Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: yFGOiukjBe6s6iPh8TOPo8z791oJjOWR6ZM4XUW6kWY=
Subject key identifier: DD:AE:2D:E1:52:9D:50:1B:8B:2B:04:31:23:CA:2C:D7:85:0B:0E:4D
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 01A0C70E756D38C58F1313DFD3438A4EAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 03:00:08 +0000
Manifest this update: Tue 22 Sep 2026 03:00:08 +0000
Manifest next update: Wed 23 Sep 2026 03:00:08 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: kQTl9CbSufCBQZOV/RBlC4bzQKDfR6UV8PjppY/SVpU=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:75:6d:38:c5:8f:13:13:df:d3:43:8a:4e:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Sep 22 03:00:08 2026 GMT
Not After : Sep 23 03:00:08 2026 GMT
Subject: CN=ddae2de1529d501b8b2b043123ca2cd7850b0e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:68:8c:b8:2c:bd:25:7a:ae:e4:56:b7:cc:
36:09:bb:d5:5b:a7:50:58:4b:89:10:64:2a:e9:2d:
78:00:94:37:01:00:59:39:2f:f1:da:eb:99:15:41:
3e:fc:81:02:17:56:b4:90:2a:ec:d0:13:23:a2:ef:
11:d5:90:c5:8e:24:ff:6e:96:43:ce:ce:f3:32:bf:
08:b2:2a:ca:f3:92:f1:09:e1:0e:be:bd:ad:3a:b6:
e7:08:b8:d8:2d:d2:3b:ca:1e:e0:a6:cf:69:37:64:
17:17:44:a6:8c:3e:c1:04:c4:11:1e:3e:7c:af:4e:
de:e0:c9:60:36:c5:75:f9:c4:6d:c9:ef:3d:98:3f:
7d:cc:01:9f:c2:e7:e5:c8:03:af:03:e9:97:f2:0d:
24:ef:57:ef:49:64:0c:09:35:b0:d9:e5:44:cd:b5:
42:7b:5e:04:5d:5d:a9:05:b4:21:a1:7b:42:8e:e6:
5b:93:81:6b:ba:c3:2f:3c:40:88:ea:8f:1b:c1:38:
9c:37:e0:dd:04:ee:6d:60:8c:10:18:47:24:67:51:
d4:3f:7d:5a:26:84:30:c9:9e:e0:e8:7e:57:d4:2a:
ad:67:33:6f:a8:69:e6:f8:b7:82:1d:1f:f6:8f:a7:
2e:4d:4b:c7:16:ad:31:ca:91:75:3b:9a:96:a6:31:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:2D:E1:52:9D:50:1B:8B:2B:04:31:23:CA:2C:D7:85:0B:0E:4D
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:09:fc:91:66:bf:9e:88:3f:76:c0:32:91:4e:3c:cd:85:
ad:82:96:ed:13:cc:c1:a9:f8:02:e5:05:8e:b6:22:9a:06:1e:
58:7e:c4:02:4d:a3:fe:4b:af:ab:1a:e7:3d:36:87:78:cb:f0:
30:da:2f:65:07:ad:f5:52:e2:05:7a:6f:db:cd:5a:84:59:89:
f7:45:f7:77:49:fe:4e:0f:35:a1:6e:47:ec:89:49:ee:23:00:
84:5f:cd:ce:d0:36:bf:e3:bb:3e:f4:46:5c:f1:14:fa:11:02:
a6:70:1f:6a:a8:eb:e6:89:75:34:7f:c0:32:2f:cb:af:04:6f:
71:cd:ba:24:d6:71:4e:e4:f2:73:32:eb:09:66:70:65:e5:31:
85:c2:35:e9:dd:10:d1:1c:46:f8:d4:5c:50:f7:ae:a0:11:a1:
f1:c9:5b:ca:3b:4f:95:74:f1:b2:4c:b9:2e:a9:b1:a1:50:0b:
62:cb:03:5b:98:c4:74:4e:06:b3:2d:0d:67:87:b6:e9:61:3a:
68:a7:6c:6d:cb:d0:54:37:03:4c:98:f8:73:4e:50:43:08:ec:
d4:ce:7c:5c:08:89:99:4d:43:24:e1:83:71:0e:00:b5:71:10:
d3:b9:93:a2:56:6f:d5:e5:c9:c0:42:a7:27:34:d7:8f:18:73:
f3:8b:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:51:39 2026 by rpki-client