Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: XyIXaLJD+iMIQPWbTBSA4mZspHdi+eM6sNehTss+xwY=
Subject key identifier: A4:AA:40:4C:47:45:66:BD:39:66:A8:86:E5:A9:96:F9:37:D7:88:89
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 01A0C09E8AF2F7DC99E167BDD5C73CFDF587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 08BA
Signing time: Sun 20 Sep 2026 21:00:10 +0000
Manifest this update: Sun 20 Sep 2026 21:00:10 +0000
Manifest next update: Mon 21 Sep 2026 21:00:10 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: S/qfRT48weiGFCQDFjkbEVBPMK+gN/PIeqsLktCA87I=)
2: 3csJZekX_cLNjU2Men_fceOPKEA.asa (hash: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:8a:f2:f7:dc:99:e1:67:bd:d5:c7:3c:fd:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Sep 20 21:00:10 2026 GMT
Not After : Sep 21 21:00:10 2026 GMT
Subject: CN=a4aa404c474566bd3966a886e5a996f937d78889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:39:ab:c8:3e:b0:0b:54:07:4e:05:ac:3c:
eb:07:ed:42:6d:12:44:ff:d8:18:34:b1:1f:28:b9:
eb:1c:0a:09:69:2e:f4:91:d6:47:62:e5:98:30:eb:
d5:62:74:e6:50:62:eb:a5:dd:ff:b4:b3:94:58:a2:
93:45:f6:83:ba:30:ae:39:36:98:70:d6:f5:c0:f9:
fe:ec:e6:f8:13:93:40:68:7a:55:63:c1:f6:16:c4:
53:d4:c8:78:37:65:cf:1e:48:93:90:f8:98:10:ac:
ef:ae:6e:61:29:86:97:4e:a9:78:13:e9:51:b9:40:
89:0b:b1:0e:cb:26:f2:da:94:b3:1e:7a:06:1b:a1:
56:49:8f:2e:d1:b6:41:54:75:eb:db:50:e9:55:21:
58:3f:ba:3e:50:47:cd:b7:96:65:07:b6:f0:5a:40:
b1:2b:25:82:65:39:2d:f8:06:db:05:5e:8c:04:f8:
a6:1e:11:b3:01:0b:22:a0:7f:27:94:c0:76:69:6f:
c0:2b:2e:ef:ca:2b:57:ba:9f:5c:f8:2c:28:8e:4f:
87:05:ec:0b:40:70:0c:0f:b6:4a:e9:c1:17:d0:61:
49:e0:ef:6d:cb:ab:fa:3b:37:f0:d5:08:ba:1e:23:
f7:5e:26:7d:c7:a6:05:3e:95:8d:48:44:b5:4f:8d:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:40:4C:47:45:66:BD:39:66:A8:86:E5:A9:96:F9:37:D7:88:89
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b7:a0:76:f5:91:49:d8:41:ef:c4:51:e5:85:3c:39:08:e7:
93:60:9f:d8:13:98:c6:60:4d:f4:74:cd:4e:ac:fd:21:55:49:
31:5d:09:0a:2a:6c:15:ed:ee:62:80:29:7b:87:d4:3a:ea:db:
76:0c:62:df:9a:3d:55:c3:51:c2:fd:fa:89:18:aa:b3:8a:cc:
04:86:5b:d0:32:93:cb:12:74:b0:c1:1d:e4:86:50:22:be:d5:
8b:2e:d5:64:58:af:fa:ae:02:4d:9f:a4:35:50:b4:dd:9b:40:
5b:b2:bb:15:d8:83:8f:b2:40:61:af:3f:4f:5a:f6:92:53:e0:
bf:15:e3:0a:71:79:d6:6d:ac:29:b5:d9:07:8a:c9:c3:ea:8a:
7c:88:81:47:0c:bc:07:9d:f6:c3:98:4f:a2:4e:37:f1:6e:77:
4f:8a:ef:07:dd:34:7e:b2:5f:3e:73:85:a5:4f:02:0c:1c:ab:
23:27:1d:30:0c:f2:c0:a5:03:0d:92:b6:ec:00:64:17:9a:d6:
2a:52:f7:24:69:68:42:a3:6a:6a:72:eb:6c:88:78:dd:f8:c8:
d8:9b:52:34:be:b9:d1:17:17:5f:01:21:64:89:56:a2:15:7e:
e3:e5:cd:82:6b:83:fb:ab:3d:20:b5:8d:3f:6f:e1:da:2a:11:
2c:21:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:28:47 2026 by rpki-client