Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: lLLUYoL4rNP7uJzc+ycoMuaymxGwwlGQZFnGDjsO9PM=
Subject key identifier: C8:02:E5:26:23:76:02:A6:CE:12:D7:F5:98:92:74:E9:C5:63:EE:A7
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019DA30A15054EC9391A8DDA8322BBC658E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 071C
Signing time: Sun 19 Apr 2026 00:00:40 +0000
Manifest this update: Sun 19 Apr 2026 00:00:40 +0000
Manifest next update: Mon 20 Apr 2026 00:00:40 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: 3HMID2PLyvBVBRfyhwkZZNrjKm2Xg3vytbmUsXhZVVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:15:05:4e:c9:39:1a:8d:da:83:22:bb:c6:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Apr 19 00:00:40 2026 GMT
Not After : Apr 20 00:00:40 2026 GMT
Subject: CN=c802e526237602a6ce12d7f5989274e9c563eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:9e:61:ae:37:8c:1a:ce:a4:3d:e6:51:5a:
7e:66:a6:ac:0f:92:1f:bf:3e:f3:04:04:e4:0f:02:
d3:0c:c7:db:a0:9d:fb:17:9f:d8:97:d6:77:ec:b7:
44:76:b8:86:72:63:a4:89:01:9b:74:36:d7:75:00:
66:81:c9:0c:a1:e5:7b:9b:24:cf:2f:69:4f:c3:4a:
8c:07:45:ac:57:6c:08:7e:58:44:60:9e:91:49:ca:
7b:a7:a8:58:c9:6e:05:f9:40:02:3a:1f:6f:ea:1e:
8d:51:aa:8e:40:ef:95:fb:ef:1f:bb:19:35:73:f3:
4e:ee:87:c6:fd:62:11:86:52:5f:ce:a5:30:72:b9:
b7:4d:ef:39:80:45:26:b2:a5:94:fe:a3:07:e3:ba:
22:84:51:bd:cf:3f:1d:81:90:2a:be:f0:e5:6c:e1:
63:03:07:e4:c9:f9:49:4e:e3:c1:62:5a:9b:b1:a0:
1c:62:cb:dd:59:98:9c:a1:62:c8:d7:db:b8:40:c4:
e6:12:40:b5:9e:c0:fe:97:3a:31:2c:0a:c7:ba:9d:
08:c0:67:21:b2:33:7c:a4:65:20:33:d1:80:c0:e8:
a5:05:d6:71:23:3e:f8:99:b6:51:ff:b3:f1:31:79:
d3:35:fd:63:52:46:79:4b:5e:08:08:e0:71:1c:ec:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:02:E5:26:23:76:02:A6:CE:12:D7:F5:98:92:74:E9:C5:63:EE:A7
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:26:c9:22:53:5d:3e:53:cb:3d:49:10:33:7f:96:87:dd:
14:da:cc:89:83:b3:06:22:64:ea:d2:40:be:40:6f:72:26:74:
d4:20:27:88:c5:ee:77:4a:7a:08:8e:22:24:b2:0f:5c:2c:a6:
7c:b9:44:44:ef:9c:7a:40:ca:e7:4d:26:ba:0f:20:dc:ea:a7:
5e:b2:58:ee:d4:cb:c7:28:3d:0e:10:25:9c:64:d4:39:6a:39:
46:08:1d:78:09:d9:08:6d:b9:a0:09:51:2d:b8:95:3a:31:b6:
14:03:6a:7a:29:bb:f0:63:1d:b7:fb:20:d0:1a:3d:b7:02:f6:
0a:59:5d:6b:d7:47:72:ed:bc:15:98:73:9f:a6:f8:74:83:1c:
2c:f2:4d:3f:ca:53:3c:6a:c0:9e:b9:8a:df:72:61:7b:88:66:
63:71:a7:64:88:4f:ca:43:1a:a1:ff:3c:17:a6:25:6b:d1:94:
66:b7:0a:2d:57:64:dd:79:3b:57:45:12:b4:66:84:aa:68:d0:
dd:f5:7d:84:28:18:b8:4e:9e:73:41:f2:00:72:6d:1d:ce:f5:
73:e3:06:42:cf:54:dc:45:f1:c2:c4:09:27:8b:df:86:0d:62:
e3:c3:93:95:ce:20:01:3d:bb:52:6e:cb:65:c1:2f:09:c0:e8:
b7:6b:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:55 2026 by rpki-client