
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: pzPo2yqL6o8NCt026kwFPh2m8YuZ5elIHvW/W5k/E68=
Subject key identifier: CB:42:1B:7D:19:33:D8:FA:37:4D:06:CB:33:21:37:CF:A3:42:F1:C9
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 01A0016FA209964851AC1DB4D6656F47AC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 18DB
Signing time: Fri 14 Aug 2026 18:01:28 +0000
Manifest this update: Fri 14 Aug 2026 18:01:28 +0000
Manifest next update: Sat 15 Aug 2026 18:01:28 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: xKyMvz12kd/78Yd6BnpwtZEsL1jJkV+Zc0ExNdk5vXk=)
2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
3: I1JpGCaCnd74s6YyFhtsQo4ffys.asa (hash: 8s5VDkoq2eGGIU5mP2xC+brcRoLXH1bqb0SZr2FGNMI=)
4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:a2:09:96:48:51:ac:1d:b4:d6:65:6f:47:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Aug 14 18:01:28 2026 GMT
Not After : Aug 15 18:01:28 2026 GMT
Subject: CN=cb421b7d1933d8fa374d06cb332137cfa342f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:8c:04:cf:42:f9:d8:65:3b:4a:8c:47:45:
cb:95:36:2c:7c:6d:c6:d4:64:f2:57:22:66:5a:bf:
55:21:01:b5:fe:2f:17:63:4e:70:0c:c5:87:22:80:
f3:d0:34:4a:7c:cd:c4:2e:a2:35:47:84:dc:7c:5d:
91:8e:12:27:59:46:52:77:2e:6d:0b:02:c2:9f:3e:
8a:4f:06:8d:5f:8f:4c:d0:da:6f:fe:0b:14:8a:14:
6a:29:26:b3:5a:32:21:68:f8:4a:0d:78:f7:05:83:
a4:7b:73:76:fa:c3:63:9c:7c:b4:c1:c5:8d:e7:5d:
60:82:fd:89:1e:d5:cc:a7:34:d6:35:35:10:f6:3e:
a9:75:14:df:6f:3a:67:9f:43:11:c7:67:f1:9d:ee:
32:04:6a:47:1e:74:e7:f3:bc:66:64:38:e9:41:4d:
a0:f0:8e:c1:8d:a9:3a:65:b9:35:3a:ea:a3:f7:9b:
b8:94:0d:42:b3:3b:4a:1e:9e:0c:cd:28:e0:54:bb:
f5:04:02:46:96:2a:7f:ed:40:e0:95:06:77:3f:e1:
e4:3e:44:b0:f1:58:01:4c:81:14:52:0e:f5:86:72:
99:d0:7e:27:dd:af:6f:94:ac:47:d6:0c:fa:9f:63:
58:61:a5:de:8c:85:f8:cb:21:d7:01:f6:aa:0c:3d:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:1B:7D:19:33:D8:FA:37:4D:06:CB:33:21:37:CF:A3:42:F1:C9
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:e4:08:74:76:18:f6:99:48:5f:57:89:cc:a4:67:06:73:
8a:02:27:20:f1:48:f4:66:84:0a:0a:f9:c5:b7:de:22:90:ff:
4f:48:78:f8:25:96:a9:15:d8:29:16:7d:49:0c:a3:9c:e8:f6:
19:35:9a:31:33:ce:19:0a:3f:69:03:81:ce:0d:ff:24:f6:b0:
99:b8:54:c5:bc:22:6a:23:35:e3:2f:b7:d3:1e:bc:0e:4c:9f:
92:a7:cc:66:c6:48:cc:c7:56:58:d8:87:9e:2d:55:dd:b2:b4:
e0:a6:b4:5e:8b:25:88:e3:9c:a9:10:b2:e1:eb:70:15:e0:c2:
bd:db:cf:e0:3a:30:a4:d3:f6:08:a3:1d:c8:41:bb:47:0f:60:
47:c8:24:f1:4f:a0:ce:4f:c3:8d:24:bd:96:da:a4:3f:d0:21:
1f:98:4e:06:98:16:18:ce:53:ba:2e:2b:be:62:1b:c5:8c:6e:
dc:e3:f0:7c:17:88:51:0f:65:f4:d3:0d:76:07:c3:a5:06:49:
01:9e:97:21:50:d6:ca:a2:db:09:23:6a:79:26:0a:e3:79:b4:
cb:4a:f6:cf:d2:e8:f5:64:7b:7d:2e:d6:b3:59:fe:5d:fc:65:
a0:1a:b5:3f:7b:0d:77:15:2a:fe:aa:24:54:c9:38:57:75:b9:
86:95:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:42 2026 by rpki-client