Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: LVYBJqw6AXO2nEjDesS2gR75AjJ5PdZU0r1Szgp3qu8=
Subject key identifier: D8:15:0B:92:47:CC:2C:B8:EC:27:24:A7:4B:C2:D2:AE:2C:34:EC:C3
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019CABD970321F8D9AA71D3D023034887C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0B39
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: F8gkY8hytWFqko0VQWuBrut1DJZbnqg+E/LlDcZsNDw=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:70:32:1f:8d:9a:a7:1d:3d:02:30:34:88:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=d8150b9247cc2cb8ec2724a74bc2d2ae2c34ecc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:c6:85:d2:d2:ec:57:10:06:a0:24:cf:e3:
2e:66:a3:19:89:2d:14:74:59:be:0f:40:5b:e2:f3:
02:30:e1:0f:22:e4:cb:ba:47:10:da:3a:e6:61:6e:
7e:35:a1:63:d9:18:b1:79:55:1c:5d:17:61:16:13:
bb:20:00:4c:b9:57:3c:9e:50:2f:ec:f3:aa:51:eb:
e9:60:db:4c:6a:1f:13:68:6a:6f:24:c8:fb:0f:aa:
cc:86:26:6e:18:8e:fb:7a:34:45:31:58:81:2c:5e:
3b:ce:26:9e:00:53:da:1d:a8:3a:0a:e7:fc:5c:f3:
28:a4:8e:12:48:71:5f:c9:d3:0f:c1:9f:d7:92:c7:
af:6f:a6:c0:3d:69:35:79:77:41:b1:85:dd:20:5e:
be:54:8a:5f:13:69:ee:87:e5:cb:fe:ac:e4:82:a4:
25:cb:8a:e1:5e:04:88:50:bc:5f:b7:dd:bf:1f:46:
d3:18:35:7c:54:5b:69:41:f2:47:24:eb:0b:c0:66:
3f:e0:26:4e:c8:50:f3:66:e5:6b:4b:f8:e1:fc:f8:
2d:81:a4:2d:11:02:f7:f0:c5:3a:54:dc:3c:00:8d:
bf:05:33:a4:a2:72:a9:86:4e:f6:95:45:21:4f:85:
b3:14:c7:68:10:a4:f6:8b:a3:9f:d8:82:d4:16:9c:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:15:0B:92:47:CC:2C:B8:EC:27:24:A7:4B:C2:D2:AE:2C:34:EC:C3
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:fd:e8:c4:6c:97:10:48:c5:cb:14:4e:28:2f:38:9b:f3:
95:68:8c:55:5c:d3:97:7c:b5:7e:6b:74:ee:03:3b:f1:2f:62:
4a:64:d3:19:3b:d4:79:5c:39:bd:e7:be:d9:ef:94:3c:cf:32:
52:77:bb:f3:b3:9e:af:22:dd:0d:ba:9d:0b:c3:e7:5d:fb:fb:
78:66:38:55:55:76:42:42:81:a5:12:a7:ca:bb:16:51:df:5d:
0a:3e:6a:5e:07:88:58:f1:cc:8f:1f:f1:7a:dc:36:dd:0c:c3:
63:37:b7:91:45:8e:1b:8d:1b:19:47:3f:aa:63:c4:22:1a:df:
a6:9e:db:8f:75:e1:23:19:6e:ec:c8:9e:a0:23:51:c0:36:65:
c5:83:0f:d9:b1:42:5a:84:ae:de:cf:14:94:ea:e7:c6:d3:09:
68:bd:b6:4c:37:4a:0d:af:65:0a:89:b3:a5:8d:ca:54:44:44:
6d:16:91:c9:96:0b:98:c0:64:87:1c:dd:45:93:f2:6f:c0:09:
94:54:8e:9d:0c:85:2f:08:a5:17:d5:27:5f:02:d5:48:fc:62:
dd:12:e4:e5:dc:a2:fd:63:cc:92:cf:db:78:72:98:2c:5d:4e:
3f:f6:85:35:ca:f0:a3:10:3f:d9:87:76:fb:5b:01:ec:b2:39:
16:97:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:31 2026 by rpki-client