Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: mf8ravrFOKoSwYxU5tEPROKR0+Pwp5eL3K6HfvAtikc=
Subject key identifier: A5:39:77:B5:31:FB:F1:BB:B2:40:0A:9D:47:1F:6D:D8:B5:BA:73:0C
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 01A0C3326AAF22E70A70D30EB26273360A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 09E8
Signing time: Mon 21 Sep 2026 09:00:56 +0000
Manifest this update: Mon 21 Sep 2026 09:00:56 +0000
Manifest next update: Tue 22 Sep 2026 09:00:56 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: a4GC0XLtLiq6CZqg2XmtFIcGKp+3QZR6uT9uZ9VPCnQ=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:6a:af:22:e7:0a:70:d3:0e:b2:62:73:36:0a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Sep 21 09:00:56 2026 GMT
Not After : Sep 22 09:00:56 2026 GMT
Subject: CN=a53977b531fbf1bbb2400a9d471f6dd8b5ba730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:0b:a4:22:83:53:6c:f4:28:cd:01:d4:86:
30:4f:3a:85:32:e0:d3:38:9c:41:f6:ad:14:6e:07:
56:c9:c8:8c:9f:4e:a0:2d:7f:ae:bf:a5:9c:52:f6:
86:46:7b:98:43:d4:16:10:37:0b:a1:e9:90:d1:09:
3b:e9:12:29:fa:46:b3:5c:0a:db:06:ac:26:7f:4d:
b6:34:7e:92:b8:e3:1a:63:81:a0:2f:cf:1a:bf:4c:
15:a3:ef:d5:13:79:30:cc:c0:bf:ca:22:88:9e:c2:
14:55:f8:87:b1:26:0f:c8:7b:9e:6a:a0:bd:17:e9:
a1:8c:d4:a2:2e:f0:01:39:e5:5f:e2:e3:a1:ee:aa:
e8:3a:ae:b9:c9:9c:c1:78:af:a3:0f:24:0a:2e:50:
e4:86:77:79:88:08:83:92:89:de:dd:c2:90:0b:4a:
84:c4:5a:da:06:96:ce:70:f6:7f:a2:2f:16:44:93:
3e:5c:ac:00:ed:c9:84:2f:30:22:62:b8:9b:61:f7:
d8:42:93:59:e7:f3:5f:3f:a0:a8:65:68:ea:e4:26:
36:b3:1f:0f:5a:90:a3:5a:1b:f0:06:73:26:76:da:
09:59:9b:bf:e3:e2:8e:b8:09:ef:d2:d4:ef:4b:52:
49:51:a5:f0:1e:4f:31:42:0b:a2:bd:f2:ec:27:db:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:77:B5:31:FB:F1:BB:B2:40:0A:9D:47:1F:6D:D8:B5:BA:73:0C
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ed:76:00:8a:21:be:27:72:1c:9b:52:c0:b0:8a:6a:49:97:
98:42:98:1f:e7:4b:d0:00:c6:95:a8:86:de:0a:98:71:25:1d:
e9:aa:0e:89:5b:36:5e:6d:72:75:39:ca:27:41:e0:56:e6:80:
54:fe:b3:d5:55:ea:65:9f:b7:a1:a5:70:2f:06:0e:26:81:9a:
a8:6f:a7:a0:b9:b9:20:b9:d6:d9:85:af:66:e2:e5:82:36:8d:
d6:cf:c3:a7:a3:b4:88:69:2a:4f:7b:7f:1d:ee:c9:e3:15:c8:
64:de:73:f6:ca:c1:d4:0e:b5:33:78:52:d6:8e:ec:97:16:7f:
5a:fd:f0:60:09:0c:17:69:ae:b1:36:ea:6e:16:06:53:57:ad:
62:db:17:16:f2:37:20:31:ea:c3:bb:56:0b:39:28:f2:cb:3a:
85:22:2f:04:9d:84:e0:3e:f7:5b:3b:b1:3a:e9:f1:78:72:db:
0d:b4:c6:f7:d9:6e:e5:ab:a8:82:bc:29:1f:12:8f:76:42:11:
ab:24:03:3d:28:b6:c2:de:2f:8e:2a:9a:2e:f4:1f:7e:30:b5:
11:18:e8:74:75:05:9a:1e:b8:d8:56:c5:6c:ea:ea:1f:eb:33:
19:d4:b0:8d:22:a3:5b:bb:15:28:24:05:ab:0b:5d:b0:f2:3e:
7c:e9:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:16 2026 by rpki-client