Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: sbL7s8LqZid8dirMaU1pIko0LRCmR5yZrAzf8DwnjZ4=
Subject key identifier: 1C:61:4D:68:13:2E:54:CC:EA:62:3E:15:97:EA:1B:62:E9:C6:A6:60
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 01A0C47CA15439F54DEDE5355893AF2AB1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 08FC
Signing time: Mon 21 Sep 2026 15:01:37 +0000
Manifest this update: Mon 21 Sep 2026 15:01:37 +0000
Manifest next update: Tue 22 Sep 2026 15:01:37 +0000
Files and hashes: 1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: OupSgY5rLlVRjUY0d9Qz1z9lxNggbrBVzbF7/FewPPg=)
2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:a1:54:39:f5:4d:ed:e5:35:58:93:af:2a:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Sep 21 15:01:37 2026 GMT
Not After : Sep 22 15:01:37 2026 GMT
Subject: CN=1c614d68132e54ccea623e1597ea1b62e9c6a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:75:57:f7:8a:ca:c3:1b:89:20:d9:89:e5:
82:00:36:5c:67:c8:bb:90:c1:0d:74:83:9d:ac:40:
c3:ad:30:bd:5c:77:44:09:30:d2:84:84:49:0e:f3:
95:6b:f7:7b:81:18:a0:4c:e8:66:96:34:58:4a:ee:
88:61:ee:c7:17:39:39:62:03:d8:d0:ae:a2:24:b9:
47:f4:34:27:7c:aa:2b:1a:48:5b:f9:47:a8:f9:58:
5d:2d:86:f9:12:ba:29:40:91:58:9f:5f:19:66:fd:
f2:04:47:1f:aa:67:d0:b8:36:9c:76:40:bb:4f:9b:
4d:b3:06:50:01:db:78:94:89:73:17:eb:d3:87:27:
2f:b9:b5:72:ff:60:fd:4b:7f:75:e1:8a:64:41:c7:
65:16:07:28:df:53:03:70:0f:94:ed:2c:4d:1b:30:
16:d1:89:ef:95:02:f7:4c:29:01:e1:91:84:2e:83:
6f:86:1d:62:0d:38:96:4c:d1:ca:a3:34:57:f2:49:
74:43:8c:ef:b8:8c:72:0e:ab:43:89:4c:a6:2e:fc:
14:df:8b:08:5f:34:63:62:d3:8e:25:b1:eb:09:00:
03:1b:27:d7:c8:f9:88:c9:19:4d:01:6a:ee:75:f6:
5c:c8:f3:8f:df:8b:7e:84:a2:a0:7d:c1:c4:22:98:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:61:4D:68:13:2E:54:CC:EA:62:3E:15:97:EA:1B:62:E9:C6:A6:60
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:0c:f5:6b:61:b1:60:d4:cd:76:14:6a:93:45:cb:90:3c:
2d:5b:6d:72:e0:9e:aa:f7:b6:9f:0d:ba:fe:be:69:b0:0c:8c:
c2:d5:01:a3:14:88:a9:b0:55:97:98:b4:b8:3e:26:30:54:94:
cc:7a:7e:20:52:cf:15:25:9a:b0:8e:a9:cc:2f:1d:e6:55:32:
98:ba:f5:fc:b3:df:a4:56:cd:79:16:16:3f:30:7f:be:ad:d8:
53:7e:62:82:f2:36:36:83:86:58:92:b9:55:91:f8:3e:c6:a5:
33:29:30:6f:6d:67:8c:33:14:1b:4f:8c:df:5a:6a:36:d7:71:
ca:5d:d9:fd:46:9a:e6:7f:3c:91:a9:fd:58:d4:69:5f:5c:c8:
9b:89:8a:e7:64:b6:f7:4c:02:8c:db:4d:14:09:0f:66:65:ed:
29:9c:bb:08:b3:c5:b4:e1:2d:e1:c1:7e:b7:c1:9b:e6:2b:a6:
24:9d:c1:58:12:60:69:00:d6:2a:e4:f9:e6:e5:08:a6:be:28:
29:47:1f:57:7f:3c:e6:e0:30:17:72:a8:a2:11:05:bb:26:2c:
a4:83:0c:cb:5e:ef:58:ef:62:d5:27:d4:0e:27:b9:bc:58:53:
a6:d3:96:d7:65:c0:2c:bf:b4:e7:e2:a3:97:4f:fa:9c:26:5b:
91:b2:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:32 2026 by rpki-client