Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: 4wEDxaryQtX7kRMGr+qz2htYc0xSL+aY+n1FigMvP+U=
Subject key identifier: F1:65:DD:37:50:17:91:03:C0:A4:40:BA:79:7E:13:42:67:DE:F7:57
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019D98BDF02768E06BF798DCE7A487756882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 0515
Signing time: Fri 17 Apr 2026 00:01:17 +0000
Manifest this update: Fri 17 Apr 2026 00:01:17 +0000
Manifest next update: Sat 18 Apr 2026 00:01:17 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: 3GKR9kQZJMe+3hvZPIbRORxwMY7G9f8lPI04/HY1/yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f0:27:68:e0:6b:f7:98:dc:e7:a4:87:75:68:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Apr 17 00:01:17 2026 GMT
Not After : Apr 18 00:01:17 2026 GMT
Subject: CN=f165dd3750179103c0a440ba797e134267def757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:ca:f2:07:22:be:cc:d8:34:69:7a:db:5b:
d1:cd:0c:ad:ca:d9:07:32:07:73:f7:56:90:7b:f1:
a9:3e:fc:07:f0:5d:33:1f:92:04:bf:ba:c6:6d:f6:
d0:21:8a:77:ac:9a:47:76:ba:8d:b3:a4:6c:04:fb:
3e:53:a3:d0:ee:90:15:a5:0a:26:98:32:ca:a4:40:
07:63:4c:30:06:8c:31:d6:ac:60:98:1f:a2:1a:03:
48:72:f1:63:db:5a:eb:4e:4f:fb:3a:b6:75:36:05:
20:10:53:1a:68:82:f1:49:70:e1:67:e1:ef:d1:29:
a6:62:20:ce:db:76:8c:2c:b4:64:50:20:4b:7c:5b:
5b:ac:86:a4:83:e6:06:c6:b5:fe:a7:78:dd:d3:6e:
39:7e:ae:ad:53:e2:d8:5f:0c:aa:0f:d4:70:f6:73:
af:c5:db:71:9b:79:40:55:3b:cf:e3:f7:16:8f:20:
3f:be:e7:c5:bb:01:23:0f:9a:d0:8b:2b:37:5e:67:
83:1f:25:4f:8e:00:9e:f7:80:8d:df:37:94:ef:d3:
7a:1e:dd:c8:0e:02:b7:ab:83:3b:ab:1b:2a:71:8c:
16:b3:f1:29:65:c6:c7:3c:2d:83:f2:ad:4c:d0:45:
92:44:9d:09:95:b2:b2:d0:62:2b:12:88:6a:bd:f4:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:DD:37:50:17:91:03:C0:A4:40:BA:79:7E:13:42:67:DE:F7:57
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:97:4f:79:de:89:d6:28:38:5e:d7:5a:c7:2b:0c:e4:e2:e3:
fe:1a:42:ed:37:1a:6e:b0:12:8f:ef:e5:14:b9:88:dd:cd:99:
50:8f:38:f9:45:27:e0:de:31:4d:6f:08:e8:d0:b1:a8:e4:d6:
07:60:49:fc:1e:24:48:65:3e:0a:2c:ef:fa:fb:7c:41:ae:ed:
7f:ae:c0:c9:37:23:6a:ae:5c:02:ef:a8:43:c0:0f:6f:cb:48:
a3:1e:fd:7a:42:54:4d:10:0f:8b:5a:7e:c0:20:df:4e:3a:79:
73:25:0b:b8:f0:58:ee:13:b0:41:1b:4d:cc:3d:9f:47:93:10:
a4:8f:96:bb:88:14:03:ce:7d:d0:87:dd:fd:9b:db:cd:86:48:
3b:23:c2:6d:86:3a:ea:4b:7b:0d:d8:2d:ab:d0:b0:14:32:e7:
38:a7:0f:49:f0:0f:08:69:9e:3a:43:99:64:4e:d0:49:0c:71:
25:6e:f5:2f:12:05:17:b1:1b:58:ad:13:31:9d:70:f5:71:a6:
19:9c:d2:ad:57:1e:a1:45:25:38:9d:b9:f7:3d:37:f3:03:d7:
82:28:25:ac:0c:02:4b:cc:ec:df:6c:23:c1:f2:bf:12:86:69:
37:df:8a:4b:4d:1a:f1:b8:3c:d0:88:bb:97:16:08:91:1d:d2:
bf:ca:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:40 2026 by rpki-client