Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: nu9JdH6TJdo5YyRdsrrKaK6rXrlZytefabG48GlOIVM=
Subject key identifier: 11:22:2B:A2:9F:B6:25:EF:0C:84:83:84:E7:53:3F:C4:D2:C5:0C:D2
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019CAA58B0A459BB90911948D7D444BAE1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 073F
Signing time: Sun 01 Mar 2026 17:01:04 +0000
Manifest this update: Sun 01 Mar 2026 17:01:04 +0000
Manifest next update: Mon 02 Mar 2026 17:01:04 +0000
Files and hashes: 1: 02YEKq1IDPEF8lBAQFD4RLUmuKw.roa (hash: TS/pQGf2LaMx5573KYxQQhCXKrO448hCMH6JUvctiu8=)
2: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: 68JmHwHtytMB09qByONYVbDEZj8ceROYvSPLOXeLZvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b0:a4:59:bb:90:91:19:48:d7:d4:44:ba:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Mar 1 17:01:04 2026 GMT
Not After : Mar 2 17:01:04 2026 GMT
Subject: CN=11222ba29fb625ef0c848384e7533fc4d2c50cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:83:2b:5d:e6:ce:6c:a3:40:2c:df:e6:7e:ae:
5d:b9:b0:45:fd:3a:59:8e:2b:b0:75:18:77:63:14:
21:eb:cd:1c:45:05:eb:4c:c8:06:7f:18:22:de:a6:
fc:b1:33:06:93:aa:78:a5:9f:03:e4:90:d0:4d:2b:
0a:af:ed:d1:3f:7f:cb:6d:30:32:01:0f:33:2b:fc:
bc:ea:b7:e1:81:eb:f6:d9:bc:d6:82:88:28:41:b7:
38:2b:d0:64:24:d1:16:74:02:84:50:23:1a:a0:ef:
b9:42:4c:55:61:36:a1:53:62:8f:48:3c:9d:7e:2e:
08:45:cc:8e:3f:22:22:f4:53:1a:9a:fa:36:a3:81:
ba:e4:57:cb:f9:4a:dc:e7:f2:54:3d:2e:9c:04:ed:
a8:69:bd:b6:d1:2d:e7:c6:97:28:d1:0f:ac:1f:77:
20:6d:1e:c9:c3:96:b7:b9:32:7e:07:e5:d4:52:df:
e6:53:5c:21:9b:65:85:a9:8e:31:dc:91:9b:0d:d3:
47:8c:00:ca:fb:27:7f:05:77:07:a1:0e:4a:c2:fa:
c0:ef:ef:23:0c:1f:e6:ee:c2:60:1a:b1:a7:aa:26:
63:d1:5a:bd:e9:8a:e4:a6:33:e7:f7:ab:c2:a3:f7:
d2:78:e7:94:ba:71:5c:d9:c0:99:1d:e2:24:d3:b3:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:2B:A2:9F:B6:25:EF:0C:84:83:84:E7:53:3F:C4:D2:C5:0C:D2
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:95:50:b7:21:6c:d8:56:da:48:e1:e8:53:3c:77:c5:79:
64:b3:11:9c:36:b8:16:42:3e:6a:26:45:14:ae:8a:a1:1b:67:
9d:6d:9e:69:96:a6:dd:e0:42:dd:db:fb:5a:c4:85:5b:ac:a3:
4d:58:22:31:1c:8e:8d:74:a3:54:07:15:02:82:31:92:41:b7:
97:d3:db:1a:a9:a4:5c:e0:94:ab:80:f8:f1:98:10:c9:ff:1c:
96:46:f6:f1:67:ec:57:41:5c:6f:b4:fb:9b:0d:2e:24:db:c3:
c1:46:8d:0f:da:21:6f:0b:5b:38:ea:b7:5e:21:9a:e5:71:95:
7b:3f:bf:ca:15:7e:c1:5e:32:d9:cb:0c:9e:ae:2f:d8:eb:a2:
ac:59:6f:86:d9:4d:98:40:9d:15:0e:b3:07:7b:3b:93:5a:59:
05:2c:79:d5:3b:30:42:7c:15:5e:e4:c3:e4:0a:a3:c0:6c:d7:
4c:97:00:85:ba:38:db:28:9d:9c:9c:3f:fa:9b:f2:da:6d:09:
76:79:4c:f3:3c:d1:2d:18:40:d7:ea:48:8b:1b:88:65:72:f6:
d6:2f:ec:a2:bc:8a:19:ff:4f:25:33:8e:c2:2a:83:1f:ea:17:
2f:6d:37:97:59:b6:02:7e:23:59:3e:40:df:7b:d7:75:b5:ff:
b4:e8:11:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:45 2026 by rpki-client