Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: 0XJsHg8DtWWnTke+bNMi9nrTNXZWzuG6mkO0wPbQYCg=
Subject key identifier: 67:A4:59:90:DB:A6:F3:99:4F:D1:2A:8E:FE:9E:9D:B2:5B:F9:FF:F9
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 01A0C09EA4886F096DC8030B8239FC942AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0E3B
Signing time: Sun 20 Sep 2026 21:00:17 +0000
Manifest this update: Sun 20 Sep 2026 21:00:17 +0000
Manifest next update: Mon 21 Sep 2026 21:00:17 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: TVetnJLlBTxPYqm02K/MeuxiPIGMb5oiq2NyA8Hi424=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:a4:88:6f:09:6d:c8:03:0b:82:39:fc:94:2a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Sep 20 21:00:17 2026 GMT
Not After : Sep 21 21:00:17 2026 GMT
Subject: CN=67a45990dba6f3994fd12a8efe9e9db25bf9fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:c0:22:2d:81:6c:2c:38:da:e4:e2:79:0f:
85:36:b2:6c:c9:b6:97:ec:2a:65:67:f3:43:6c:d2:
23:4f:65:71:62:d4:7c:49:19:fc:78:2a:5e:5a:2b:
1d:10:61:43:f9:02:de:f6:f3:b8:d0:f6:03:a5:d6:
df:b2:8d:43:34:8c:99:b4:7b:9e:c0:1b:0e:2d:b3:
f8:cb:b7:17:3e:58:79:f5:8e:00:22:c0:13:aa:79:
97:0c:ac:22:2b:96:69:41:4c:c1:cd:29:9c:74:ff:
33:94:c9:67:ea:43:3d:20:ef:0b:47:af:dc:00:5d:
ed:04:ec:78:8a:d4:60:42:11:69:d6:0f:0d:ba:04:
b5:ad:18:0e:d9:e4:ce:53:43:58:a2:15:54:c7:87:
1b:68:f8:47:61:d7:21:30:37:f9:9b:90:65:85:e7:
00:63:6a:f5:73:cd:83:19:65:98:ba:65:e7:45:aa:
be:53:f3:8f:8c:8b:ad:6f:f5:ac:95:a2:ed:62:52:
26:a4:cb:4b:42:e6:71:a5:a3:81:58:e9:2c:85:08:
3b:c0:36:09:22:4a:30:5c:77:75:b8:ee:02:4c:a8:
df:a7:31:62:7f:9d:ba:4d:4e:3f:0c:f6:12:44:36:
4f:7e:da:fd:ce:0e:e0:4f:bf:59:37:0d:8e:d4:c6:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:59:90:DB:A6:F3:99:4F:D1:2A:8E:FE:9E:9D:B2:5B:F9:FF:F9
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:4b:2e:fb:9c:37:3a:88:cc:f0:3b:c7:28:07:79:c0:bc:
d2:0b:0d:b9:63:f1:78:1b:eb:8d:e8:92:65:3b:3c:c8:fa:73:
c4:ca:d7:3f:eb:52:a9:bd:ba:f8:f2:2c:4e:28:f4:ff:e8:a9:
3c:53:f2:af:50:9f:31:00:c7:ec:37:de:71:34:cf:db:ae:03:
dc:a8:6e:bb:17:65:83:33:06:ae:e1:7a:ce:95:57:51:84:63:
ca:db:aa:7a:2c:80:15:06:d1:c1:49:1a:da:92:de:e4:17:b8:
44:99:fb:e6:5a:56:d7:b5:f7:39:47:31:41:3d:e4:af:cd:2b:
a9:87:6d:ae:5a:22:e2:40:1c:35:9a:eb:fa:6e:8f:ec:47:b1:
db:3d:58:94:a2:69:a1:9d:67:dc:3f:3b:40:59:0c:bd:62:67:
6d:88:e3:aa:58:66:9e:33:ce:22:4f:36:03:8a:fd:43:b1:3a:
28:29:84:9f:b7:7b:02:b1:2e:d7:c1:50:76:66:f3:51:19:ea:
69:28:c5:fd:3c:71:4f:0d:84:e3:c3:f2:b8:eb:30:f7:f8:2c:
19:8f:c2:4a:d8:fa:88:b3:51:39:eb:d6:02:a0:02:4e:97:50:
27:b1:4c:71:b7:6c:0f:08:24:96:f8:15:35:8d:2a:68:48:0c:
b5:34:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:36 2026 by rpki-client