Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: QIJVE1utCXGmS752ZrWUS1rdfvbarIEMKm4PSoF2uCw=
Subject key identifier: 97:FC:BF:72:43:27:4F:A5:45:A9:85:71:21:63:E3:3C:DE:89:B8:B7
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019D9961EC384297D9E51F4DE9E69E4831D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0C99
Signing time: Fri 17 Apr 2026 03:00:24 +0000
Manifest this update: Fri 17 Apr 2026 03:00:24 +0000
Manifest next update: Sat 18 Apr 2026 03:00:24 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: 96P1yNc++NhO+Er1jypK6F8xCQpuSN1Mu14tt+nDYbc=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:ec:38:42:97:d9:e5:1f:4d:e9:e6:9e:48:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Apr 17 03:00:24 2026 GMT
Not After : Apr 18 03:00:24 2026 GMT
Subject: CN=97fcbf7243274fa545a985712163e33cde89b8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:0f:cc:22:77:04:91:1b:bf:b6:c0:b7:91:
80:65:17:f7:7d:04:74:bd:16:76:7a:62:b8:f8:a4:
fd:0a:ec:81:31:83:43:91:3c:87:db:01:80:0f:23:
66:74:74:2d:b3:f8:18:cb:8f:bd:2f:0d:d2:d6:40:
89:cd:28:04:4e:08:a6:a7:f7:48:ab:51:35:a7:26:
ee:ad:de:2e:e6:5b:ef:55:ac:1a:92:5c:8f:9b:92:
c4:65:a8:ed:a2:a8:72:d8:88:5c:0f:30:ce:89:a5:
ec:e0:c6:09:90:a3:1d:81:42:a8:75:79:0c:f4:5a:
16:81:8b:c3:15:73:c8:93:aa:f9:34:e6:97:ca:3a:
f0:56:6c:7c:54:47:51:76:a3:3e:24:7e:4a:18:f4:
be:0b:4c:1e:4c:3a:8b:e9:3c:d4:78:61:f7:4b:c2:
9e:61:0a:8b:0c:91:75:fc:f9:a7:21:ce:a4:fc:12:
3f:b2:62:36:c6:c4:c5:d9:3f:b8:17:a2:d1:db:c5:
32:82:1a:f4:e0:8c:07:24:2e:57:7f:ed:78:d0:7c:
b4:1d:24:96:9b:59:39:eb:a9:20:38:9d:6b:5c:ba:
f3:20:eb:e4:36:79:9e:82:45:28:4c:7b:08:4a:46:
db:d0:4c:2a:32:e5:7b:ba:9e:a6:c7:4a:e2:59:28:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FC:BF:72:43:27:4F:A5:45:A9:85:71:21:63:E3:3C:DE:89:B8:B7
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:71:9f:47:55:d4:45:b5:dd:15:76:bd:f8:be:3c:2c:d1:97:
9c:a1:08:f2:5c:90:ce:48:0e:3c:d5:64:7f:2c:ba:2a:de:96:
2b:6d:99:83:f4:49:55:14:cf:8d:35:cb:3d:15:ce:e9:bc:c3:
65:89:dd:d9:5f:0b:4e:93:b9:51:08:a4:aa:01:49:d0:4a:42:
55:f5:e5:45:31:cb:c0:d9:c7:a6:5a:d7:e9:47:4c:ab:f7:2a:
b9:52:c5:5b:cf:47:6c:6f:43:ff:77:71:d6:ee:d1:ea:e1:16:
5d:bd:93:20:78:0b:ea:65:c1:79:18:f7:0f:14:10:e0:6f:54:
b0:fc:88:0c:8c:8d:71:7f:8f:03:12:03:65:0a:52:04:36:d0:
e9:31:c9:b0:2e:e0:5a:89:99:9c:05:ee:ad:c1:04:25:57:63:
86:cf:a0:4c:9f:60:e4:6f:b7:67:f6:23:1a:45:64:4e:75:5d:
9b:d0:91:bf:5f:2e:0b:39:c2:98:b9:c3:11:76:09:43:d5:72:
ae:d9:07:35:e2:28:62:b2:2a:af:7c:06:2b:bd:e6:75:dd:79:
6a:44:40:92:09:cd:13:fd:13:ab:90:04:30:fd:b8:6c:b3:5c:
04:26:96:63:41:5e:03:ff:15:b1:f7:4f:63:f8:1f:36:4f:41:
dd:46:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:58 2026 by rpki-client