Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: lBeVj8yl4yRgXByUvmE6uogvGvBbWBZw+j7ajsrnPLA=
Subject key identifier: B0:34:15:98:94:EA:A1:6C:10:C6:4B:D9:EA:99:07:E5:EC:DF:A4:8E
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019FA899F4D2609C9D57EB5B1028463488DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 0828
Signing time: Tue 28 Jul 2026 12:01:29 +0000
Manifest this update: Tue 28 Jul 2026 12:01:29 +0000
Manifest next update: Wed 29 Jul 2026 12:01:29 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: ZOWol9+Td91a+Lgdm+RIS5Ty9kQHluE2ZPbV3AnkKSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:f4:d2:60:9c:9d:57:eb:5b:10:28:46:34:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Jul 28 12:01:29 2026 GMT
Not After : Jul 29 12:01:29 2026 GMT
Subject: CN=b034159894eaa16c10c64bd9ea9907e5ecdfa48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:0d:18:ff:41:07:29:09:20:3f:23:c0:ca:
17:fc:c3:11:24:21:3b:d5:c3:0d:c4:5a:e3:96:fd:
9c:b9:e9:fc:43:c1:5f:72:6c:84:9a:15:c0:6d:81:
e5:05:26:45:ea:74:49:9e:3e:9c:b1:3d:66:05:ef:
03:46:4e:77:9f:15:64:59:07:3b:31:55:3e:b7:87:
e6:30:aa:51:49:0a:ca:d0:3a:06:56:6e:45:5e:b0:
5a:bc:5d:86:10:31:44:a3:53:f8:17:84:43:d8:9c:
39:a4:32:63:e6:c5:bd:c3:82:24:05:ac:ed:17:6b:
94:5b:be:0c:71:14:d4:fa:cf:fc:2f:96:8c:4a:4d:
37:92:74:3f:63:7f:e5:4d:bf:a6:cd:c0:84:00:04:
7b:09:05:24:c2:68:42:8f:ec:70:31:33:11:61:4e:
df:10:d8:32:c9:43:b0:27:2c:ef:0b:27:68:b3:0e:
28:72:53:f7:a3:a7:d1:68:f3:41:37:b1:f8:bf:ab:
19:2e:36:0a:0d:71:19:95:78:5c:90:27:14:a9:08:
6c:84:b5:84:6a:6b:fd:fd:de:2a:98:b3:fd:be:8b:
fb:01:7f:74:34:68:81:76:d0:1c:fe:4e:a9:8b:c0:
49:e1:d8:84:fc:5b:92:8e:c1:64:e0:4a:04:00:a7:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:15:98:94:EA:A1:6C:10:C6:4B:D9:EA:99:07:E5:EC:DF:A4:8E
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:57:17:10:53:9a:8b:13:b6:2f:31:7c:54:df:94:5b:e9:
9a:7c:b3:fa:0f:e3:27:ab:d7:be:64:2a:24:47:85:47:69:64:
05:95:e8:52:25:eb:c8:eb:17:a2:f9:97:4d:b7:94:b1:2d:e0:
3a:10:bb:b1:02:e0:80:2d:44:58:d5:68:1f:6e:09:dc:53:49:
ee:60:10:81:93:a0:5a:40:b8:a8:8f:35:05:e9:6b:d4:29:e1:
60:3f:4e:26:e8:06:50:05:e8:b9:3d:22:e9:5b:ea:94:f9:3c:
58:2f:7d:61:be:55:17:73:54:60:c6:6b:d5:e7:43:d4:33:73:
da:73:4a:88:ef:b7:e8:46:39:a2:af:e0:33:61:5b:0d:db:da:
57:ad:a9:d2:9e:e1:7b:02:50:36:01:6f:54:8c:f7:f4:c3:15:
98:9e:bc:6e:9c:c2:02:6d:39:67:af:d4:9c:c5:9e:e1:77:96:
f5:20:11:71:81:e1:a2:92:09:5c:95:dc:ae:bb:62:a1:35:29:
36:52:dc:3b:79:41:2a:ad:7e:9c:df:25:c6:9e:8b:b6:7d:3f:
86:61:22:39:a2:cd:b3:a0:19:33:69:b3:3a:c7:1c:67:c7:de:
d2:79:9c:35:88:6d:91:59:62:0a:ec:3f:a0:34:d0:8e:e1:83:
73:94:96:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omfTSYJydV+tbEChGNIjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjBlODY4NmY3ZGFiMWY2NGM4MGQ0MzgyYzNjNTk0OWZm
MTFkYmYwHhcNMjYwNzI4MTIwMTI5WhcNMjYwNzI5MTIwMTI5WjAzMTEwLwYDVQQD
EyhiMDM0MTU5ODk0ZWFhMTZjMTBjNjRiZDllYTk5MDdlNWVjZGZhNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneYNGP9BBykJID8jwMoX/MMRJCE7
1cMNxFrjlv2cuen8Q8FfcmyEmhXAbYHlBSZF6nRJnj6csT1mBe8DRk53nxVkWQc7
MVU+t4fmMKpRSQrK0DoGVm5FXrBavF2GEDFEo1P4F4RD2Jw5pDJj5sW9w4IkBazt
F2uUW74McRTU+s/8L5aMSk03knQ/Y3/lTb+mzcCEAAR7CQUkwmhCj+xwMTMRYU7f
ENgyyUOwJyzvCydosw4oclP3o6fRaPNBN7H4v6sZLjYKDXEZlXhckCcUqQhshLWE
amv9/d4qmLP9vov7AX90NGiBdtAc/k6pi8BJ4diE/FuSjsFk4EoEAKf7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA0FZiU6qFsEMZL2eqZB+Xs36SOMB8GA1UdIwQY
MBaAFNGw6GhvfasfZMgNQ4LDxZSf8R2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMt
ZGJiYzI1NGQxYzZjLzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80NTZhMmItODc1NS00YmZjLThiNmMtZGJiYzI1NGQxYzZj
LzEvMGJEb2FHOTlxeDlreUExRGdzUEZsSl94SGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHpXFxBT
mosTti8xfFTflFvpmnyz+g/jJ6vXvmQqJEeFR2lkBZXoUiXryOsXovmXTbeUsS3g
OhC7sQLggC1EWNVoH24J3FNJ7mAQgZOgWkC4qI81Belr1CnhYD9OJugGUAXouT0i
6VvqlPk8WC99Yb5VF3NUYMZr1edD1DNz2nNKiO+36EY5oq/gM2FbDdvaV62p0p7h
ewJQNgFvVIz39MMVmJ68bpzCAm05Z6/UnMWe4XeW9SARcYHhopIJXJXcrrtioTUp
NlLcO3lBKq1+nN8lxp6Ltn0/hmEiOaLNs6AZM2mzOsccZ8fe0nmcNYhtkVliCuw/
oDTQjuGDc5SWaA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:30 2026 by rpki-client