Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: a4UP07xljHS3TfM+D1vCVrsxMc5k8WrRZT/FVFND2oo=
Subject key identifier: 29:28:FD:81:B2:AC:1C:CB:7F:53:9B:07:97:8C:C0:46:D2:8D:20:6C
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019ED46291932D1008EAC7BA19E6C031B7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 01EA
Signing time: Wed 17 Jun 2026 07:01:29 +0000
Manifest this update: Wed 17 Jun 2026 07:01:29 +0000
Manifest next update: Thu 18 Jun 2026 07:01:29 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: ibARb2QpXmKtbdLLT+Fhh+vHDLmdpzm+sxilP1AIYYs=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:91:93:2d:10:08:ea:c7:ba:19:e6:c0:31:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Jun 17 07:01:29 2026 GMT
Not After : Jun 18 07:01:29 2026 GMT
Subject: CN=2928fd81b2ac1ccb7f539b07978cc046d28d206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:5f:8c:be:6d:52:06:b7:59:ca:6f:d3:00:
34:d2:6e:fe:99:23:10:cf:68:fe:11:40:a6:e1:d4:
a3:84:1e:5e:2d:26:41:49:17:61:45:60:16:df:68:
47:ca:ad:4a:ef:04:ce:ff:7f:16:97:03:98:9d:f4:
20:7c:85:57:8a:34:b2:2f:f9:c4:0e:f4:ac:bf:3a:
b9:e9:91:52:00:50:69:7a:42:81:23:e0:56:68:c7:
23:62:23:32:71:8d:c6:4b:c2:9b:eb:10:7f:7f:78:
63:6c:4f:1a:0d:a0:53:56:27:72:0e:c8:c2:7b:99:
b9:59:f5:4f:2f:8f:5c:51:0c:45:74:45:67:b9:90:
73:db:91:10:5d:6e:f5:f0:98:06:07:43:74:a9:d1:
05:c0:89:1f:35:92:a4:86:8d:39:28:33:d8:ed:e0:
95:d0:9b:a7:91:18:e0:96:dd:54:65:b7:5e:6a:90:
f5:15:31:4f:6c:61:11:80:5f:5a:ec:43:3d:29:55:
fc:42:22:3a:e7:33:c2:78:13:4a:fb:66:bd:a1:94:
cc:b1:e3:08:0c:88:60:42:c0:52:8c:4f:cf:29:5d:
bf:fa:a3:fe:3b:77:98:7d:03:6a:ca:18:02:53:59:
91:92:8d:e8:c3:0c:28:be:14:08:a9:f5:bb:6f:05:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:FD:81:B2:AC:1C:CB:7F:53:9B:07:97:8C:C0:46:D2:8D:20:6C
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:12:d3:08:57:ef:64:c9:70:6b:63:35:a2:16:90:36:37:
55:e0:dd:f1:f5:27:dc:cb:59:38:9b:be:fc:be:fb:d5:fa:28:
dd:37:58:00:90:58:d6:99:9e:96:84:4f:cb:18:c1:28:c1:2f:
8c:62:be:c1:9a:ad:c2:14:f8:11:48:5c:31:c6:79:ff:a3:9d:
02:34:4e:20:bf:bd:f7:f7:38:b5:11:73:9d:c0:8f:1a:a5:25:
13:f2:37:54:07:21:0d:55:9f:6e:2b:04:86:b9:81:f8:b9:8e:
a1:cd:7a:4b:0b:e6:27:84:32:ef:08:2a:0d:21:0a:2b:8b:e2:
59:92:85:38:7c:65:30:0c:75:2d:4d:bb:cc:00:2b:a0:78:bd:
c5:2b:0e:06:18:74:16:f7:a1:e1:03:0b:64:c3:bd:dc:d6:68:
8e:12:90:2b:94:7e:e1:db:7a:95:71:89:06:6b:54:26:03:a2:
f2:69:63:54:f0:19:1b:b7:ba:91:d1:40:a4:b1:d1:3f:39:73:
65:7f:2e:7b:6b:60:06:1a:56:39:36:89:98:62:ef:97:31:18:
55:fe:05:6c:a3:fd:79:27:e4:8e:6c:f8:21:01:a6:1e:92:03:
3c:18:4a:13:c6:e3:09:d5:42:d7:e2:a4:03:ff:c1:7e:ae:59:
21:a1:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:48 2026 by rpki-client