Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: UfpbZzEq/P6lsbZDwQQLbSOhtZKOfRXuKWrnYhBoa+4=
Subject key identifier: B4:A7:E6:0A:A3:62:6F:27:C2:92:72:76:9E:E3:C2:D4:C7:1F:84:A7
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01A1C36712818B4C42D3D58C56CABF0F14BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0DDC
Signing time: Tue 10 Nov 2026 03:01:14 +0000
Manifest this update: Tue 10 Nov 2026 03:01:14 +0000
Manifest next update: Wed 11 Nov 2026 03:01:14 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: SwyaMGJY7KSzNxso3t1lDusalg2XtZ8wPDEym1umVfM=)
2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:67:12:81:8b:4c:42:d3:d5:8c:56:ca:bf:0f:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Nov 10 03:01:14 2026 GMT
Not After : Nov 11 03:01:14 2026 GMT
Subject: CN=b4a7e60aa3626f27c29272769ee3c2d4c71f84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:89:74:73:86:b8:7e:d9:e2:85:d7:b5:04:
db:72:ca:56:39:91:a2:d4:ff:5d:3b:73:b5:1a:c9:
35:9d:04:85:af:aa:41:b6:27:d3:5a:a2:5c:be:7b:
6b:62:fa:8c:fe:a0:dc:3f:e8:07:7c:24:03:4d:4a:
5d:4f:63:e1:8d:64:fb:cb:cd:ef:0e:7e:cb:1f:3a:
3b:6a:42:06:37:9a:74:21:83:36:12:63:77:c5:ff:
5e:e4:46:f3:9c:28:cd:c7:03:53:db:bb:82:bb:e2:
0b:e4:4c:64:2f:3e:b9:cb:6c:94:a6:12:ea:37:aa:
30:28:f0:26:a7:c0:3f:83:30:a0:88:7a:f3:97:d5:
da:5a:b8:57:d1:77:04:ed:46:2b:9d:79:0d:6c:31:
d3:80:3b:e0:8b:8b:07:06:fe:c9:5e:9c:03:4e:46:
0d:65:db:b7:d3:98:2b:84:94:74:5a:35:17:55:c7:
8c:78:ee:bb:3f:60:dc:f8:62:b5:0d:33:13:9d:42:
50:c8:66:7a:a2:bb:60:d8:8f:4c:77:31:b1:88:34:
91:7b:c5:4f:60:03:3b:02:e7:a3:5c:8f:27:b4:1d:
40:99:7a:e5:b4:9e:86:2b:1c:46:41:e6:c2:b4:58:
29:7a:59:26:73:e8:b5:f7:7d:7a:0f:8e:19:c4:5b:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:E6:0A:A3:62:6F:27:C2:92:72:76:9E:E3:C2:D4:C7:1F:84:A7
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:be:46:44:47:09:bd:9d:9a:b3:f2:da:97:2f:7a:12:98:bc:
6c:a2:10:9e:44:67:69:3e:02:07:7d:7e:2d:9e:d8:72:c5:2e:
d1:3b:41:9a:e0:8d:61:82:c0:40:3f:e5:8f:4d:8d:24:4a:c2:
cd:00:69:fe:58:45:87:01:e8:b8:15:28:77:fd:85:86:3f:e7:
94:8f:c9:17:f0:98:a3:a0:c1:4d:9d:81:1e:11:95:f8:db:c9:
f2:40:a6:98:ae:1f:79:48:bf:cb:d9:02:8a:ca:3d:64:1b:ec:
80:54:91:b1:b9:7a:29:5f:26:5d:cb:6c:7d:f1:c0:e2:9e:f4:
3b:55:17:1e:15:00:d0:81:24:99:6e:7e:56:76:39:1b:7b:68:
8d:72:e0:58:1b:57:50:88:22:33:be:7f:57:30:5c:d4:64:a4:
9a:28:95:4e:f8:19:de:d6:14:58:be:9d:4e:f1:72:4c:67:78:
1d:c7:ee:d0:66:0d:b9:31:b8:8f:cb:09:c5:1e:65:b7:9b:e2:
82:bf:61:f6:3d:c9:8e:cb:d1:34:06:e1:e1:c3:3a:d2:e1:52:
87:9b:02:ed:02:e2:00:d0:e7:94:f4:49:4e:76:ed:13:64:0c:
31:f0:31:e3:99:dd:c5:ae:ad:08:16:3d:22:ca:8c:29:95:45:
71:44:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:34:41 2026 by rpki-client