Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: bLiBL9jmaLHtZTqlSbU3eodJFQEFN0EqoWV1+ZSzlNU=
Subject key identifier: 0F:35:38:5C:B1:43:40:BC:D4:73:C7:0F:54:46:F8:D4:3D:87:7F:C6
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019D9DE3FFC2D223CDA9F780349F0EC00CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 02AB
Signing time: Sat 18 Apr 2026 00:00:58 +0000
Manifest this update: Sat 18 Apr 2026 00:00:58 +0000
Manifest next update: Sun 19 Apr 2026 00:00:58 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: i6wQAwGZQYbFGlSfJo1ib8dc2UMwbTjqzLfSI73E0S4=)
2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:ff:c2:d2:23:cd:a9:f7:80:34:9f:0e:c0:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Apr 18 00:00:58 2026 GMT
Not After : Apr 19 00:00:58 2026 GMT
Subject: CN=0f35385cb14340bcd473c70f5446f8d43d877fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:6a:97:da:b8:7b:44:83:b2:43:d2:47:4b:
b3:94:e9:0a:a9:30:29:45:72:86:06:a1:01:7e:3c:
f7:0e:94:98:1e:cf:a3:a1:30:1c:26:5e:bd:58:4b:
d2:23:e5:a5:25:01:8f:de:d2:d2:e6:c3:81:45:b3:
21:54:4c:b5:06:22:46:91:f8:c7:fc:71:4b:2f:e5:
a9:01:8e:96:1b:61:21:cd:e6:45:53:8f:0f:6e:0e:
4d:57:e1:88:08:ac:e1:67:20:1b:b7:bf:f9:a1:fe:
a1:83:cc:2c:01:64:1e:44:5f:a3:1d:5c:ad:b0:6e:
7b:a9:4a:9b:dc:da:1a:f1:a1:af:24:97:8f:d7:16:
3d:1e:ba:ae:07:e8:0f:3c:19:14:0f:a1:2f:48:3c:
e3:57:05:04:f8:72:54:0e:33:c8:5b:b2:c3:73:3e:
a1:e7:7b:88:77:dc:56:03:7a:ae:ea:05:a4:7b:c9:
2a:dd:08:46:63:e6:27:dd:2c:b6:43:2e:76:e5:6d:
95:b2:43:06:17:fa:f3:96:9e:46:6d:b0:21:df:4d:
d7:0f:24:8d:88:32:5b:ff:88:38:20:e0:85:b8:30:
93:26:ae:c0:89:04:5e:8f:b1:eb:4a:c4:27:b1:c2:
fc:6b:ab:1f:f2:2d:cb:4d:ef:d6:00:5c:48:23:a9:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:38:5C:B1:43:40:BC:D4:73:C7:0F:54:46:F8:D4:3D:87:7F:C6
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:6b:37:58:db:59:10:2e:46:bc:c1:03:da:7f:f9:14:12:
f5:a2:83:88:af:85:bc:d1:b0:be:e4:86:3b:38:b0:a9:73:a0:
8f:79:69:63:45:94:91:85:3a:1c:d3:05:05:13:17:52:0b:dd:
05:e3:0e:1f:d7:0d:3f:8e:8c:14:32:5a:1e:e5:74:e4:bb:23:
cc:09:1c:ab:da:28:f0:d7:af:f7:13:2c:8d:a1:a7:4e:df:84:
bc:a1:c0:cb:9c:9e:46:6c:b5:ff:83:d7:d2:f3:48:e8:3e:8b:
d3:2b:01:6d:bc:40:6e:a6:f1:b0:64:92:9a:34:21:07:c3:ee:
3c:e0:71:b0:d0:32:d5:c7:ac:df:7b:90:26:e4:a2:6c:93:54:
4f:d8:2a:26:f4:7c:79:6d:7b:23:43:52:47:87:8d:2d:52:50:
57:9d:a3:14:31:89:7c:78:ce:00:11:f2:b8:fe:38:49:c8:0b:
49:df:8c:45:c6:29:89:de:7f:7f:0e:66:67:64:20:4f:b9:1e:
cf:b0:8e:98:85:83:f3:08:15:8c:8b:91:58:6d:d2:47:5d:b9:
2f:b9:ab:49:f1:45:51:0a:ef:8a:6c:43:fc:ee:fa:7f:09:01:
7f:17:46:c7:9b:b4:0b:af:ff:13:56:d7:0d:ea:c4:5f:25:68:
d3:44:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:08:21 2026 by rpki-client