Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: FqbPxBbrxyqBFLoyKEenkvcXFgytIld5mZ5mEtloWkA=
Subject key identifier: 61:16:5C:75:6D:34:FF:83:C4:84:58:DD:E1:6F:F0:A0:55:75:1B:11
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019CADC8147E7FF03CA0DA3F8C8AC509E848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 069D
Signing time: Mon 02 Mar 2026 09:01:36 +0000
Manifest this update: Mon 02 Mar 2026 09:01:36 +0000
Manifest next update: Tue 03 Mar 2026 09:01:36 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: odTrQI/yIeQfeF3V2aLX6smTmMdmJOhGidoi/QSW1bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:14:7e:7f:f0:3c:a0:da:3f:8c:8a:c5:09:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Mar 2 09:01:36 2026 GMT
Not After : Mar 3 09:01:36 2026 GMT
Subject: CN=61165c756d34ff83c48458dde16ff0a055751b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:18:ca:8d:f8:b1:6b:34:10:c5:2d:e1:aa:
a8:1b:92:81:28:9a:c3:8d:66:10:b8:eb:cd:07:c8:
db:cc:34:b1:9e:15:b1:d3:bc:07:06:5f:1d:8b:8a:
76:47:72:3c:71:d1:47:8b:90:8d:ea:a5:5d:cf:e6:
59:c7:71:80:f1:a0:79:76:41:0a:71:a7:f4:ba:6f:
f1:39:eb:5e:1a:53:c0:7b:05:49:3c:e6:f6:23:92:
39:99:04:f2:b1:82:81:6f:85:c5:27:14:ad:25:01:
12:b9:ae:4c:e7:71:40:bc:f0:6a:cd:8e:0c:95:49:
f0:24:a4:15:49:c5:87:d7:4d:39:f9:e7:76:9d:77:
b2:e3:d6:d7:15:7e:80:ef:2b:82:77:8f:c0:c8:d4:
65:b5:7f:ba:6e:30:d0:21:db:47:c3:f1:a3:28:0d:
bc:e9:9f:3a:74:90:9b:87:58:48:7f:a5:82:85:00:
8e:ad:78:17:63:64:49:14:dc:a9:f1:96:1c:62:55:
0b:17:a1:ad:e7:71:4c:08:f2:51:72:f8:52:2d:32:
4c:56:1f:2c:77:9c:33:e7:85:2f:72:36:ac:64:68:
f0:b3:fe:19:cd:2a:78:6f:86:0c:6e:bf:30:3b:0d:
60:ca:b6:67:76:f7:8e:2b:8d:32:ed:7d:c8:24:bc:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:5C:75:6D:34:FF:83:C4:84:58:DD:E1:6F:F0:A0:55:75:1B:11
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:72:f4:14:c6:88:74:26:b5:5d:a0:72:e4:e8:82:58:be:
d2:b2:3f:8e:da:ae:8b:6d:18:1b:04:08:8d:85:b9:cb:3c:08:
27:44:b2:3c:ca:e2:e7:e5:b9:2f:e0:45:98:82:c4:9c:3a:76:
f3:23:9b:71:28:59:68:42:e0:f4:04:f7:57:4d:21:c0:b8:e5:
7d:a4:0f:ca:59:39:8a:be:64:3f:a8:c8:21:23:61:18:c5:0b:
d7:0f:6a:64:23:1a:9b:cd:68:97:b1:6f:a4:c9:0d:bd:cc:2b:
a3:60:f6:1b:9b:a3:d0:19:48:15:60:53:35:03:b9:8d:8a:09:
6f:27:9d:12:89:61:78:37:cb:fd:b6:de:18:5a:0d:a4:72:8c:
85:a7:e0:ee:c4:4a:c1:c6:7c:a6:2c:26:25:3f:cc:4e:32:84:
74:1e:24:ac:75:fd:b6:1a:78:c9:7b:a8:a1:cb:df:85:77:47:
32:f2:13:a6:9b:34:5e:f0:32:ec:74:98:cf:3f:cb:ce:0c:a6:
60:4d:d0:62:b2:cc:aa:8b:3e:c5:1c:65:28:0a:de:71:8e:17:
58:10:c9:90:fc:1c:f1:6f:f4:4a:2b:21:06:ca:0f:4e:28:19:
73:79:13:cd:36:e9:5c:86:17:0e:52:77:60:92:7a:c0:29:4e:
45:e6:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:54 2026 by rpki-client