Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: IJYYO/sVepQjEu/1yqpwrg6c/fdZEd4S/oOEDkXr4ko=
Subject key identifier: A4:86:81:E6:66:D3:91:1A:FB:6D:54:E4:C4:56:8E:10:70:7F:83:AF
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019EBEECF00DD0FDA9715A34A46B845F96CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0D31
Signing time: Sat 13 Jun 2026 03:00:59 +0000
Manifest this update: Sat 13 Jun 2026 03:00:59 +0000
Manifest next update: Sun 14 Jun 2026 03:00:59 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: mFf9voU7GVQaaANN9QORliYtnIPo6U4HviPzUYU2pis=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:f0:0d:d0:fd:a9:71:5a:34:a4:6b:84:5f:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Jun 13 03:00:59 2026 GMT
Not After : Jun 14 03:00:59 2026 GMT
Subject: CN=a48681e666d3911afb6d54e4c4568e10707f83af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:89:d7:12:11:b1:6e:af:5d:f7:f7:20:a6:
55:b3:b7:eb:dd:52:c2:3b:d4:99:3f:8d:8d:55:1c:
51:36:8e:83:77:1b:d6:af:20:3c:07:07:bd:bf:29:
be:32:f3:b9:d3:07:5a:4d:fc:1c:92:42:53:1f:e2:
d0:87:19:fb:17:7f:80:6d:c0:3a:dc:04:61:ec:fb:
10:bc:95:34:52:88:3e:ae:04:0c:fe:d3:ba:d9:5e:
7c:b4:b5:38:44:ff:f2:5d:9d:49:cc:0e:c5:e7:8e:
f8:c7:2d:a0:57:c7:e9:0e:6d:48:23:e5:d9:77:1b:
87:47:3a:7f:c7:33:44:0a:e1:51:48:b8:ae:f8:09:
54:0a:0d:6a:2d:5e:31:92:69:ce:43:25:31:c4:31:
7e:91:d1:99:ea:94:c4:bb:f7:0e:e8:a4:78:b7:6e:
d7:7e:93:ff:7b:f3:b7:2e:f2:de:3e:2e:14:1a:de:
9b:84:00:a9:27:bd:5b:5d:7c:dc:c3:04:03:4d:da:
cb:a3:1f:24:2e:fd:cb:9b:ff:88:da:c7:aa:61:fd:
da:ad:ac:fc:d5:a9:81:92:33:1c:50:29:26:1f:15:
7c:71:4e:94:97:6e:be:35:8e:1c:9b:40:5d:a3:f9:
ee:c0:e6:ad:52:5e:d7:d0:9a:4e:72:fd:a3:78:65:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:81:E6:66:D3:91:1A:FB:6D:54:E4:C4:56:8E:10:70:7F:83:AF
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6c:65:a7:1e:20:81:f1:cd:ad:34:45:b8:58:6a:43:41:75:
34:2a:c7:93:f5:75:d8:37:11:6d:af:09:ee:92:b8:51:a2:85:
ff:34:b7:dc:38:c2:26:aa:a9:b1:bb:57:7d:f3:2b:44:b0:05:
fb:54:4c:c7:b4:5e:ec:e5:b0:ef:83:32:6c:7d:43:f1:bd:e1:
fe:1c:93:d7:54:ce:17:48:6c:5f:33:3c:27:d6:c4:fa:de:0b:
04:73:fc:32:3d:9d:a0:ce:c9:9f:8c:b5:5c:70:7a:bc:15:f7:
86:a1:02:15:0e:a7:3f:c0:b3:3b:8d:d0:5e:88:c1:fc:de:0b:
a0:a2:a3:12:86:b5:3c:b6:cd:b0:0b:42:24:8f:a9:94:b1:95:
bd:c6:48:a1:a4:af:26:4b:f3:d5:3b:77:d9:b4:8d:dc:a8:25:
c0:19:e9:0b:5d:74:da:fc:23:41:d0:4b:62:f7:8d:5d:10:f6:
70:0e:23:58:bf:a4:53:82:d6:1e:60:6a:c0:90:6a:d3:eb:88:
fb:43:35:d7:d2:3c:96:df:5f:d5:d9:32:60:82:02:58:e6:23:
92:45:d2:3f:e9:ee:e1:72:2a:03:73:5c:38:6a:79:0e:f8:96:
f6:ff:73:27:84:d7:b2:a1:25:28:63:bc:7a:b7:4b:90:3c:1f:
ff:65:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:51 2026 by rpki-client