Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: OVZIjK0mtk4zSwj42CYj3wU5QjldqiOqvoHw/wGjxdw=
Subject key identifier: DA:3B:ED:58:1A:99:6A:A3:ED:E5:14:4E:06:E1:CE:FE:C1:1E:B2:44
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019CF98674970D0322152C5BB8BE2CF31461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0768
Signing time: Tue 17 Mar 2026 02:01:04 +0000
Manifest this update: Tue 17 Mar 2026 02:01:04 +0000
Manifest next update: Wed 18 Mar 2026 02:01:04 +0000
Files and hashes: 1: 02YEKq1IDPEF8lBAQFD4RLUmuKw.roa (hash: TS/pQGf2LaMx5573KYxQQhCXKrO448hCMH6JUvctiu8=)
2: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: CTtr20ZHMgemcqR04MMsvdHtAn0LTAoDOgH6lRy4vt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:86:74:97:0d:03:22:15:2c:5b:b8:be:2c:f3:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Mar 17 02:01:04 2026 GMT
Not After : Mar 18 02:01:04 2026 GMT
Subject: CN=da3bed581a996aa3ede5144e06e1cefec11eb244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:cd:3e:c8:0f:65:21:da:03:58:fa:6f:b5:
bf:4e:48:c1:bd:ef:0a:6e:df:69:64:44:e6:08:82:
a4:5d:11:48:b3:a4:55:8e:3d:32:55:66:55:7d:19:
0c:0f:71:1f:6d:5f:4f:d7:b9:fb:fc:70:0e:af:2b:
17:64:55:d1:f2:ff:1d:9e:42:c2:06:8f:71:26:04:
5b:63:0e:0b:45:f9:76:f8:37:76:7e:d8:e6:f3:aa:
b9:9d:40:5c:30:49:55:5e:e8:29:17:de:bc:23:ac:
b9:54:f4:3b:44:b0:dc:eb:fd:15:cf:83:6d:15:97:
c3:7d:f3:0b:be:dc:b7:1a:d1:70:01:94:c6:d7:c7:
ac:bd:6b:bf:f3:9e:71:aa:cb:99:a9:70:29:d1:e6:
9f:6d:8a:e4:b7:07:c3:a0:94:66:4a:0b:83:97:65:
03:f3:30:d9:50:d1:e2:d0:50:aa:39:69:05:26:1c:
3e:71:c0:8b:3b:17:a0:33:85:3b:12:6c:ca:1e:8b:
9f:51:c8:3f:97:81:44:3b:39:d5:99:db:2b:37:67:
89:0c:5a:38:d7:14:7c:6a:9c:9d:3a:7d:ae:c9:0c:
2a:7b:b1:c5:c0:bd:a5:73:31:55:10:b2:e0:74:a2:
77:a6:dc:c6:61:d9:88:98:7e:91:9e:a1:13:48:e6:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:ED:58:1A:99:6A:A3:ED:E5:14:4E:06:E1:CE:FE:C1:1E:B2:44
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:26:f1:a8:80:84:37:ad:07:a9:46:28:12:2e:ee:7a:5f:fd:
09:f4:89:ed:30:1c:8a:6d:ea:2a:3e:f3:fc:a2:b6:15:3f:16:
22:b9:b8:c9:06:ba:4a:0a:02:7b:ee:48:97:45:ad:1e:d9:59:
92:13:f5:c8:d9:2c:1a:00:6e:fd:c1:a4:2f:cc:26:a5:4f:70:
96:c7:f7:4b:0c:53:0e:f8:c2:c0:8f:c5:1e:fd:29:3a:55:b6:
cd:d2:d2:ee:46:94:2c:92:54:92:a0:29:58:d0:d6:14:ae:b5:
c7:a7:31:b5:30:e3:6a:57:8b:e7:6f:2e:69:35:59:9f:28:ad:
1e:ca:73:3b:f6:84:8c:63:f7:e3:c5:44:49:23:67:7b:b3:18:
42:3d:b8:e3:a7:ee:80:84:a5:c6:eb:35:0c:9c:b1:1c:51:af:
5d:05:dd:ce:9a:b8:6f:af:b1:c3:93:f2:2e:ba:67:c8:d3:24:
70:2e:1f:96:cd:d4:47:c1:8c:1a:0c:1a:5b:11:7c:aa:2e:29:
10:7e:55:09:a8:da:49:91:f0:73:7e:20:f1:7e:15:45:e5:d2:
14:37:9e:9e:0a:dd:10:79:de:71:18:92:bb:1f:bf:84:19:85:
f1:d4:96:6c:d7:b8:56:bc:2f:78:5e:35:6a:c1:fd:ab:56:24:
50:f8:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 05:56:57 2026 by rpki-client