Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: M7Q2+yAAAD7CibxXaowZ2r1P9EBKoHSNHuOOL+ISwJs=
Subject key identifier: 72:2B:38:E6:BF:A2:D0:B9:65:DE:58:7A:31:4F:7F:4D:C5:17:DA:0A
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019EBE47F3366CA91317A464EA89C6744B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 05AD
Signing time: Sat 13 Jun 2026 00:00:46 +0000
Manifest this update: Sat 13 Jun 2026 00:00:46 +0000
Manifest next update: Sun 14 Jun 2026 00:00:46 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: DUBEfHYzdpUIM2qf7+WFVA25JCkEJ2tGwgSAWM3xKLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:f3:36:6c:a9:13:17:a4:64:ea:89:c6:74:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Jun 13 00:00:46 2026 GMT
Not After : Jun 14 00:00:46 2026 GMT
Subject: CN=722b38e6bfa2d0b965de587a314f7f4dc517da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:8d:3f:82:99:ed:a7:f3:77:bc:ec:f5:ce:
a8:2e:c7:44:d5:f1:c4:09:a1:fb:f7:e3:93:a6:22:
cf:f3:d6:a3:29:22:ce:6e:e7:0f:4f:af:aa:06:3c:
ca:d3:49:ae:54:58:1d:ee:8d:62:17:df:f5:39:b7:
a6:27:3d:15:87:2c:bd:d7:dc:98:34:e1:37:df:db:
8b:69:2d:b2:c0:f8:0c:e5:9b:f1:e7:06:62:58:1b:
1a:58:15:f0:01:77:c7:dc:9a:cb:e2:8f:5d:40:3c:
c4:8b:70:14:36:57:80:51:a1:c0:bb:bc:9a:52:a5:
8a:c7:b4:01:fb:39:3b:00:2a:b7:ff:04:5d:4e:19:
d9:ea:a7:6f:b1:2d:b9:8e:6b:8c:35:0f:65:9a:2d:
8a:cc:2c:a7:1e:df:1d:77:74:6b:20:91:ff:0d:27:
8d:90:e3:c7:55:ec:8f:49:26:38:31:cf:36:db:bc:
16:0b:70:3e:dc:aa:5c:ad:de:55:c3:03:66:3b:26:
80:84:d2:a3:3d:a7:8a:1c:49:1b:46:37:b1:9a:33:
ad:ae:4a:c8:83:11:77:e7:90:f1:a2:8d:8d:f5:84:
8d:3b:69:29:b6:dd:f6:29:18:db:be:7b:fb:d1:fd:
b0:45:b8:eb:dc:4e:23:e0:54:b6:5c:39:a1:94:db:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:38:E6:BF:A2:D0:B9:65:DE:58:7A:31:4F:7F:4D:C5:17:DA:0A
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:02:13:cd:5a:15:8a:66:7c:04:df:e4:9e:c3:56:2a:75:9f:
e0:d3:e1:e3:89:2c:a8:5d:fc:b9:63:31:d3:a8:8a:bb:a3:ef:
5c:44:d6:27:05:c0:f5:da:c9:69:1b:d9:20:5f:b7:5d:75:f8:
19:ca:7e:7b:13:cf:70:4e:f1:3a:4b:ac:17:ad:5c:30:74:eb:
1a:a4:6f:71:89:b0:29:d9:43:a1:d4:d2:b3:08:85:05:fa:fe:
74:b9:dc:50:85:4f:cc:d3:44:65:dd:b9:0f:6e:ca:83:10:9b:
02:04:1e:7c:a9:dc:5f:81:1a:84:24:09:33:7a:e4:03:b7:06:
3b:9e:78:01:df:39:fe:0f:25:88:2d:46:cc:c0:e2:13:49:94:
5a:e9:20:14:17:d8:90:c0:ed:a5:b6:c9:20:0b:f0:41:ed:39:
8c:bf:d5:34:a0:e5:ca:90:4f:9f:db:ac:23:06:33:f1:85:71:
61:66:6d:31:32:e0:c4:db:b4:c5:e1:7b:48:1e:74:c0:41:69:
f9:ce:56:b3:b6:15:a8:be:d0:90:05:f9:c8:b2:54:63:d3:75:
01:45:4b:d7:19:7c:dd:0a:a8:8e:87:7b:25:f0:29:09:7f:51:
7e:8d:5d:a5:99:d0:d8:37:2c:bb:ab:22:22:84:b2:d6:8d:75:
14:a4:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:03 2026 by rpki-client