Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: ygA/4vl2KlSHVH9QAh0d1fhOZJzzQBru1OZVanHhciw=
Subject key identifier: DF:BF:95:20:5A:A5:AE:01:5F:79:1B:1D:36:F0:69:14:F6:3D:A1:40
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019FA93E1175B9CD13197300A89E1E09D37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0956
Signing time: Tue 28 Jul 2026 15:00:44 +0000
Manifest this update: Tue 28 Jul 2026 15:00:44 +0000
Manifest next update: Wed 29 Jul 2026 15:00:44 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: 1Pfeab/R4fl0qEuds8mGELECq8RJ2ajPIqBjcRpMrRs=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:11:75:b9:cd:13:19:73:00:a8:9e:1e:09:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Jul 28 15:00:44 2026 GMT
Not After : Jul 29 15:00:44 2026 GMT
Subject: CN=dfbf95205aa5ae015f791b1d36f06914f63da140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:a1:90:36:cc:bf:fc:3c:11:53:66:d1:b1:
b3:ad:d7:80:bf:12:14:a0:f5:22:da:98:a2:17:e7:
80:36:eb:49:e8:f7:2f:06:ef:0f:56:a5:09:39:a1:
38:af:8d:b0:25:96:ad:da:95:80:39:07:c9:97:f6:
f3:2c:2b:7d:cc:bd:b7:35:27:9c:60:5d:29:2a:68:
62:d1:0f:cc:6c:44:bf:b5:20:6d:eb:2e:17:0a:ab:
e2:4e:48:4f:f0:ca:9e:ac:80:4f:08:d2:01:47:9d:
62:68:8d:db:f4:f9:6e:8a:c2:9d:e1:fa:24:41:5d:
02:d0:8b:76:0d:70:12:45:24:67:0b:a7:0f:3a:93:
c7:e4:e0:7c:d2:c4:67:43:8a:56:1f:19:a4:1a:72:
02:bf:cc:b2:d2:a3:7d:a2:74:5f:30:ba:8f:df:67:
3b:aa:95:a3:fd:e8:a3:33:99:14:da:9e:d3:08:80:
73:75:77:3c:89:c8:42:6b:53:3e:a3:8b:62:a6:35:
99:dc:ce:d3:6e:76:59:4a:ce:b2:81:53:b7:1a:e3:
ac:ef:ac:ff:64:88:bd:7a:ed:5f:45:7e:7a:59:6a:
c4:78:fd:c3:67:70:2d:40:aa:80:03:e2:9f:59:b3:
21:d5:e6:2e:bd:c9:c1:83:e1:98:ee:72:7a:aa:f8:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BF:95:20:5A:A5:AE:01:5F:79:1B:1D:36:F0:69:14:F6:3D:A1:40
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:fb:0f:46:38:05:7a:f3:f5:fe:ee:16:bc:c9:d4:f2:d9:
99:4d:47:4e:d4:25:57:7d:de:2d:3b:57:df:d2:6f:7d:d0:ea:
3a:75:9d:b2:1b:5a:cd:ce:c4:a8:e8:92:26:63:30:e0:0d:71:
0f:52:2d:fc:91:19:27:dd:09:46:a0:b1:2b:fb:a3:79:6e:21:
ef:9b:ab:55:1e:40:51:eb:72:8d:83:5a:33:b1:75:7a:cf:6a:
0d:d8:d0:63:6e:ab:4c:a8:a1:9d:a7:69:21:c4:79:ce:1d:76:
5e:7b:76:6f:08:09:26:14:75:16:ba:b1:9e:82:4f:f9:56:12:
66:26:70:55:f4:be:3f:a9:fe:02:ba:93:41:99:58:2b:14:eb:
16:cb:0d:87:ae:cc:a0:43:a3:d6:53:c0:9f:11:d3:ff:16:3d:
37:a8:43:99:91:f9:4c:c1:31:8b:0b:23:a2:51:5e:0e:f0:fa:
71:21:00:96:ad:42:14:98:18:f3:94:d5:06:10:f2:12:ed:85:
c0:ef:e4:75:ad:51:c3:c4:39:d6:3b:fb:8c:7e:09:b2:08:65:
14:f2:0d:04:88:56:b1:83:f6:93:f2:99:a0:bb:6d:49:9f:41:
3f:45:27:f2:f9:a0:c5:32:cf:f8:1f:6b:53:8b:8f:b1:83:01:
33:4b:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:32 2026 by rpki-client