Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: l0cDVn12zeJPOD5SXIiI+o/oxM6RlUEQiNf85W1CtPA=
Subject key identifier: 24:D0:6A:7A:73:67:2B:7B:A5:08:6C:81:7F:69:F6:5D:16:49:20:4D
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019D99996400346FB13BED31571A2EF44EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0DA1
Signing time: Fri 17 Apr 2026 04:00:59 +0000
Manifest this update: Fri 17 Apr 2026 04:00:59 +0000
Manifest next update: Sat 18 Apr 2026 04:00:59 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: SpaRw1olrSczk3e8VnLjU05j2PI2lbh4ohSq4G5X6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:64:00:34:6f:b1:3b:ed:31:57:1a:2e:f4:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Apr 17 04:00:59 2026 GMT
Not After : Apr 18 04:00:59 2026 GMT
Subject: CN=24d06a7a73672b7ba5086c817f69f65d1649204d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:2c:3d:f2:98:f3:e0:1d:30:fb:73:d0:09:
7e:2b:ca:89:b1:9f:60:fb:59:28:22:1e:6b:2a:7e:
e4:71:64:06:81:c0:9e:21:92:6b:99:11:b3:97:02:
0f:1e:c3:fe:bf:fd:4c:83:df:fc:d7:cd:8f:7b:c1:
4b:64:b9:b4:7d:b0:0d:5b:33:50:9f:dd:a1:fb:15:
6d:3b:96:7b:2a:d0:c2:48:ef:ee:40:bc:7f:78:6e:
1a:80:a3:01:ff:57:39:53:33:6d:63:f9:39:a5:46:
9b:09:f9:99:3d:1b:24:90:26:42:50:8a:4e:21:70:
3d:8f:2e:ea:d1:c9:98:1c:19:2d:b2:4b:48:eb:23:
bc:ad:e2:da:48:16:43:29:8a:6d:b2:3e:93:89:7d:
5e:ce:19:c0:d7:fc:42:8f:9d:b1:e6:13:13:d4:4a:
24:6a:0c:f0:e1:4a:78:a4:9f:09:68:7a:27:ef:44:
9d:61:07:f1:67:37:1c:c8:6a:d5:29:af:bc:fa:da:
af:34:c4:31:76:b8:6a:b7:8e:97:e2:94:15:ab:a2:
5b:19:3f:5a:f2:82:c9:52:68:a8:88:82:f2:67:cf:
0d:d4:45:ba:b1:90:13:79:76:58:67:fc:0d:cf:e2:
1b:48:f0:4d:b6:42:97:49:e8:c0:fb:99:62:28:38:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:6A:7A:73:67:2B:7B:A5:08:6C:81:7F:69:F6:5D:16:49:20:4D
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:f2:59:f4:5c:1c:4e:b9:81:40:b6:fa:32:90:fc:c1:aa:
2e:75:a1:76:14:07:36:cd:0c:7f:29:38:5a:9f:9f:3f:78:ec:
3b:a8:49:e8:49:06:c7:3a:d7:93:b5:bb:dd:af:d3:d4:28:e5:
5a:85:d1:13:d5:8b:ec:f5:d1:ab:e5:a3:39:46:d8:69:64:62:
10:39:06:78:cd:0f:1c:dc:43:de:3a:ac:64:c5:2f:4b:4c:a4:
62:c6:c7:1a:b4:f8:85:1d:8f:fb:e1:00:cb:a7:48:57:60:c6:
03:44:1d:3e:11:42:24:69:ce:ab:34:35:c4:fc:27:af:cb:34:
82:1d:ce:5c:a3:2f:fd:48:e9:af:ab:1c:16:bd:32:56:f9:99:
dd:7d:8b:8c:3e:99:8d:83:1b:be:2d:0b:f4:ac:e6:1f:93:a8:
14:8e:42:cd:aa:21:07:50:af:aa:54:15:da:14:bc:15:d2:90:
05:e2:34:95:25:37:7e:80:43:a6:f0:84:e3:d9:46:73:0f:65:
38:d1:bf:06:00:9b:86:76:43:24:90:81:2a:11:d7:a2:8c:29:
ea:3b:92:60:ba:48:fd:c7:b3:d1:a3:a1:33:05:c6:37:a1:95:
89:3a:49:1a:d0:83:ff:75:f1:5f:b5:16:95:15:17:ca:00:24:
1e:59:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:48 2026 by rpki-client