Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: jcCo/13g6N2TJGviVMCT5Ae6noP4CCS1PSBoTS9Z5s4=
Subject key identifier: 0C:AB:D6:75:7E:81:0F:98:87:13:0F:1E:F0:62:AF:35:F4:34:81:EE
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019D9886AB27231E521E5AF2973B7A3A1A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 1033
Signing time: Thu 16 Apr 2026 23:00:55 +0000
Manifest this update: Thu 16 Apr 2026 23:00:55 +0000
Manifest next update: Fri 17 Apr 2026 23:00:55 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: zYvT/5OF2OU2KInl/3L/dx3r04n4HBZEsrJykZBXmIk=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ab:27:23:1e:52:1e:5a:f2:97:3b:7a:3a:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Apr 16 23:00:55 2026 GMT
Not After : Apr 17 23:00:55 2026 GMT
Subject: CN=0cabd6757e810f9887130f1ef062af35f43481ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:a1:1f:87:06:a5:2e:58:27:12:f7:d8:f5:
f5:0b:bc:a3:e1:0b:79:fe:c1:3b:1f:65:9e:84:38:
22:50:ac:96:c3:0a:8d:a6:85:19:89:b6:b3:82:e0:
3a:70:ba:b8:b4:d4:5f:d1:9a:a3:c4:86:77:36:88:
8d:7e:e8:c8:ee:73:61:d0:2a:7f:4d:b5:9f:1a:8c:
06:41:a8:bf:4c:af:34:d4:88:73:93:52:b7:ea:83:
cd:c7:31:67:32:c3:6f:61:74:96:ed:82:9b:87:6a:
f7:dc:88:2d:80:20:23:23:91:f9:b7:3b:34:3d:63:
e1:f7:d1:d0:d0:31:7c:74:49:de:e5:b8:9f:0e:db:
1d:7f:7f:93:65:96:56:d7:a6:f3:a0:2d:e5:10:d5:
4b:49:6f:08:de:0c:38:d4:9e:53:70:5b:dc:4e:57:
89:64:46:cd:52:58:d7:9c:a2:b0:7f:b9:a0:88:db:
c8:ff:66:ac:85:e9:26:0b:c3:41:fb:c9:5d:c6:c0:
b9:5f:d5:ee:f6:67:a4:2c:21:8b:d6:e9:3a:a6:c1:
b6:ea:e3:70:47:2f:eb:cc:d8:3b:fa:b4:9d:dd:7d:
5c:61:0a:85:64:9d:ec:4e:d9:64:17:2c:46:da:4d:
ab:a5:ff:c9:2a:36:43:89:3d:e5:52:40:b9:5f:25:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:D6:75:7E:81:0F:98:87:13:0F:1E:F0:62:AF:35:F4:34:81:EE
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d9:e5:ae:2d:02:20:75:3b:57:c9:10:f4:cf:0d:77:79:84:
b4:fd:e1:98:52:65:e4:f2:be:5b:4e:b3:35:81:14:31:73:6c:
1d:69:2c:ee:73:04:0a:e5:cc:1e:8d:cc:af:11:5d:bf:04:51:
a8:f3:4f:df:bd:8c:28:76:ba:70:61:a0:08:51:04:44:f4:07:
eb:2c:ff:e7:05:08:bc:5d:13:4a:38:b1:80:36:20:33:c8:36:
38:c5:b6:6c:bc:d6:5a:1f:96:f7:12:8d:a8:f7:15:c7:c8:2f:
f6:f1:2a:a8:c7:7c:9e:2f:43:65:94:a5:0d:38:7c:fe:38:4c:
db:7f:4b:46:4f:d0:68:75:29:e1:82:a7:02:3e:8c:e8:2c:75:
fb:75:ed:b9:5b:2b:03:d0:d4:8a:d5:26:ce:93:7e:8f:45:6a:
2c:c6:6f:c5:e2:de:f0:18:9f:8d:17:3d:ee:3d:97:ad:2e:fd:
7d:98:a5:89:c3:a5:42:d1:1a:c9:cb:04:94:fa:2e:7a:39:36:
5d:2b:99:ec:53:b5:19:40:e3:2e:a2:26:13:95:3a:05:8d:a9:
52:11:fd:eb:b6:7d:cd:44:34:e8:59:41:24:69:d1:8b:47:ab:
6b:b9:84:6a:a0:8b:83:9f:b9:ff:ee:9c:90:cc:36:67:ba:e1:
8a:92:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:03 2026 by rpki-client