Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: 8VmvVnRfTWSfvL9ZiLhSvOLQpzxTSCggDGP5TT5z0cU=
Subject key identifier: 2E:60:DB:13:F2:5A:87:2B:42:2C:F5:02:56:1D:16:1E:52:6D:B2:D4
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019D9A3E0657C929C195F0E511D648B2C6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1380
Signing time: Fri 17 Apr 2026 07:00:49 +0000
Manifest this update: Fri 17 Apr 2026 07:00:49 +0000
Manifest next update: Sat 18 Apr 2026 07:00:49 +0000
Files and hashes: 1: OhJpimseggO-Y4_hoEiI1nB-3a4.roa (hash: zDlcOi1opjdDim5XNlXyOBikBSD080S2FUrAKbWMWcM=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: nSym2fnX++S4EeundvNKxl9vysl5NzZZe/zZ3XM6ajc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:06:57:c9:29:c1:95:f0:e5:11:d6:48:b2:c6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Apr 17 07:00:49 2026 GMT
Not After : Apr 18 07:00:49 2026 GMT
Subject: CN=2e60db13f25a872b422cf502561d161e526db2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:79:37:78:2b:20:88:02:56:2c:08:54:54:
d2:ed:ee:7b:dd:8e:c0:ab:e9:43:b9:ac:56:8a:be:
21:2c:2b:1d:3d:66:7b:f9:f4:30:e5:14:08:d0:4e:
5f:34:09:4f:2a:1d:4f:3f:cf:31:72:d7:45:5e:c6:
68:fd:79:70:71:f5:06:fb:09:8f:ba:6a:d7:2f:b7:
ef:de:1b:c8:2f:af:19:7b:4b:8f:ad:b0:24:23:ea:
49:48:d8:b6:e6:d6:b1:88:30:42:86:4f:a3:38:1c:
26:11:78:91:23:89:e3:46:68:7b:0c:9d:cb:e5:d7:
02:d3:43:c9:cc:db:96:cd:05:54:0d:7f:c4:34:98:
0d:2b:9c:9f:24:c5:a6:e4:b0:e9:8f:69:5d:3d:62:
8d:ad:d9:7c:fd:e2:3a:23:d7:c3:5c:e0:91:0a:39:
73:3e:cc:80:b9:a8:2f:7c:fe:5f:99:97:b2:93:00:
0f:ce:c1:9d:22:6a:3a:d5:ee:00:00:48:56:4b:fc:
48:bc:82:a7:ce:f7:a2:9a:cd:e1:fe:90:af:09:67:
d4:53:06:51:34:84:ac:77:8f:33:d5:8a:17:05:32:
a8:eb:30:c8:bf:1d:01:69:a4:c6:f3:89:66:94:10:
69:36:68:d7:0b:fa:4b:94:86:71:80:03:ae:a8:50:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:DB:13:F2:5A:87:2B:42:2C:F5:02:56:1D:16:1E:52:6D:B2:D4
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:43:d5:30:73:fc:10:70:bd:51:84:bc:2b:2b:37:99:e0:28:
27:88:04:66:0c:8f:11:82:b2:e8:7e:bf:57:4e:1a:51:a7:ff:
98:40:95:80:bc:3f:89:3b:b7:52:7b:b4:3a:a3:ac:3d:ed:86:
46:8f:ad:5f:09:a4:2e:14:99:35:9a:23:4e:b1:90:ba:cd:2f:
4e:97:16:b3:2b:7f:aa:50:90:95:01:12:56:37:f0:2c:fa:ad:
2e:03:58:ec:df:c8:5c:4d:c5:eb:cd:e9:51:01:56:72:56:94:
c1:6b:af:ab:6f:76:f7:fd:24:a2:68:5e:e0:33:c8:f2:68:fa:
ca:6f:82:a7:06:00:d0:ce:12:88:b6:8f:c3:6f:27:24:c6:8d:
75:25:fe:99:88:6d:1b:5e:ba:5c:68:8a:c1:86:e9:3d:26:ae:
0f:61:88:39:76:fa:56:7a:90:f1:55:54:b5:7a:a3:41:75:0a:
a1:81:99:b1:71:49:9e:79:02:0a:7e:7c:7a:2e:40:11:1b:73:
b2:32:37:11:d5:51:82:04:b1:b1:b3:d7:b4:8b:65:6d:d5:d6:
08:18:b1:4d:4c:65:dc:d9:c8:9f:12:71:7f:1d:b0:80:75:0f:
32:b0:79:b2:88:5c:76:9a:9a:de:06:9c:ff:3c:26:b3:41:7c:
8b:7e:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:27 2026 by rpki-client