Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: /A3YqjkBJ1P3w0kOEF920Xys/pMoo1TSuVumq2n/DR8=
Subject key identifier: FB:95:C4:38:22:F4:A3:0C:3E:3C:B7:78:BA:1F:85:23:09:AE:0D:EF
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019CA9EB9333A8C34AB868D75A66F9F608D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0C1D
Signing time: Sun 01 Mar 2026 15:01:53 +0000
Manifest this update: Sun 01 Mar 2026 15:01:53 +0000
Manifest next update: Mon 02 Mar 2026 15:01:53 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: PSqovPz+8F8MqYZxoCFN83FaRNdGvOZnkzh9KP2oMIY=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:93:33:a8:c3:4a:b8:68:d7:5a:66:f9:f6:08:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Mar 1 15:01:53 2026 GMT
Not After : Mar 2 15:01:53 2026 GMT
Subject: CN=fb95c43822f4a30c3e3cb778ba1f852309ae0def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:c5:ff:92:15:40:a1:c4:a3:b5:6a:3c:c8:
6a:5e:f7:3f:dd:99:be:cb:5b:e3:10:b2:7c:b3:74:
4b:92:81:55:9a:8e:53:4a:c1:a3:b1:c5:07:45:43:
b3:b4:9a:30:1f:7f:4b:11:c7:f9:3f:65:64:1e:b3:
40:07:47:8f:db:3f:34:9b:8b:8e:c6:92:08:41:26:
85:44:ac:72:55:03:ed:f4:07:1a:94:97:38:64:17:
29:cb:c0:2b:8c:dd:c4:9e:23:c3:8d:b1:64:0e:b6:
b0:ba:99:46:7d:74:27:52:d4:df:7b:f9:08:68:81:
ab:3e:a3:19:cc:32:d8:8d:2e:52:e0:13:14:d5:66:
03:e9:a1:c2:3f:67:74:6d:b6:60:8e:72:4d:93:42:
2a:64:e4:91:9f:a4:f0:d7:3b:d8:1f:ba:bd:73:62:
5d:ac:21:49:ba:2f:d1:4a:14:e4:bc:ab:7a:71:dc:
a1:59:da:c2:54:c3:d3:b0:c0:f8:62:c8:a2:a6:8d:
36:b2:08:a0:d0:26:e4:cf:eb:67:13:ea:ec:98:90:
c8:55:fb:f1:aa:a8:4c:ac:0c:ee:04:b5:7a:15:fa:
89:6d:af:fd:dd:9e:10:69:54:41:8c:c2:0c:49:bc:
dd:ff:55:89:8f:1b:6d:d7:7a:f2:0f:93:fb:c7:48:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:C4:38:22:F4:A3:0C:3E:3C:B7:78:BA:1F:85:23:09:AE:0D:EF
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8c:60:55:07:ce:22:44:06:89:db:d2:c7:af:19:9e:39:0b:
6f:53:ff:d8:7c:d1:07:70:e4:d0:a2:2d:49:a1:4e:92:df:0a:
b2:bd:e5:84:71:97:c0:dc:8f:ad:9e:af:93:33:df:e0:73:71:
1e:8c:2b:b5:bb:90:46:43:9c:f3:e1:39:31:f5:ca:04:aa:2d:
40:09:f2:c2:03:8f:70:a2:62:75:64:6c:0c:6a:2e:a0:fa:3d:
8d:98:c6:af:53:1d:85:98:3a:49:84:3c:f7:bf:c4:b8:9e:b2:
b6:5e:a7:2e:e1:45:93:86:5a:41:5b:5d:1c:d1:c2:61:e7:80:
3d:4e:68:33:81:3e:c0:8f:44:a1:e0:d7:1d:d5:5f:e6:75:3e:
aa:df:d0:f8:04:a0:ee:83:df:04:fe:65:1f:aa:5c:d9:8a:39:
ff:9b:6d:dd:3f:0f:dc:f6:5d:10:9a:1d:cd:54:e9:6d:37:20:
34:30:d2:b9:5d:77:d5:6b:c6:0d:61:ef:b8:65:30:e4:f4:53:
2e:7f:2b:47:6e:72:ff:a2:7c:67:e0:b0:c8:e0:cf:00:69:2f:
54:c1:8d:9d:11:1c:46:df:17:a5:74:d5:6e:fc:bc:f9:34:38:
67:78:0c:51:92:32:78:17:59:cc:d8:f1:de:6d:50:ac:79:bc:
76:eb:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:41 2026 by rpki-client