Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
File: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft (raw, json)
Hash identifier: 02g4zzIhvL9lrsk76FFgnRnIoccZVbshpsR/MXX/20g=
Subject key identifier: 57:07:F0:86:A6:15:01:08:C7:CC:96:F9:1A:4B:1D:39:B2:99:B6:6D
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Certificate issuer: /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial: 019FAE6595B6E71F4AF1208EE7CCC7D4FEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 15:02:00 +0000
Manifest this update: Wed 29 Jul 2026 15:02:00 +0000
Manifest next update: Thu 30 Jul 2026 15:02:00 +0000
Files and hashes: 1: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl (hash: IAq56U5m5MdjetydnKHbBOvV993P0zBVPZsG7Bap2ow=)
2: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (hash: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:65:95:b6:e7:1f:4a:f1:20:8e:e7:cc:c7:d4:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Validity
Not Before: Jul 29 15:02:00 2026 GMT
Not After : Jul 30 15:02:00 2026 GMT
Subject: CN=5707f086a6150108c7cc96f91a4b1d39b299b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:16:d5:eb:23:4d:32:0d:75:6c:31:e5:29:
2e:3a:c9:53:14:89:45:9d:d2:b1:4d:f9:56:44:aa:
c4:3a:32:6d:25:f8:8d:30:8d:a7:cf:b2:4e:23:d6:
2e:07:e5:a0:14:52:8b:28:08:09:dd:e3:c9:35:0c:
db:eb:a9:13:88:38:27:dc:a8:ba:a6:f4:de:15:f6:
92:2f:80:5c:ac:0e:5f:b0:e4:27:fd:54:26:2f:0c:
65:46:9d:5a:86:00:f5:a1:34:09:a7:86:9d:4d:2d:
e6:f5:21:b9:ae:fb:06:c7:70:b9:42:b1:e6:50:7f:
12:cb:2b:51:0a:86:dc:e8:2a:a1:8a:a2:d1:60:39:
59:32:ba:30:cd:3f:79:66:19:2e:f4:45:30:aa:d0:
47:81:b7:eb:df:2f:1e:9e:8f:68:82:39:c0:85:9b:
8b:27:a4:41:e8:0c:82:d5:64:f3:24:d4:53:ac:e1:
97:1b:f4:8a:af:87:5d:96:cd:3f:09:c6:ee:77:94:
9a:57:d6:79:7e:73:ce:f2:e7:21:db:06:7b:e3:c1:
f7:c7:99:b1:a3:be:8c:6d:ba:12:ce:36:e1:cc:23:
df:71:9d:91:6a:ae:f6:68:bb:4b:14:68:71:db:28:
a2:7b:87:dc:66:0a:97:2d:af:02:8a:c6:f2:78:99:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:F0:86:A6:15:01:08:C7:CC:96:F9:1A:4B:1D:39:B2:99:B6:6D
X509v3 Authority Key Identifier:
keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:d9:cc:2b:b5:62:b3:f5:94:e5:b9:26:f7:6e:71:5e:1b:
f1:9b:62:ad:4d:c6:24:2b:89:0d:fb:3b:8c:0e:5a:7b:fe:a1:
78:91:e6:1f:6a:0c:fe:90:12:d9:00:37:72:0f:8a:72:a3:6b:
78:be:6c:b0:29:88:e3:1d:35:ce:34:9f:24:e4:5c:f1:8e:55:
ab:34:9e:31:20:5a:f7:e7:04:07:b8:09:a5:1d:5c:a1:dd:63:
30:2c:79:2e:58:0d:c1:71:18:5c:cf:00:ed:43:a7:88:4b:9f:
d7:7a:82:2c:c3:c7:01:36:66:d6:0b:cd:80:6e:28:63:65:60:
f3:27:64:05:92:6f:78:3b:2c:ba:fc:4e:b4:2a:4a:b8:77:b6:
a7:25:13:04:e8:d4:f9:1b:bd:c0:ce:0d:45:df:d8:fd:ca:28:
f7:3e:4b:47:0a:85:3b:00:f1:2b:12:61:60:fe:1c:88:54:62:
c6:f4:26:ae:08:5d:67:5f:26:b5:41:e6:2e:16:b9:ac:c4:1a:
54:65:69:5b:2c:b8:a1:e7:9c:24:35:44:88:33:7b:94:b2:03:
f8:82:a8:14:da:6c:20:5b:4b:ba:ef:60:a7:02:de:30:e2:1b:
ac:b2:8d:7a:46:75:0e:05:44:d0:4f:74:d0:0b:de:63:8e:d1:
e3:f2:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:39:30 2026 by rpki-client