Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: 7mmRJXUJ4mDQ1ZYuEUOGBGR7SuD3y/m2JClZw8QBtho=
Subject key identifier: 7F:89:70:BD:45:A3:41:90:8F:4E:3F:62:E0:68:09:10:4F:6D:74:C9
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 01A00025A15BA8A795CDAAEAF85826383799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0983
Signing time: Fri 14 Aug 2026 12:01:01 +0000
Manifest this update: Fri 14 Aug 2026 12:01:01 +0000
Manifest next update: Sat 15 Aug 2026 12:01:01 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: mhtzm3f5pfSguLHfprofIsSAFgDkdns7hIuzovN5D2Q=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:a1:5b:a8:a7:95:cd:aa:ea:f8:58:26:38:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Aug 14 12:01:01 2026 GMT
Not After : Aug 15 12:01:01 2026 GMT
Subject: CN=7f8970bd45a341908f4e3f62e06809104f6d74c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:40:3c:3a:86:60:4e:6f:62:fa:db:a1:1f:
cc:f2:d6:64:42:04:f1:ab:6a:91:17:7d:0b:d6:14:
33:8e:87:78:09:7d:65:27:62:de:03:e0:73:ea:64:
80:7b:f5:f0:68:20:ee:c3:53:4a:40:73:ea:dc:63:
a4:60:b2:68:bd:e9:03:df:54:5d:f7:46:2a:57:2f:
1c:02:d9:ee:d5:71:a6:32:12:12:d2:3a:1c:84:39:
2f:49:59:e1:92:32:6b:00:81:6e:3a:a1:cd:4b:60:
9a:f4:ca:a4:96:87:7e:87:fa:11:49:d2:c6:5a:8a:
c2:ce:e1:67:85:62:f4:ee:b7:9b:34:b8:24:e6:62:
c1:66:0c:02:f9:b5:e4:cf:65:9b:c9:c8:53:3c:9c:
c8:ef:b0:6b:f3:a2:e5:bb:60:11:3b:78:1b:60:61:
76:4a:18:dd:e5:46:34:7d:9e:1e:18:53:8f:49:18:
5f:90:be:d1:e6:34:e7:c5:fd:cf:58:27:ed:f4:f4:
1a:78:08:31:a3:eb:f8:a2:45:0c:da:bc:ac:50:74:
56:a8:86:f4:bc:25:d8:73:82:1c:dc:1c:6e:d7:8e:
64:2b:20:d2:75:9e:02:c8:6c:3b:0f:22:90:d0:da:
0d:b4:e9:25:dc:d4:31:1f:b6:cb:d5:49:87:ec:30:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:70:BD:45:A3:41:90:8F:4E:3F:62:E0:68:09:10:4F:6D:74:C9
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1a:f1:39:78:88:97:ae:39:33:3c:65:54:a2:d5:e8:c8:af:
95:0d:0f:a9:8c:55:b7:26:13:fb:30:b9:f3:9e:16:83:55:84:
b2:13:4d:d8:0c:38:f1:5f:2f:54:e8:61:be:eb:55:16:97:39:
2e:d8:0d:36:13:e4:68:ad:19:c9:81:51:c9:bb:3e:d9:0f:d5:
15:e2:ff:79:d2:43:e6:3c:c0:f2:21:07:a6:71:80:89:5e:14:
ff:44:68:2b:36:37:61:53:e2:60:fc:e8:68:18:b0:cb:a5:ec:
62:6b:46:ee:37:00:aa:5e:2c:de:cb:6d:3f:4e:ea:c2:cb:cd:
52:26:80:04:2c:25:cd:91:24:2e:c0:c1:3f:98:2c:8f:0a:4a:
88:cc:50:f7:e3:bc:55:c9:79:c0:16:3e:18:1f:1d:96:71:b7:
85:1f:af:2f:20:18:16:94:14:ad:50:ec:4d:ef:00:a6:26:3f:
22:57:04:e4:f3:f1:2c:6a:45:f2:a3:f8:89:c8:3f:cb:ba:b7:
62:d4:9a:e3:51:39:5c:a3:41:1e:ce:43:e8:5e:8f:c5:75:b5:
94:34:80:e7:f1:20:07:61:06:e0:e7:1f:9b:89:11:31:be:48:
54:aa:25:36:8a:19:96:7d:c3:71:e0:05:2c:07:a7:f3:d1:b2:
cc:59:85:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAJaFbqKeVzarq+FgmODeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0
YzNiMDgwHhcNMjYwODE0MTIwMTAxWhcNMjYwODE1MTIwMTAxWjAzMTEwLwYDVQQD
Eyg3Zjg5NzBiZDQ1YTM0MTkwOGY0ZTNmNjJlMDY4MDkxMDRmNmQ3NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32BAPDqGYE5vYvrboR/M8tZkQgTx
q2qRF30L1hQzjod4CX1lJ2LeA+Bz6mSAe/XwaCDuw1NKQHPq3GOkYLJovekD31Rd
90YqVy8cAtnu1XGmMhIS0jochDkvSVnhkjJrAIFuOqHNS2Ca9Mqklod+h/oRSdLG
WorCzuFnhWL07rebNLgk5mLBZgwC+bXkz2WbychTPJzI77Br86Llu2ARO3gbYGF2
Shjd5UY0fZ4eGFOPSRhfkL7R5jTnxf3PWCft9PQaeAgxo+v4okUM2rysUHRWqIb0
vCXYc4Ic3Bxu145kKyDSdZ4CyGw7DyKQ0NoNtOkl3NQxH7bL1UmH7DA+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+JcL1Fo0GQj04/YuBoCRBPbXTJMB8GA1UdIwQY
MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt
ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj
LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxrxOXiI
l645MzxlVKLV6MivlQ0PqYxVtyYT+zC5854Wg1WEshNN2Aw48V8vVOhhvutVFpc5
LtgNNhPkaK0ZyYFRybs+2Q/VFeL/edJD5jzA8iEHpnGAiV4U/0RoKzY3YVPiYPzo
aBiwy6XsYmtG7jcAql4s3sttP07qwsvNUiaABCwlzZEkLsDBP5gsjwpKiMxQ9+O8
Vcl5wBY+GB8dlnG3hR+vLyAYFpQUrVDsTe8ApiY/IlcE5PPxLGpF8qP4icg/y7q3
YtSa41E5XKNBHs5D6F6PxXW1lDSA5/EgB2EG4Ocfm4kRMb5IVKolNooZln3DceAF
LAen89GyzFmFrQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:13 2026 by rpki-client