Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: aNnRBzX3G4C3sw1KUOWixp6Qhcd395NaGoUWSLmG/YQ=
Subject key identifier: 01:0A:BC:29:67:C2:71:5E:67:A9:C8:BB:D0:EB:63:6D:FC:A8:70:86
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019CAD2254C92EA697B9C1DDEB4B30DD8F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 049B
Signing time: Mon 02 Mar 2026 06:00:34 +0000
Manifest this update: Mon 02 Mar 2026 06:00:34 +0000
Manifest next update: Tue 03 Mar 2026 06:00:34 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: BloaSo6ro8eg8c0TqDrXVBoos2s1dChbYjuGnqSyVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:54:c9:2e:a6:97:b9:c1:dd:eb:4b:30:dd:8f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Mar 2 06:00:34 2026 GMT
Not After : Mar 3 06:00:34 2026 GMT
Subject: CN=010abc2967c2715e67a9c8bbd0eb636dfca87086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:ea:5d:82:2f:40:e1:e0:89:8a:c9:85:be:
b4:33:82:c4:7a:36:0d:4f:2e:46:fa:f2:6b:dc:66:
ed:6e:87:d5:bd:c9:78:34:52:2c:71:b6:bd:9e:e0:
1b:fa:6f:be:94:2e:ef:f7:2a:5a:90:fd:0b:59:a9:
80:8e:c1:4a:0b:ba:ae:f3:96:57:b4:f1:db:fa:4f:
3e:5e:93:3b:78:e9:c8:05:5e:d4:7d:7e:ba:5c:b0:
eb:83:d5:68:e6:f7:ac:00:d7:c0:19:36:cd:fd:bb:
f4:59:6b:22:d5:96:c6:d7:d1:0d:1e:f1:10:f8:35:
1b:d3:c9:98:a2:09:a9:c6:00:36:36:67:d0:5c:46:
67:2d:74:7a:42:b7:f3:89:d7:f9:c3:f8:99:f8:1e:
17:1f:92:99:88:aa:18:44:ef:d6:49:70:06:46:ac:
a4:03:72:01:7f:d3:d5:db:0b:0b:9f:d7:89:15:10:
00:b2:fe:7c:16:e2:b9:d4:04:ed:1c:6b:21:1a:7f:
be:2f:f6:07:45:14:45:e9:46:6c:9a:d7:bc:c0:2d:
d7:30:3f:09:02:19:4b:4a:23:80:6e:01:f6:54:37:
c4:9f:a2:0f:85:a1:93:fa:00:34:20:fb:7b:f6:b8:
58:9c:3a:e3:27:ec:e4:a2:26:88:7a:a8:71:46:a1:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:BC:29:67:C2:71:5E:67:A9:C8:BB:D0:EB:63:6D:FC:A8:70:86
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:90:76:dc:99:e5:58:b5:85:d7:ab:1e:cc:e8:b6:6e:42:
06:a4:5a:bb:bd:0c:0d:5e:64:7b:7e:6b:51:51:e2:2a:9c:e8:
0b:96:6f:ad:5e:b6:36:e8:2f:6b:32:b6:4b:0c:cb:f3:d8:f5:
52:60:d0:95:c2:61:d5:04:e2:d4:18:f3:b4:40:aa:f3:a0:e3:
6d:4e:d1:4a:72:91:51:42:e3:4b:ef:05:c4:39:a2:4b:f8:01:
98:7f:c0:1f:a7:e0:4d:ce:04:99:92:24:b9:be:1d:1e:e4:c6:
27:df:37:a9:f3:f4:8c:e8:68:49:77:8f:d2:ae:27:8d:98:b0:
26:8e:b1:ef:dc:7b:91:a9:e4:b2:7c:da:2e:e5:40:c8:ec:1d:
3b:8d:24:57:1c:25:84:90:6c:53:82:20:7f:ce:0e:02:d0:c9:
b3:8f:ef:47:d4:ea:c2:b4:d0:0c:98:1a:0d:ed:60:ac:e4:9a:
65:fa:14:c2:0d:04:30:2b:9b:71:d3:6d:83:fa:0b:e8:c2:19:
31:3f:47:c5:51:66:e9:9e:af:eb:a3:db:18:0e:2a:8a:c5:54:
1e:f9:94:f2:42:22:b0:f7:88:4a:0c:fb:d3:e1:33:79:e5:b3:
69:3e:13:49:35:d1:a1:75:08:dc:71:24:00:11:bf:24:80:68:
fb:97:9a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:18 2026 by rpki-client