Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: x6Ry3JPR0W/08iiYgybDsDgSdnGaxnf1/5V5ZI8eDUw=
Subject key identifier: BF:86:B7:E9:D3:8A:42:93:E6:44:02:3E:88:37:A0:02:D3:ED:5B:FD
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 019EC449E5882226C96A50B20C53116ECDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0CCA
Signing time: Sun 14 Jun 2026 04:00:37 +0000
Manifest this update: Sun 14 Jun 2026 04:00:37 +0000
Manifest next update: Mon 15 Jun 2026 04:00:37 +0000
Files and hashes: 1: MD2XknW8QXUXX5zjYirvLatDz1U.roa (hash: 57ZBGDriQ05ex2sQRZeUkWVivCM8pRal2i0bg/3JG3E=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: nQdBDHlVtmQb80g2SlWtlp1PSfCMyjRxQRWB9b6FM64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:49:e5:88:22:26:c9:6a:50:b2:0c:53:11:6e:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Jun 14 04:00:37 2026 GMT
Not After : Jun 15 04:00:37 2026 GMT
Subject: CN=bf86b7e9d38a4293e644023e8837a002d3ed5bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ba:4b:34:2b:9c:b6:2a:c2:55:28:8d:8e:48:
f4:c1:61:16:55:b2:a9:06:cd:b5:fa:0e:bc:05:0b:
6f:1c:b5:79:25:19:b5:9d:07:4a:4a:db:c4:2e:f0:
2a:06:32:ea:33:84:38:14:18:14:9f:52:ae:85:1a:
98:f9:eb:cb:3e:45:30:93:d7:40:41:73:aa:3d:f9:
73:a0:33:50:96:b6:f6:f5:e6:04:97:7c:91:9b:35:
ac:75:3d:0c:93:29:25:4f:ab:df:f4:2c:84:b7:10:
3d:dc:85:89:8e:c2:50:e7:ba:1c:46:a0:96:c4:d2:
db:c9:a3:46:37:88:67:ee:c2:5d:74:b8:7a:aa:de:
ae:86:f7:69:4e:52:a3:6f:df:c6:a2:51:a3:e8:e0:
1e:12:96:0a:7e:d7:81:7a:ce:66:15:9c:47:c9:fe:
3b:af:3f:71:47:08:ff:8f:3b:b5:53:c6:b0:4d:e5:
a4:f2:8c:ee:a8:48:5a:c6:93:db:9b:be:dc:db:8f:
6d:70:36:c2:60:0e:83:2a:d0:88:42:d5:20:da:0c:
74:29:9f:a0:c1:21:d6:9a:61:4e:c3:5d:e3:94:c1:
b8:85:82:90:4c:2d:77:f5:7a:78:49:ed:92:c6:2e:
c9:ee:c2:7c:39:14:b8:47:38:b1:2b:d3:f8:71:27:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:B7:E9:D3:8A:42:93:E6:44:02:3E:88:37:A0:02:D3:ED:5B:FD
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fd:09:8a:04:17:5d:a9:43:0a:f9:c8:53:d4:45:cd:b0:1a:
ed:72:54:12:55:c3:c8:f7:84:9b:3e:ca:2a:7c:8a:77:f7:de:
f4:a7:b2:82:20:d0:42:4d:af:3e:47:2d:d3:19:26:06:3a:91:
b2:9e:23:53:03:7e:54:b5:b7:d4:88:c1:7d:bf:26:98:5f:aa:
0a:48:0d:df:d4:52:56:70:ee:80:7e:68:32:3d:0a:a4:af:75:
2b:b5:29:3e:0f:06:4f:8c:51:bb:2a:64:d7:69:3b:5f:be:da:
f5:04:97:75:29:b6:56:45:0a:8d:c3:cf:e6:46:d5:0c:f4:d3:
bd:ff:6d:0c:dd:d4:18:74:6e:bd:d9:ee:2d:bd:e3:01:98:a3:
0b:d9:bb:c2:9a:fc:ad:7a:ac:6e:ea:be:58:91:da:76:63:25:
f8:fe:a0:a5:f5:27:45:87:dd:7d:63:81:a4:0b:dc:ea:2c:9f:
a7:57:5d:e2:d9:e9:8f:8a:1c:4f:44:37:35:8a:7e:de:85:9c:
75:73:4b:9a:f6:3a:9a:8e:9b:9f:b4:54:45:5e:1a:6e:24:15:
40:0a:2e:9b:36:1b:23:61:ba:82:44:af:10:ff:9a:0d:df:84:
09:70:4e:64:bc:af:1b:30:65:02:21:13:3b:db:34:87:4c:52:
9f:c2:24:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:33 2026 by rpki-client