Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: TvaK0L7HZwm2yFUB4WAufVPoFH0xoICu36HsLqEqTtY=
Subject key identifier: 72:9B:5B:96:ED:D2:48:2A:33:59:F9:D0:B9:AD:45:C2:78:6D:03:69
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019CAA8FC846DBBC574FCF283FBC06CD9D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: /ej3WNe9iCldPiL4IpmeT7JME+IAvJLZO7jGROgsp4A=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c8:46:db:bc:57:4f:cf:28:3f:bc:06:cd:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=729b5b96edd2482a3359f9d0b9ad45c2786d0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:58:e7:84:9f:3a:30:03:41:58:6e:d0:da:
cb:ff:03:dc:19:35:6e:92:50:9b:08:12:68:21:b7:
cd:65:b5:c3:9b:ff:d0:8f:81:20:69:da:3b:74:3e:
52:e0:5e:9d:e3:7b:8c:40:14:b7:8a:01:78:d2:2e:
14:42:b4:4a:2a:2f:6c:57:72:83:26:6f:43:05:f6:
ac:30:c8:3d:10:93:fd:bb:83:3e:9e:09:97:26:f3:
61:54:eb:3e:1a:24:31:0f:52:6c:f5:41:55:c1:2e:
50:43:d2:95:63:22:a7:78:ea:5f:0d:d3:24:f9:05:
03:40:78:b0:30:1e:81:32:e5:cc:c0:99:a6:f0:a7:
44:cd:60:30:23:fd:62:8b:09:08:0e:3c:60:10:4f:
21:e4:17:dd:fd:47:e6:ed:c7:70:a4:4a:0c:7f:cb:
44:55:bb:e6:96:8f:b0:53:ef:2f:54:8a:15:1c:82:
31:82:df:b0:63:56:c7:54:df:71:3b:06:86:36:b0:
ef:d7:23:68:f5:ce:87:52:0e:00:53:0c:6d:31:09:
5b:f2:e3:31:de:bd:15:d0:4a:fe:90:70:ae:8d:c1:
a2:03:b6:c0:c7:0e:e0:7e:85:63:e8:5b:7d:f4:61:
d7:ab:16:85:22:24:a8:fa:7f:3b:83:09:ec:ad:58:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:5B:96:ED:D2:48:2A:33:59:F9:D0:B9:AD:45:C2:78:6D:03:69
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:78:2b:83:de:9b:29:b0:6d:ec:3b:83:65:4c:ed:74:4e:90:
b0:f2:70:33:43:54:3c:9d:25:74:71:e2:c3:65:dc:d8:3d:c4:
de:f8:3b:b2:0b:d9:11:3d:5e:5f:d4:9e:32:d4:cd:8a:ec:44:
86:50:f4:2c:1a:c4:b2:b2:af:b1:7b:8f:62:2a:53:1d:55:2d:
b5:09:aa:92:54:10:56:fe:e0:6f:65:ae:5a:00:c0:9c:c4:f5:
34:bb:a2:91:3f:fd:dd:06:92:7f:6f:cf:11:48:27:b5:fa:71:
b8:54:eb:93:2f:a8:ab:75:ba:ff:57:8b:bb:e5:ab:47:62:15:
ca:f9:4e:9b:62:10:75:f7:74:63:43:84:71:ac:29:87:fa:0f:
ec:ba:21:6e:84:46:34:8c:e9:72:86:34:c7:93:be:4b:31:3d:
e7:dd:f6:a2:3b:14:14:d5:ae:66:bc:65:c4:27:61:d5:9b:3a:
da:b4:58:d5:49:07:1b:34:8c:86:81:9e:16:70:54:e7:90:79:
da:d1:a2:24:19:84:04:a2:75:98:f8:b5:19:45:b4:23:a5:56:
e5:82:c1:23:f2:c3:2c:4a:31:6e:ec:6c:ef:b9:02:76:d2:e9:
93:86:a6:8e:22:db:b2:14:2d:ec:b0:8a:31:1f:27:2c:92:83:
66:44:86:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj8hG27xXT88oP7wGzZ0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4
ZGUxMGYwHhcNMjYwMzAxMTgwMTE1WhcNMjYwMzAyMTgwMTE1WjAzMTEwLwYDVQQD
Eyg3MjliNWI5NmVkZDI0ODJhMzM1OWY5ZDBiOWFkNDVjMjc4NmQwMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj9Y54SfOjADQVhu0NrL/wPcGTVu
klCbCBJoIbfNZbXDm//Qj4Egado7dD5S4F6d43uMQBS3igF40i4UQrRKKi9sV3KD
Jm9DBfasMMg9EJP9u4M+ngmXJvNhVOs+GiQxD1Js9UFVwS5QQ9KVYyKneOpfDdMk
+QUDQHiwMB6BMuXMwJmm8KdEzWAwI/1iiwkIDjxgEE8h5Bfd/Ufm7cdwpEoMf8tE
Vbvmlo+wU+8vVIoVHIIxgt+wY1bHVN9xOwaGNrDv1yNo9c6HUg4AUwxtMQlb8uMx
3r0V0Er+kHCujcGiA7bAxw7gfoVj6Ft99GHXqxaFIiSo+n87gwnsrVhWGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKbW5bt0kgqM1n50LmtRcJ4bQNpMB8GA1UdIwQY
MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct
ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw
LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXgrg96b
KbBt7DuDZUztdE6QsPJwM0NUPJ0ldHHiw2Xc2D3E3vg7sgvZET1eX9SeMtTNiuxE
hlD0LBrEsrKvsXuPYipTHVUttQmqklQQVv7gb2WuWgDAnMT1NLuikT/93QaSf2/P
EUgntfpxuFTrky+oq3W6/1eLu+WrR2IVyvlOm2IQdfd0Y0OEcawph/oP7LohboRG
NIzpcoY0x5O+SzE95932ojsUFNWuZrxlxCdh1Zs62rRY1UkHGzSMhoGeFnBU55B5
2tGiJBmEBKJ1mPi1GUW0I6VW5YLBI/LDLEoxbuxs77kCdtLpk4amjiLbshQt7LCK
MR8nLJKDZkSGzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:42 2026 by rpki-client