifest next update: Wed 23 Sep 2026 18:01:29 +0000
Files and hashes: 1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: pOp5d0I/JC+GSGaX7ZKdwE6PFT2QwpaAFtjBYZWHm1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ac:09:80:09:a5:d7:bc:f1:66:d6:f8:35:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Sep 22 18:01:29 2026 GMT
Not After : Sep 23 18:01:29 2026 GMT
Subject: CN=dbe6b6851ed0389cc84a4d3bd9e0a339317b2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:a4:9f:24:5e:22:75:cc:79:46:f3:e7:29:
5f:ea:c7:31:71:2a:9b:5e:d4:e3:ef:66:71:b4:ab:
8e:47:e6:9c:a3:7d:08:d2:19:53:34:5d:9e:43:8f:
d7:1a:ac:17:3a:a8:4e:88:18:aa:50:21:c2:df:0f:
94:cb:0e:58:de:51:75:e5:5c:ef:61:df:dc:1f:65:
00:45:b6:be:e3:03:c5:f4:b2:6a:68:90:48:f5:2c:
9c:d5:92:4c:d5:41:5c:53:56:19:43:9d:80:29:a8:
81:96:e4:fd:16:b3:cd:50:ac:74:a2:65:86:4c:c3:
bd:39:53:b9:00:25:cb:2a:93:27:87:b4:c7:e0:8a:
27:54:a9:99:f6:a9:1a:fa:b2:5a:13:b7:44:6a:4c:
bc:bd:0e:34:fb:4b:44:09:d5:21:d2:88:15:db:bc:
90:f4:32:d6:15:7d:a6:9a:ec:6e:ca:48:df:c9:0d:
52:67:08:4b:66:04:d7:ef:d4:03:8f:65:50:5c:d1:
ec:d0:24:65:7c:46:5e:23:ef:f2:cc:8e:78:cd:13:
55:2d:03:8c:56:64:ae:51:56:b1:c6:08:21:05:1e:
83:30:3c:f2:ba:5c:ec:6d:78:31:68:2f:77:c2:f6:
40:72:8d:44:93:6e:0f:b2:45:cf:c3:58:5b:cb:e5:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:B6:85:1E:D0:38:9C:C8:4A:4D:3B:D9:E0:A3:39:31:7B:29:50
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:09:11:70:bd:ad:2c:87:89:61:f1:8a:66:d5:92:53:45:
36:f0:25:aa:5a:4b:e4:d1:de:26:51:df:e0:1d:ab:b3:23:91:
9c:8c:54:31:01:34:f9:03:81:0f:e9:76:27:ae:89:fd:c6:94:
71:d1:bd:fe:45:aa:11:45:4d:02:4f:17:ed:21:dc:0b:2d:ac:
ba:91:4c:2c:86:8e:37:4e:c7:47:d9:50:6f:cd:7d:c3:d1:1b:
53:e3:ac:c1:f4:67:d4:08:c3:cc:bd:08:c6:4b:d6:48:f9:37:
66:ca:fe:9d:54:11:5c:82:3e:f4:bb:ec:00:a9:51:58:6c:36:
be:dc:1a:57:db:e4:61:6d:64:6e:72:a3:9b:6d:13:49:70:ec:
b2:bd:16:64:22:69:38:33:d3:35:1b:6a:47:6f:03:a3:3b:4b:
ff:03:1d:c6:aa:83:bc:60:46:29:93:bd:6b:a9:33:1f:81:1e:
4d:31:f1:7b:26:eb:bc:3c:0c:5b:ac:cb:78:91:16:4a:50:52:
25:9b:38:4c:40:8d:e2:08:3a:de:73:78:83:45:d2:5b:6c:f3:
c1:b1:6c:21:91:1b:fe:f6:3a:1c:55:a2:e5:d6:3c:8a:cc:3b:
61:c3:a8:ca:96:55:e3:6f:53:42:2b:82:5c:78:3b:5a:31:f5:
e4:df:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:40:56 2026 by rpki-client