Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: LYidEK9SLwkR+DcjcVCA/fVnpCO7KRPP21AVdd1+AL0=
Subject key identifier: B8:C5:96:3A:A2:FC:BC:DC:F3:C5:12:9F:8F:F2:0F:E4:A8:51:7F:59
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019CACB51E3749BD5FEDE4383A75D5200DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1305
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: ph4IETTaHjWBBmoRPv8g4d+jtX0AakhJu5vQQKOxlX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1e:37:49:bd:5f:ed:e4:38:3a:75:d5:20:0d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=b8c5963aa2fcbcdcf3c5129f8ff20fe4a8517f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:c8:2d:b2:1b:03:6e:0f:23:45:f5:04:61:
73:ab:71:23:db:72:2c:4b:3e:9f:f7:57:7b:27:01:
a3:d9:7c:dc:66:5f:31:99:74:92:7d:1b:da:7e:f4:
d8:e8:9b:fd:b0:61:07:49:9f:d6:db:7a:51:28:c5:
c5:f6:2f:b4:31:44:55:f5:65:8d:35:a4:3a:f7:60:
a8:fd:f8:1f:dc:fd:37:be:98:6f:08:b8:57:bf:e6:
e7:39:99:71:0e:09:71:bd:f0:ad:28:fc:2f:fd:cc:
49:f5:76:21:c7:4d:05:24:c3:87:94:78:a7:9f:50:
99:6d:e7:bd:ee:fd:f8:24:e1:d1:e2:98:a1:b4:40:
65:98:6c:d0:59:6b:75:19:7f:3e:84:bf:74:61:74:
d9:c5:3e:ab:44:33:b9:74:dc:a5:43:53:26:14:72:
dd:6e:f2:40:98:b7:01:ea:34:76:cb:79:9b:2d:63:
ba:b1:17:6e:22:a5:de:54:6b:9b:c0:4c:d6:8b:c8:
10:fa:6e:c3:e1:d1:f6:57:37:25:37:51:ba:cf:f9:
be:a6:45:cb:bd:88:32:16:4a:f7:b2:94:68:c6:8d:
cf:a8:da:41:80:b2:27:93:30:49:04:37:0d:54:7a:
e0:62:e8:ec:f7:a6:9b:2e:ab:c9:f1:06:45:84:d3:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C5:96:3A:A2:FC:BC:DC:F3:C5:12:9F:8F:F2:0F:E4:A8:51:7F:59
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:f0:c0:4b:9e:15:56:d0:ed:83:51:cb:08:45:68:9f:db:
44:8b:be:cb:d6:6c:3b:d8:63:f4:76:32:c2:fb:b3:05:9f:9e:
87:3d:16:ac:38:6c:4a:cb:86:9c:2c:24:84:a4:66:27:01:e6:
ec:91:e1:10:f2:96:85:78:44:38:a1:17:00:c3:03:a3:3c:e5:
d2:08:7e:b5:0b:6d:25:f7:8d:69:02:fd:b8:f7:56:e9:e9:7c:
1f:dc:90:e4:5e:7a:1d:a3:af:79:cd:39:ef:26:44:57:aa:eb:
3a:f5:9d:21:31:ef:80:f9:3a:d3:be:be:a8:57:41:35:e2:f7:
91:ce:40:4f:9b:34:d4:c4:40:45:1d:52:49:00:36:85:75:f8:
80:b2:cd:40:e0:e7:e4:59:f2:d3:ac:e6:79:5b:bc:9d:0d:c6:
4a:39:3e:27:7d:9d:9a:49:1e:de:22:ae:34:c0:22:bc:84:71:
9f:69:f1:5a:21:2d:5c:97:47:ff:c2:01:12:f9:50:17:c8:c4:
38:8d:f3:15:5c:2c:64:79:6e:00:be:c9:5e:69:0b:1d:f1:e5:
c6:30:a2:aa:be:24:79:0c:67:bf:4f:d8:15:aa:65:0f:55:0f:
97:30:31:72:8c:51:2b:aa:3c:e3:b2:20:e8:78:c0:4d:4d:0e:
ff:b7:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:46 2026 by rpki-client