Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: U2yHCXMuUjMs2MsJnjVtuNY18AvNuClGd3GNcRuP4us=
Subject key identifier: D9:C6:7C:EF:95:77:D8:D9:8B:0C:37:85:01:40:50:21:4E:C7:79:16
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019FA898CF436C7B9D3E2F60F84A4B4B7033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0DAA
Signing time: Tue 28 Jul 2026 12:00:14 +0000
Manifest this update: Tue 28 Jul 2026 12:00:14 +0000
Manifest next update: Wed 29 Jul 2026 12:00:14 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: qkNHZ046JhZkTFgV4NtWR4siOPZpYB4w2XFhQV+kRDc=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:cf:43:6c:7b:9d:3e:2f:60:f8:4a:4b:4b:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Jul 28 12:00:14 2026 GMT
Not After : Jul 29 12:00:14 2026 GMT
Subject: CN=d9c67cef9577d8d98b0c3785014050214ec77916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:47:61:ea:fa:69:fa:74:f8:d4:a3:59:2e:
9c:a7:72:5d:11:28:62:b5:a4:3b:33:f5:2b:f2:f0:
97:a3:53:3e:d2:05:23:16:cc:1f:9a:90:94:ed:ae:
20:e1:2e:2f:ef:59:59:42:d7:74:ee:ec:d4:d3:e3:
ef:4c:90:25:0e:33:3a:18:6c:be:12:5f:1f:84:32:
a0:48:0d:de:74:dc:7f:f4:cd:76:8e:c8:5c:2d:ee:
ef:fc:9b:b1:37:2a:7e:30:33:18:91:14:67:d0:de:
0b:fe:2d:a4:ce:1a:71:f8:e4:a6:5a:4b:a9:7f:73:
d8:00:65:ab:d1:6b:27:97:07:e0:f5:f8:ab:45:92:
33:9d:fd:c1:ee:95:f8:bf:20:71:d0:3c:09:45:d7:
13:11:21:c4:6e:7b:a5:4d:98:51:dc:9d:76:19:b9:
4b:22:ef:61:d2:54:bc:c2:53:5f:d8:77:ac:15:75:
5e:5a:52:c1:5f:8f:d0:79:df:f5:87:b3:65:a8:e6:
92:c3:5e:fa:30:69:b5:87:ff:ee:62:f5:d7:ff:10:
9d:58:77:a3:64:01:a8:6a:bb:60:fa:9c:31:03:b9:
0b:b0:56:8e:1f:9d:91:b8:ab:89:62:1d:e5:53:d9:
13:67:20:5c:38:d6:af:55:44:5d:29:08:c3:a0:23:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:7C:EF:95:77:D8:D9:8B:0C:37:85:01:40:50:21:4E:C7:79:16
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:38:e5:74:f2:f7:0e:fb:f3:d8:53:34:15:7e:51:af:d0:
b1:8d:9b:a6:f8:72:17:1d:af:16:db:ca:c3:2a:db:09:96:3a:
41:6b:fd:39:87:10:0b:c5:1c:32:34:15:12:20:ee:d4:37:00:
6d:7c:61:37:df:9a:f3:c3:24:d6:a5:b5:47:9e:bb:f0:17:6a:
62:29:04:b7:a5:fa:83:91:9f:6d:92:b3:0b:4f:53:43:63:6b:
27:b1:f1:5e:54:98:8e:9c:71:33:36:8f:32:75:ba:39:09:9d:
62:a6:b5:71:33:a9:fb:05:84:48:e3:2e:3e:7f:df:d3:d7:e0:
57:1e:c9:47:fc:89:fe:98:c3:bc:7d:c9:dc:45:b4:be:01:69:
90:b6:e7:89:ca:80:9e:41:3f:32:94:7f:34:14:91:f8:3b:4b:
31:35:72:81:96:de:fb:6c:fc:61:18:03:3a:dd:ac:14:50:67:
19:bd:33:53:75:ef:a8:d2:c8:36:ca:5d:90:8d:e1:c1:54:1a:
7a:9f:a7:08:a5:ff:1c:b7:22:01:82:9b:69:56:79:bb:c3:74:
53:db:be:56:d2:4d:92:39:55:b0:9a:30:b4:bb:5b:bd:72:e7:
ad:8d:d5:91:47:8e:12:1a:6b:65:eb:77:55:01:82:69:12:db:
07:70:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:00 2026 by rpki-client