Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File: 0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier: TbwXJ1+j/HmV046DAe4jOY3PfZLd43+F1c6P9KjjGC0=
Subject key identifier: 98:7C:78:82:B1:AB:E5:6F:32:4D:53:B6:33:1B:CF:EB:30:65:E7:89
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer: /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial: 01A0CAB4D60A2582597D0AC6DB5D2D99C871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number: 0C7A
Signing time: Tue 22 Sep 2026 20:00:43 +0000
Manifest this update: Tue 22 Sep 2026 20:00:43 +0000
Manifest next update: Wed 23 Sep 2026 20:00:43 +0000
Files and hashes: 1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: sWdXncH6gwxqmLM114P1YTa0diP+aa4LHRsgDcQmGMA=)
2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:d6:0a:25:82:59:7d:0a:c6:db:5d:2d:99:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Validity
Not Before: Sep 22 20:00:43 2026 GMT
Not After : Sep 23 20:00:43 2026 GMT
Subject: CN=987c7882b1abe56f324d53b6331bcfeb3065e789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:27:16:6f:41:28:99:4b:35:39:73:17:9d:
81:a9:43:87:6f:38:7c:07:78:35:86:7f:36:3b:80:
e1:ad:00:fc:de:aa:4f:e9:82:e5:8a:ac:08:bf:9e:
1e:80:c7:a8:bf:08:f6:68:f6:b2:15:dd:bd:7d:65:
35:68:6f:fb:d5:0a:9e:2d:79:e2:1c:23:4e:a3:d7:
57:2f:bd:48:93:ea:dc:a5:3f:f6:e5:68:ad:4d:f4:
fb:6f:a8:bc:43:ed:7b:02:83:3f:51:23:69:16:03:
29:f4:ab:f4:9e:ee:f5:23:87:35:ad:3e:e4:69:21:
fa:1c:9a:cf:0d:f4:b4:43:91:21:b1:a7:77:9e:a9:
f9:66:bb:a4:b6:92:b1:a7:e4:22:34:dc:46:f4:09:
bc:82:f0:3f:8b:d9:b5:20:59:74:c5:bd:1b:f9:76:
48:bf:65:50:b2:55:65:72:74:6c:b9:a1:60:d4:42:
aa:02:85:03:de:c7:2c:a3:18:0e:04:62:52:f9:da:
cf:c4:40:99:c3:36:a3:7e:7b:09:62:61:76:74:de:
1b:c9:a4:a1:58:54:7f:40:27:a8:42:87:d7:a9:d1:
19:7f:4f:7c:80:33:3a:80:a2:ef:bb:a9:05:a0:b9:
c9:f9:ce:02:aa:8e:39:36:da:0a:0d:5a:59:57:93:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:78:82:B1:AB:E5:6F:32:4D:53:B6:33:1B:CF:EB:30:65:E7:89
X509v3 Authority Key Identifier:
keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fa:f2:a4:5d:f4:f8:c5:86:f0:cd:a2:e1:72:8b:cc:92:75:
56:94:d4:5e:7d:58:e7:53:d9:e3:97:18:75:b2:20:5b:55:87:
8b:82:85:ff:8d:bf:d1:97:00:4c:f5:41:a4:d0:5e:8b:e0:9c:
57:b9:33:eb:f9:c4:09:34:8d:63:30:5d:a6:b8:6a:6c:89:28:
1c:57:2f:66:a5:97:fc:a6:a4:37:6b:56:90:3c:03:eb:27:d1:
dc:14:2a:35:a8:b0:27:a6:eb:b8:98:48:02:53:02:a4:c3:bd:
cf:df:ab:34:1a:e2:b9:8b:24:d0:dc:ee:76:cc:ff:db:b2:b6:
0b:85:13:f0:14:47:9c:12:cd:76:89:3a:18:df:0d:6d:2b:e5:
62:f7:33:f0:44:4b:53:c0:98:4d:42:e5:09:01:46:3d:01:ca:
73:9f:3b:4b:3b:e6:1c:29:e3:e0:99:0e:a9:18:43:1a:b9:43:
40:b8:e7:5b:a5:76:e0:db:ad:a2:65:ef:cd:f0:d1:f2:8e:7b:
7c:64:d4:c0:e3:ad:b0:92:00:6b:12:ab:52:ea:48:5a:3e:23:
86:65:09:10:e8:7c:f2:9c:ca:f3:6f:0e:60:f4:9f:e8:11:a9:
02:18:1f:33:eb:14:e4:0b:a3:b8:43:7e:cb:e4:b2:c4:6f:78:
5f:ce:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:09 2026 by rpki-client