Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: +k3jex8bXuLckY35cL9EFyM9kZw/TU4z4CBSxZ1R9js=
Subject key identifier: 58:AF:95:A5:14:D2:EC:75:63:0F:1B:36:17:C3:B9:D1:8A:93:BF:9A
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 01A13FA768A745C5DF7D078B5E65EEB81AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 1205
Signing time: Thu 15 Oct 2026 13:01:38 +0000
Manifest this update: Thu 15 Oct 2026 13:01:38 +0000
Manifest next update: Fri 16 Oct 2026 13:01:38 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: 2UuXce5iHRb3IjYtQDQjaMv70Kay3ClVpKa7r86zhCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:68:a7:45:c5:df:7d:07:8b:5e:65:ee:b8:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Oct 15 13:01:38 2026 GMT
Not After : Oct 16 13:01:38 2026 GMT
Subject: CN=58af95a514d2ec75630f1b3617c3b9d18a93bf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:2f:b5:6b:87:7d:90:7e:0c:97:6f:26:aa:4c:
26:5c:86:3a:53:79:ac:59:04:3a:0c:71:9d:81:e8:
bd:b4:70:27:ab:22:bf:e9:f5:3e:0b:9d:b9:8a:6b:
66:d8:c1:16:8b:44:34:58:38:b0:0e:57:90:fb:a5:
f9:a7:79:25:40:0a:87:37:60:e1:1d:f6:86:a2:1d:
93:57:d7:04:f0:f0:c3:f6:5f:40:5f:99:83:3a:2d:
d9:15:83:b7:f1:16:e0:48:df:db:c9:2b:f3:f6:91:
9b:ee:95:45:b0:95:6f:70:8f:46:f8:f8:66:67:06:
c7:f2:9c:5b:03:17:d8:1d:b6:96:e3:a6:d8:07:ff:
da:2f:58:aa:89:90:46:9f:9a:2b:22:98:e4:9d:31:
2a:17:80:6e:e8:36:15:ff:40:a9:67:34:1c:26:0c:
f1:9e:fb:e7:04:c7:83:b1:4c:1d:d5:62:de:a5:0a:
de:3e:3f:be:80:9f:01:4d:19:f5:a2:1d:8c:cc:9c:
a2:01:cd:15:a7:6e:3e:9e:d9:51:7e:53:49:d0:b9:
c4:b6:47:a3:62:b2:2e:ad:cc:e1:c2:d1:5c:72:47:
71:f6:7c:93:6b:33:a2:3f:ad:b8:57:28:7b:0f:3e:
6d:dc:50:a2:fa:73:37:09:96:9c:76:98:92:5e:65:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:95:A5:14:D2:EC:75:63:0F:1B:36:17:C3:B9:D1:8A:93:BF:9A
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:96:30:ed:ae:cd:9f:f5:cd:5d:80:d2:1a:da:2d:cd:d0:a5:
3a:e1:d9:4f:53:97:10:74:8f:c7:dc:09:5f:02:5f:f5:3e:a6:
a4:6a:90:66:38:69:74:5c:b2:2c:7b:50:68:6a:34:d4:2a:d0:
4a:dc:d4:61:41:e6:a2:24:89:cb:03:a9:9b:1a:b2:ec:5e:3d:
81:17:9e:47:37:5d:fe:28:67:3c:f6:f8:a5:dc:de:3f:86:40:
55:c5:29:b2:2c:e7:47:8e:3b:c3:c2:24:f5:b3:61:4a:ec:57:
56:69:57:74:4f:eb:c7:56:a0:1a:65:4e:cb:a2:f6:5a:26:63:
03:b2:df:79:89:9c:02:23:28:20:ec:47:c8:96:89:ea:f8:67:
10:b2:9f:12:69:e5:7f:f0:bc:49:94:f9:17:4a:24:f5:18:28:
f9:df:8b:f7:f3:ad:9e:60:50:b9:12:9e:b2:03:89:7c:9a:79:
3f:29:b7:a7:66:99:e3:5f:93:97:85:25:14:77:32:53:28:c8:
13:20:e2:87:77:46:24:7f:0e:09:a4:1e:88:22:e8:4b:84:d3:
52:be:4a:d8:7e:38:91:e7:ce:2c:d3:34:52:28:e6:4e:26:22:
72:08:d7:c9:41:9c:9e:3b:4f:cd:df:e2:2c:6b:2c:f5:42:86:
ce:5d:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:26 2026 by rpki-client