Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: EKqfK2nisft6eCFZZsenC2oIP31NpaAU8zPhAvdrWUA=
Subject key identifier: D7:24:F2:EA:D2:B6:0A:AE:AD:EB:FB:AD:7A:F8:D0:46:2F:33:0E:55
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019DA3AF155DCD79012C49073FA94BE6C535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 084A
Signing time: Sun 19 Apr 2026 03:00:53 +0000
Manifest this update: Sun 19 Apr 2026 03:00:53 +0000
Manifest next update: Mon 20 Apr 2026 03:00:53 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: 1WVSsxT02bJwcgIZDuTKmn9NyBWF/czwFEQQdgigVRc=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:15:5d:cd:79:01:2c:49:07:3f:a9:4b:e6:c5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Apr 19 03:00:53 2026 GMT
Not After : Apr 20 03:00:53 2026 GMT
Subject: CN=d724f2ead2b60aaeadebfbad7af8d0462f330e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:16:a3:57:e3:4a:99:8d:5c:1b:44:05:02:
39:7f:03:c0:8c:09:9f:aa:71:13:da:e8:e3:e5:4a:
df:9e:d3:7f:63:e3:14:f0:75:8b:98:51:f9:f7:b9:
56:fc:95:eb:b9:c6:75:34:11:96:23:77:56:f6:31:
05:5e:43:3e:95:66:0b:57:7d:c5:03:1b:ef:1d:7b:
f4:ac:de:d7:fd:ef:22:74:52:3d:ce:b1:06:30:ea:
31:32:c1:6c:a7:b3:17:c0:35:ff:37:1e:a5:f8:69:
c2:fe:3b:fe:89:b0:f2:41:19:b3:3b:a4:eb:41:95:
53:73:1c:2a:07:80:b9:f7:78:b5:30:ba:bf:10:bf:
34:1b:b5:63:81:b0:57:4f:ca:5d:16:a3:29:2d:9e:
0d:dd:cd:e6:17:78:50:c0:0d:9a:4c:4f:0e:30:6e:
16:ff:29:07:58:64:12:32:39:66:2b:6c:a3:aa:00:
e8:eb:e2:01:b5:a1:5c:c4:63:cb:e1:dd:89:bb:d8:
7b:24:d5:7d:2d:45:3f:06:da:36:ee:a7:fc:d8:ba:
d8:7b:a1:af:62:73:b2:c3:ce:8a:f7:97:b0:9d:5f:
d4:a7:f2:a1:4b:ae:ac:d3:f0:68:74:3d:80:d4:1b:
19:59:0b:e6:75:41:55:27:3b:b0:23:91:1c:39:f0:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:F2:EA:D2:B6:0A:AE:AD:EB:FB:AD:7A:F8:D0:46:2F:33:0E:55
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:79:19:d3:76:54:e8:39:61:0e:62:32:52:64:77:96:9a:
9c:d9:a1:3c:47:0c:03:6e:3c:3b:c5:73:9e:f4:da:65:3f:15:
35:aa:c4:64:c9:d2:21:7c:2f:a0:fa:df:d5:b8:81:f6:95:1f:
70:d2:e9:d8:a5:db:93:c0:ad:74:a5:89:83:61:5c:20:1d:f2:
20:87:f7:ab:b0:26:ae:f1:cb:fa:0c:a6:dc:2a:4a:10:46:af:
0c:51:b3:80:2d:25:c7:96:95:b6:57:35:4c:8f:e2:84:d6:46:
3a:5f:06:4d:08:79:a4:45:f9:a7:3c:18:d2:95:fc:46:26:b3:
af:3b:f5:df:87:f2:67:98:d8:76:76:84:a3:59:42:27:63:55:
73:73:63:59:1f:f9:28:92:a8:01:be:c4:9e:64:a1:6b:05:a0:
64:89:0e:ff:26:61:56:ca:dc:39:d1:fe:ea:1c:61:ca:19:22:
fa:d2:97:7d:6d:71:09:e5:04:af:a8:99:f6:62:03:94:d3:2a:
b5:6a:9d:0b:be:ab:f0:59:4c:10:d8:b9:80:02:e8:de:42:46:
a2:49:b1:99:51:6c:d0:6d:44:7e:c6:22:02:ed:48:07:a4:de:
3f:28:4e:77:f8:25:1c:b3:04:42:8b:4e:b7:86:49:2c:ad:3a:
57:77:28:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrxVdzXkBLEkHP6lL5sU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0
YzNiMDgwHhcNMjYwNDE5MDMwMDUzWhcNMjYwNDIwMDMwMDUzWjAzMTEwLwYDVQQD
EyhkNzI0ZjJlYWQyYjYwYWFlYWRlYmZiYWQ3YWY4ZDA0NjJmMzMwZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNAWo1fjSpmNXBtEBQI5fwPAjAmf
qnET2ujj5UrfntN/Y+MU8HWLmFH597lW/JXrucZ1NBGWI3dW9jEFXkM+lWYLV33F
AxvvHXv0rN7X/e8idFI9zrEGMOoxMsFsp7MXwDX/Nx6l+GnC/jv+ibDyQRmzO6Tr
QZVTcxwqB4C593i1MLq/EL80G7VjgbBXT8pdFqMpLZ4N3c3mF3hQwA2aTE8OMG4W
/ykHWGQSMjlmK2yjqgDo6+IBtaFcxGPL4d2Ju9h7JNV9LUU/Bto27qf82LrYe6Gv
YnOyw86K95ewnV/Up/KhS66s0/BodD2A1BsZWQvmdUFVJzuwI5EcOfD+mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNck8urStgqurev7rXr40EYvMw5VMB8GA1UdIwQY
MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt
ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj
LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5l5GdN2
VOg5YQ5iMlJkd5aanNmhPEcMA248O8VznvTaZT8VNarEZMnSIXwvoPrf1biB9pUf
cNLp2KXbk8CtdKWJg2FcIB3yIIf3q7AmrvHL+gym3CpKEEavDFGzgC0lx5aVtlc1
TI/ihNZGOl8GTQh5pEX5pzwY0pX8Riazrzv134fyZ5jYdnaEo1lCJ2NVc3NjWR/5
KJKoAb7EnmShawWgZIkO/yZhVsrcOdH+6hxhyhki+tKXfW1xCeUEr6iZ9mIDlNMq
tWqdC76r8FlMENi5gALo3kJGokmxmVFs0G1EfsYiAu1IB6TePyhOd/glHLMEQotO
t4ZJLK06V3cooQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:39 2026 by rpki-client