Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: yR6SXfXA1pUc6D6TbvAKtN7lbS/Y/fhrCVYlSflBqqQ=
Subject key identifier: 33:07:E2:BD:0E:2B:54:36:B8:37:8A:8F:97:C6:36:F8:7E:61:5E:87
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019D3978108B96D29861CD619EFDD9ED2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: DY2wzFqan/cN/JlImgUlmsMwck+VRMEDtNsriIkQNOQ=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:10:8b:96:d2:98:61:cd:61:9e:fd:d9:ed:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=3307e2bd0e2b5436b8378a8f97c636f87e615e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:38:b5:54:27:9a:c5:6f:86:68:56:d0:88:
44:87:8a:60:ea:81:8d:44:33:8a:5a:6e:ec:96:96:
5e:a3:a8:10:de:75:05:0b:c4:e4:d5:2f:d2:44:81:
99:d4:08:09:f4:c4:31:4e:a0:f2:c7:37:1e:f3:a6:
71:ec:f4:1d:75:6c:24:76:88:38:ad:84:22:a7:5e:
f6:46:01:e2:12:51:ad:75:51:ed:e7:70:7f:da:33:
ed:ff:6f:2a:65:94:80:3d:8b:9f:71:02:eb:2a:7e:
d8:dd:52:4e:3c:82:b0:5b:cb:9d:4f:6f:5e:31:c5:
a9:3c:35:1a:c6:ea:15:66:12:c3:c6:12:2e:d5:79:
ed:a2:de:b0:40:16:ca:d3:ba:6c:91:17:6a:88:4a:
0f:7a:4b:13:a4:7a:b6:7c:74:32:61:11:53:bd:0d:
6d:ba:66:09:60:ed:72:6c:1e:c8:12:8e:73:1f:f4:
6a:c0:6d:d0:a4:fd:b0:0f:25:2c:6a:5b:6b:24:2c:
e9:92:93:b5:a5:05:d3:7e:67:84:37:64:51:2c:c2:
64:ac:e0:4e:11:65:00:91:c7:76:53:6e:54:b7:c6:
10:1f:b7:ee:2f:ee:16:83:bd:f4:2e:a8:66:a6:36:
61:c0:94:b3:92:51:27:7b:5d:43:c0:00:cc:2c:a8:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:07:E2:BD:0E:2B:54:36:B8:37:8A:8F:97:C6:36:F8:7E:61:5E:87
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:3f:b9:2a:c8:96:85:67:26:ed:62:79:6d:7d:82:f2:39:
1d:cf:b5:65:98:2b:e2:b4:8d:5f:0a:58:06:7a:c4:81:ca:fb:
66:e3:f4:e4:0e:10:66:2c:87:fb:86:a5:5d:fe:d9:30:43:8a:
93:d7:62:06:78:3f:65:16:d0:f8:17:61:b0:26:da:6a:e0:d4:
c5:79:8b:79:67:a7:ba:43:b1:e6:71:f8:fe:91:44:ed:6e:7c:
4e:e5:eb:38:53:b8:e9:ff:76:20:87:93:27:b7:1a:02:e7:db:
c0:4a:85:6d:88:37:31:d1:41:d6:8f:42:73:56:9f:dd:69:5e:
f7:74:00:d1:12:8c:db:e7:98:b1:4e:f3:aa:b7:a7:bd:af:9f:
6f:f5:34:04:60:93:aa:7a:62:4c:f4:02:3b:f0:be:c6:f9:e4:
fb:60:ee:94:fa:c1:f3:af:61:29:f7:48:dd:df:99:55:30:6d:
c1:0b:56:5d:78:4b:ac:5d:07:02:8b:b0:70:78:9d:be:84:82:
6b:d7:36:1e:a6:ee:f5:35:60:55:c9:10:2f:9d:29:2f:88:a2:
90:46:64:ec:df:ff:a5:8c:55:1b:e9:0d:e9:b3:cf:0a:13:a1:
3e:46:23:4d:c4:21:14:a9:64:25:84:f3:55:82:2b:15:9d:bd:
94:c3:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:32 2026 by rpki-client