Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: f0tHWj8CaPnDgvbuTU9rAHmM+vxXaX6wwdRlv262svs=
Subject key identifier: C5:C3:DB:2B:05:06:D3:E5:E3:38:83:6C:61:07:B3:21:CA:40:5F:0F
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 019CABD9986819ACA62AAB474234D9EC20D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 06DD
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: f8nOtzYhiZLyWpA1EH57x+otArofTZsgJGEvMQVj0gI=)
2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:98:68:19:ac:a6:2a:ab:47:42:34:d9:ec:20:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=c5c3db2b0506d3e5e338836c6107b321ca405f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:63:9b:58:89:ec:d5:61:99:9f:d5:85:ae:
30:a3:a2:64:63:86:ee:83:24:d0:23:a2:f9:13:e9:
ea:c1:a3:5a:89:e4:d1:2b:4a:2d:b9:0b:3d:b2:a0:
02:4d:d9:5c:b8:5f:41:7b:79:bd:07:9f:71:4b:52:
bc:bb:2b:41:fc:67:e0:33:8f:db:1b:76:78:b7:a3:
71:a4:6a:f0:29:ed:86:d0:23:a3:af:17:3e:b8:5c:
d6:8a:42:02:66:fd:9c:1e:9c:a1:96:4b:c1:7a:ad:
db:7c:3c:3a:7c:82:12:c2:7a:3c:e9:cf:5c:82:6e:
52:18:90:a9:80:82:66:a5:ac:af:08:41:e8:81:17:
fb:46:f6:c6:94:6f:97:30:d6:b5:1d:cc:60:fa:23:
d9:f1:48:e7:85:10:52:9c:ff:13:b7:10:26:fe:d5:
4a:13:18:63:0a:36:d3:45:da:fd:9c:57:a3:30:72:
37:73:c4:9b:e9:6c:4e:9e:0a:c0:1b:45:fe:e0:e5:
5f:98:50:3a:18:36:3d:e5:03:2c:a0:28:17:28:f4:
6b:54:5c:eb:00:cb:e1:75:98:f7:a8:73:0e:19:9c:
72:e8:2f:6b:1e:3a:4e:d9:56:07:da:26:cf:57:58:
83:29:41:84:97:9b:f1:86:e2:90:bb:d6:d7:3e:65:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C3:DB:2B:05:06:D3:E5:E3:38:83:6C:61:07:B3:21:CA:40:5F:0F
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:88:62:16:9c:bc:de:ee:e0:f7:bd:df:94:b4:39:38:9d:62:
cc:67:6e:f6:38:f5:23:60:03:09:ec:75:5b:71:6f:4c:8a:7f:
de:7d:27:bb:98:02:28:de:1f:f5:36:c0:3e:3e:4e:54:3d:04:
dc:c3:44:eb:8e:16:ef:d8:f0:d2:32:db:12:4e:c6:48:5f:0f:
6f:b3:a4:bf:b5:eb:b9:0c:fa:ce:d0:93:3c:35:70:0c:98:69:
b3:92:33:1b:ba:41:64:96:f3:da:43:6f:01:13:1c:1e:ad:53:
04:8a:a1:a2:f3:03:3e:79:f6:f0:08:9c:35:f9:3f:84:e6:b8:
03:c0:1c:03:8d:19:f8:93:40:90:c2:4d:52:57:3d:4a:3d:b4:
18:cb:fd:f0:53:ca:0a:35:0a:c8:b9:d9:f6:3b:77:c9:23:01:
51:6f:2b:a1:89:7c:85:ed:e4:cf:73:c4:07:62:c7:c9:63:42:
76:ed:ad:bf:e5:09:9f:6c:52:e8:de:2f:7b:b8:fb:f1:19:0d:
f6:b9:ef:3c:6f:28:54:2e:17:7c:8d:71:e4:54:35:97:69:99:
29:3a:11:8b:3a:38:72:1c:3c:84:17:f7:4d:15:bc:f9:61:3e:
69:6b:5d:62:48:99:fd:6f:d2:33:a6:35:f3:91:b8:28:2a:32:
f9:67:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:05 2026 by rpki-client