Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: nTeKPzkcNYG6wt55lN+rpVd6X7hwEEj8+udkLDQUNVw=
Subject key identifier: 2C:40:C9:A7:CC:31:3E:FB:C6:64:55:2E:72:CB:09:FD:AF:DB:98:9B
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 01A0C9D89E06BA72801998F40BDE49F6BF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 11C8
Signing time: Tue 22 Sep 2026 16:00:11 +0000
Manifest this update: Tue 22 Sep 2026 16:00:11 +0000
Manifest next update: Wed 23 Sep 2026 16:00:11 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: Ojkx6l2qlsT2GhTL+Xm23Jgic4d7v8ESmEgQXfZU04A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:9e:06:ba:72:80:19:98:f4:0b:de:49:f6:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Sep 22 16:00:11 2026 GMT
Not After : Sep 23 16:00:11 2026 GMT
Subject: CN=2c40c9a7cc313efbc664552e72cb09fdafdb989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:00:f7:72:a1:8f:73:39:31:6c:78:1a:dc:
14:1c:b4:18:5c:dc:0b:d2:30:24:7d:59:f3:ba:25:
8b:00:0c:0c:22:a6:b3:e0:df:62:ba:36:29:bb:50:
c3:5d:c5:b4:a4:ef:da:d3:b0:5f:2c:f7:01:5c:41:
bb:4f:7c:a7:17:ce:19:ec:2f:48:fe:bc:62:14:9d:
e2:d6:cf:f8:15:1f:b3:b7:1e:a9:f0:95:5d:0b:0b:
2e:9c:d8:48:74:6a:30:f3:7e:39:6f:a2:c7:a6:5b:
0c:5d:19:9c:bc:77:18:27:6c:89:f4:65:4e:d2:d1:
07:bb:96:98:c3:43:1c:1f:84:3c:31:48:5d:9f:ce:
81:11:97:68:36:9a:2b:68:e9:7a:50:18:45:bb:f9:
5c:68:a6:00:e8:ca:42:84:1a:c9:81:71:56:b5:9d:
a3:5b:58:11:ba:63:16:9d:87:fb:50:da:cd:2d:60:
87:d3:cf:ce:34:d5:b9:fb:cf:2a:7e:92:d4:e6:c5:
e3:9c:80:62:5c:52:2c:52:78:e0:7d:58:d9:d6:36:
66:69:9b:1d:57:46:44:e5:1e:22:8e:db:a5:b8:c4:
2b:45:b5:4b:68:23:c6:8f:e2:d5:e9:16:e8:c5:8b:
e1:d8:b0:14:bc:6f:b9:b4:b8:33:bf:cd:bd:f2:06:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:C9:A7:CC:31:3E:FB:C6:64:55:2E:72:CB:09:FD:AF:DB:98:9B
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:3c:88:48:34:95:63:09:7a:7d:c6:13:d7:9f:33:eb:69:
94:89:40:ca:81:92:36:58:f1:41:76:37:0b:48:25:c5:eb:b3:
1d:61:44:db:7d:f1:c0:37:f4:27:f8:3e:82:db:11:5b:ba:4f:
fa:75:68:de:ec:d4:d5:63:3f:e6:96:d9:a6:6b:9b:6e:9e:70:
3a:b2:4d:38:58:1c:67:65:d9:0e:dd:89:79:33:5f:61:c2:1f:
ab:21:c4:af:a7:b8:0d:ab:17:21:25:f9:fd:76:0b:72:fb:ab:
a3:33:6a:3d:35:5f:43:76:8c:bc:ec:c4:97:a3:9d:77:38:8f:
fc:9e:59:ae:48:e8:85:d7:4b:4d:85:a5:e9:50:06:8d:00:fc:
be:3f:b3:b7:e0:7f:6c:72:bb:db:ba:cb:ac:4a:75:af:bd:91:
06:28:85:97:75:52:ec:4c:f5:bb:b6:25:e2:6b:2b:8b:80:b1:
32:c4:ab:4f:c1:e0:6c:05:b7:d3:35:a3:d7:5a:b2:5c:80:f3:
4a:e4:86:32:28:bb:b2:84:79:8f:1a:7b:14:9c:d8:31:78:10:
37:82:eb:41:a3:b8:b6:92:79:ce:17:d6:c0:8c:6f:4e:9e:d2:
fb:4e:c8:76:40:a9:a2:a6:3a:31:87:85:8a:94:ba:72:c4:6e:
60:7e:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:21:18 2026 by rpki-client