Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: SXO/HRkuXjOH4Myy/eNJOqus1Y8KuinMAEYQbDz6nxk=
Subject key identifier: 6D:38:32:BD:8C:B5:09:22:D8:1D:47:47:5E:50:23:EC:46:C0:FE:60
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 01A13CDCC036B030E7BD2632FD7FF705C5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0A27
Signing time: Thu 15 Oct 2026 00:01:02 +0000
Manifest this update: Thu 15 Oct 2026 00:01:02 +0000
Manifest next update: Fri 16 Oct 2026 00:01:02 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: vUKPCQY8KTokaC9KnGYGZ3lm5yx0CNTLfY6/DIZCIrY=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:c0:36:b0:30:e7:bd:26:32:fd:7f:f7:05:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Oct 15 00:01:02 2026 GMT
Not After : Oct 16 00:01:02 2026 GMT
Subject: CN=6d3832bd8cb50922d81d47475e5023ec46c0fe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:0f:b2:58:ae:16:5d:98:9e:43:5d:7b:a0:
d9:8f:b8:0f:cc:63:13:81:25:19:6b:fa:5a:13:d2:
16:09:ce:01:bb:85:71:9f:07:1d:39:c0:38:77:c7:
47:bf:47:95:2c:92:f6:25:34:1d:8c:50:d8:2c:3f:
9a:92:6b:73:bc:47:46:44:d3:38:a2:20:f4:ea:d0:
8d:56:30:e7:9f:01:9a:42:ab:78:81:74:5b:1d:f7:
2d:1e:6e:e3:ef:63:6c:04:dc:be:59:ec:91:a5:a0:
17:67:ca:bc:5f:ad:ef:46:52:61:1d:b4:c6:78:2c:
76:11:3f:86:7d:af:54:0a:8a:66:4d:2a:69:18:da:
b1:6a:db:c0:1d:42:81:57:c3:05:a2:1c:be:9c:8c:
3f:56:51:f7:8a:89:62:92:4d:9e:85:fb:54:e8:c0:
82:e8:88:8a:01:75:9f:d0:96:81:23:91:cd:06:71:
36:12:94:dc:ed:62:82:39:3b:67:52:a7:a3:45:74:
b8:27:63:08:30:7e:f6:58:2a:49:85:ca:7b:1f:d6:
99:a0:7c:6e:57:bc:17:b5:49:43:8b:c8:b1:c2:89:
8b:fb:e5:4d:11:fc:47:3f:7f:40:fe:4f:d5:54:e2:
f7:ab:7f:e9:e2:e8:b1:0c:dc:3c:05:17:9d:53:ab:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:32:BD:8C:B5:09:22:D8:1D:47:47:5E:50:23:EC:46:C0:FE:60
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:23:79:9c:6c:79:e3:70:55:02:89:e2:1c:76:90:60:1c:
2d:a6:f4:46:98:e3:30:38:e8:70:1d:f4:3b:89:97:fe:8c:d8:
4f:d2:57:d7:73:6f:ac:a0:db:29:97:ff:98:d3:98:97:24:a3:
da:76:b3:59:68:8c:fe:8d:e0:69:de:60:0c:f2:17:d7:8a:86:
f0:4a:44:c3:ac:20:97:c2:fa:59:8a:82:5b:95:9d:77:68:a5:
24:37:bd:88:4b:53:e9:a2:a4:d0:0c:22:86:b0:99:be:9f:4c:
bb:8a:8d:14:6e:d0:87:e7:d2:0d:d3:de:97:d6:f3:7f:91:24:
52:73:8b:6b:e2:fd:38:bf:1f:2e:dc:f6:a5:8c:a8:d4:51:7c:
c0:e4:62:42:48:57:5f:b6:e7:1e:9a:55:bc:98:1b:bb:04:55:
ab:c0:39:87:3d:a6:aa:a6:9a:55:e1:c3:74:a4:a5:da:3f:3a:
b4:b2:61:41:74:d5:77:b7:35:ce:33:a2:92:c9:97:09:98:67:
ff:33:8e:f6:44:00:1e:55:e5:b7:a0:60:81:dd:70:f1:f1:81:
64:14:00:92:b8:fb:cd:4f:ab:67:e6:21:5b:ab:0f:1f:29:6a:
c3:46:b8:2d:7a:ce:28:9f:a5:ba:13:eb:da:2b:cd:2f:69:56:
bb:77:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:18 2026 by rpki-client