Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: NC8EAge+IWNtWkFI0xAfRwIVjHFQNzZdGuEyuLCaJTg=
Subject key identifier: 0F:80:AA:5B:B7:92:CD:2C:27:96:09:5F:65:C7:AF:76:CE:E7:81:0D
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019CAC7DC5FF392F5DEC4E2077BE008D0D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 07CA
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: qMlGmvT7IHymUwaEE3CUUoYjjBhKnjG3PIvcblJGKu0=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c5:ff:39:2f:5d:ec:4e:20:77:be:00:8d:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=0f80aa5bb792cd2c2796095f65c7af76cee7810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:3e:28:56:a2:52:d4:a6:1e:20:cc:98:a0:
28:fb:91:a5:eb:8b:62:f8:2f:5e:ff:b8:73:ad:ec:
c1:b6:8f:4f:57:7c:08:6d:a5:b8:3f:4a:2d:0d:ed:
5d:ab:be:8f:e1:78:11:f1:0e:34:25:94:86:a0:4e:
be:e0:a0:0e:5b:34:e0:66:4f:72:71:60:0d:be:da:
33:92:bd:a4:13:a4:a1:85:9f:2f:29:18:a1:c0:85:
e4:fa:58:76:74:85:b9:68:80:57:29:bf:54:cb:fd:
78:3f:41:0c:82:b2:ec:a3:9a:49:21:87:fa:ee:0f:
eb:b5:84:8a:19:2b:1c:3c:d5:a7:0e:9b:cb:e4:09:
ba:da:a4:77:a7:9e:b7:79:b0:13:fa:7a:1b:f7:8f:
d9:3d:aa:d3:a6:8d:5d:84:f0:54:e1:1d:9b:3f:64:
c3:3b:45:3c:c2:00:f6:a4:e3:1b:fe:f6:4f:02:7a:
d5:98:5c:49:1c:7e:91:e3:37:e0:ad:4c:ee:b2:84:
44:8a:37:cd:49:b0:4d:28:75:b9:f4:19:eb:39:0b:
75:a7:47:d5:0e:8d:83:1a:b6:59:f0:cd:b5:7d:41:
bd:64:36:14:50:cd:79:f4:62:0f:3c:c5:1c:12:05:
52:da:8c:38:fb:1f:73:7a:34:74:77:56:10:f5:ff:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:AA:5B:B7:92:CD:2C:27:96:09:5F:65:C7:AF:76:CE:E7:81:0D
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:c6:97:5a:15:e1:88:d5:d2:93:bb:46:21:57:df:b2:fd:
a9:6b:37:d9:af:62:7e:b1:5f:e4:11:8f:fa:b3:27:b1:14:77:
c7:bf:c2:52:d6:8d:88:de:17:22:cd:f7:54:35:ad:0e:9c:3c:
8b:a0:63:df:37:cb:f7:76:49:4c:49:e7:4b:f5:03:12:6f:70:
31:95:18:e0:2a:38:82:af:bc:c3:d0:b6:72:64:14:d4:c6:aa:
c6:a1:7b:f2:8b:75:fc:c0:2f:82:c2:fc:69:79:bb:9c:88:3e:
ce:88:67:78:eb:6d:ea:14:a9:a0:88:fd:b7:81:25:e9:d0:31:
b7:ed:c1:51:e0:06:cb:00:4b:13:41:53:5b:a1:94:2d:5f:81:
cb:7b:e6:e0:d2:f6:18:12:6e:ed:26:38:63:a6:6b:2a:ad:86:
f4:f4:27:32:22:e9:2b:b3:df:97:7a:84:ad:68:f0:46:0b:f0:
de:27:86:20:62:58:43:1b:16:af:9a:45:f1:29:e1:de:05:f3:
6c:26:f5:9e:db:d4:db:45:31:dc:c3:eb:f7:64:98:1f:a9:86:
12:61:95:3b:1a:5e:22:6a:00:3d:85:c7:3e:11:83:47:cf:bb:
70:b5:48:bc:99:eb:f5:5e:79:87:c8:83:5f:1a:5f:c0:98:fa:
a9:41:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:15 2026 by rpki-client