Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: 8tsMsfWpc2UAxVzsTa1r/DKDEuDcUMYIZ7c7pvZW3Mg=
Subject key identifier: F1:63:0C:B2:00:A8:7F:8A:EA:CA:46:E7:C0:81:C6:44:6C:52:EF:AE
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019CAAFD2935E90FF4D2E39829B5A9B9FCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0FB8
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: vhF93lbs31pYefCtEL3iF1Sy2QM2i9+ts/epY3q/xRU=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:29:35:e9:0f:f4:d2:e3:98:29:b5:a9:b9:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=f1630cb200a87f8aeaca46e7c081c6446c52efae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:9e:5d:27:dd:97:2e:6f:8d:70:b3:c2:aa:
77:42:3a:3f:11:8a:a5:fb:ab:da:c7:5d:6b:c3:00:
76:c3:07:63:7b:99:ed:ad:59:d2:3d:cc:3b:5f:a6:
f7:3f:8c:c1:40:63:85:67:aa:94:e9:ff:97:6c:b5:
6f:73:48:31:70:35:d6:85:7a:71:58:b5:16:57:10:
6a:11:99:89:81:d7:64:30:f2:31:52:ea:16:9e:1f:
14:69:0c:c9:53:ba:d0:99:d2:fe:83:01:f0:91:46:
ac:fd:82:e4:b8:b9:1f:fa:0b:cb:60:4a:f2:76:2a:
2c:61:ee:70:11:79:aa:96:7b:4a:3c:3a:51:30:b4:
fe:6c:b5:f7:e9:b4:a3:a4:b9:0c:05:70:d5:0b:c1:
23:2e:ce:ca:b8:99:c4:ec:1c:88:58:76:1f:83:2b:
45:aa:48:36:72:09:c2:31:ff:c8:f7:7b:d8:f6:5c:
66:53:6b:ad:bf:d6:64:57:7b:47:06:d0:b4:92:4d:
ef:d6:1d:b8:aa:7b:f5:dc:2a:e5:71:43:a5:b5:fb:
e7:ba:bb:6b:7d:91:fc:b8:1c:8a:5c:96:cc:1e:c4:
75:9e:7a:41:0c:8b:d7:97:f3:0f:68:5b:c4:6d:50:
fa:b6:8b:9c:83:5e:d4:2c:01:ca:71:f0:86:e1:04:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:0C:B2:00:A8:7F:8A:EA:CA:46:E7:C0:81:C6:44:6C:52:EF:AE
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8a:1b:25:36:7d:fe:78:c1:ac:4b:48:4e:89:d4:1a:6c:df:
06:85:ec:24:f2:8c:fe:8e:90:60:b2:32:c8:79:5a:f4:8e:df:
48:c9:99:fa:3f:87:57:c8:98:db:45:13:a9:4b:48:71:57:76:
a7:64:78:16:a0:18:6c:3b:0b:21:e4:68:68:e6:d8:4a:c8:52:
5f:c9:93:55:fc:88:02:73:02:4c:11:de:b3:cf:ac:0c:a1:3d:
18:af:75:36:51:c1:e0:34:b2:a1:58:12:b5:95:27:5a:96:93:
13:8d:22:1b:7b:c0:3a:c7:ae:cb:11:d0:20:bf:24:24:4e:51:
2f:41:2f:26:7f:5a:20:59:4e:72:68:32:1c:ac:f4:1c:34:02:
ea:c4:fa:ed:bd:fa:4e:88:0f:0a:54:7c:33:2b:7e:db:df:65:
fc:df:dc:82:e3:c4:1b:c5:c0:d0:03:03:b7:02:40:dc:5b:e2:
88:21:f9:9c:7b:a8:94:96:b9:14:9d:18:e2:84:0e:cb:14:43:
72:a8:86:2c:f7:8b:a2:4a:f7:62:4a:6e:a9:74:e1:b1:ee:ad:
9c:d4:b6:7a:aa:27:c6:18:54:eb:db:49:47:f1:a4:a7:65:50:
ec:80:d1:e1:3e:79:22:8a:d2:bc:d7:2a:75:1e:8f:77:5b:52:
ab:50:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:42 2026 by rpki-client