Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: PBWvreekw1uIqOpzNSG0HVggwhnsBre7iJBNT43ErVk=
Subject key identifier: F5:6E:98:3F:41:31:7E:10:76:C9:5B:9F:37:E8:38:54:A5:8D:21:5C
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 01A0C96B152DE11B0F8D027B67F93D674BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 11DA
Signing time: Tue 22 Sep 2026 14:00:33 +0000
Manifest this update: Tue 22 Sep 2026 14:00:33 +0000
Manifest next update: Wed 23 Sep 2026 14:00:33 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: E6NREFC2SNCASVNxdfEfsquyfkwj1Gj6m9VsBUefwIY=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:15:2d:e1:1b:0f:8d:02:7b:67:f9:3d:67:4b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Sep 22 14:00:33 2026 GMT
Not After : Sep 23 14:00:33 2026 GMT
Subject: CN=f56e983f41317e1076c95b9f37e83854a58d215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:38:19:a0:94:a9:42:0c:e7:56:3d:d1:ad:
7a:7b:a5:ed:a1:15:20:d1:63:bd:47:c0:00:0e:eb:
ac:e2:8e:5c:de:a4:53:c9:ba:ad:3a:93:11:0f:8f:
e6:fd:c3:58:c6:f2:5f:1e:f7:f4:16:cb:03:87:c0:
b2:f6:45:24:b5:3b:8b:a3:15:32:2d:1b:67:88:32:
96:04:45:a7:24:7c:c2:9a:40:a1:e2:7a:6c:3b:bc:
c5:7a:30:be:eb:5e:e5:b0:54:d5:0c:1b:5d:7e:36:
8c:67:c5:56:12:9a:4f:b9:ee:38:d8:0d:88:3b:94:
3f:39:c8:3a:46:aa:8c:24:ef:cc:0e:b0:f9:2e:e8:
2a:53:4d:64:ee:a9:60:da:38:2f:6c:0e:7b:ab:f2:
08:c1:96:97:80:ec:fe:5c:e8:d5:4f:d1:64:b2:a0:
41:23:95:2b:50:de:04:50:0c:b7:6b:b5:f9:70:e1:
6b:52:cf:e2:ef:11:a1:41:47:7a:34:5f:f1:39:73:
f4:d4:2e:d9:6a:80:51:12:92:7f:98:1d:67:cf:d8:
7f:43:d4:a2:09:85:8a:1d:8d:f1:d2:2b:53:92:18:
76:0d:6c:a0:e4:4e:15:e6:26:b4:5b:e0:f5:b8:f5:
35:87:c7:e9:43:8c:9f:bb:6e:72:88:ce:0c:ee:2f:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:98:3F:41:31:7E:10:76:C9:5B:9F:37:E8:38:54:A5:8D:21:5C
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1d:23:53:cd:b0:b6:d1:3c:91:12:c0:bc:b2:b3:50:e3:32:
04:8a:46:97:5f:1a:65:91:e6:29:df:eb:bc:7c:b1:6d:e7:be:
35:6a:c3:d3:4d:4e:06:bf:16:6d:b8:c9:8b:92:6c:86:1c:60:
f5:59:d8:3b:05:93:ef:07:a4:a5:25:a5:e7:ba:eb:e9:19:c8:
93:23:b0:88:1b:54:36:e5:72:39:8a:ce:d9:15:b1:59:ad:c7:
92:21:26:4f:e0:66:ec:fb:8a:f4:54:ec:0a:4c:0f:70:1c:82:
84:e3:1a:bd:9f:a1:91:80:00:83:3f:de:d1:4a:17:bf:78:be:
78:ca:14:5f:44:35:a3:bd:00:dc:30:f0:6d:5d:c3:9f:dc:cc:
18:4b:99:1c:e7:fc:c5:61:07:f4:a7:44:3a:33:0f:df:3c:79:
13:78:9d:74:bc:0a:80:fb:81:cc:51:9e:a6:71:eb:83:08:3a:
40:8d:b4:49:72:d0:30:a2:f4:84:e9:13:5f:47:2a:42:75:52:
5c:96:83:6e:70:59:8e:2a:e9:ed:51:c9:b9:6e:4a:86:0c:0e:
90:70:8f:c8:b4:37:b3:e3:4c:aa:d0:63:48:49:ef:ee:91:5e:
d0:6b:38:6f:c6:de:e6:70:16:ba:3e:1b:86:50:1d:d3:55:f3:
05:18:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:22:26 2026 by rpki-client