Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: ZFdQYn6r1/cB04FGx1g7BF2S6p7vJswEKngajIA+N18=
Subject key identifier: A0:F1:9C:E8:37:C6:21:92:C3:BA:FA:63:2A:58:62:5A:D5:68:61:FF
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 01A00101D087E3F12BB7473104964E7FD287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 1160
Signing time: Fri 14 Aug 2026 16:01:31 +0000
Manifest this update: Fri 14 Aug 2026 16:01:31 +0000
Manifest next update: Sat 15 Aug 2026 16:01:31 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: EsDIoRpxocDZiD1mOC2f0sr+U6O78JAtcJ5QfqrWR2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:d0:87:e3:f1:2b:b7:47:31:04:96:4e:7f:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Aug 14 16:01:31 2026 GMT
Not After : Aug 15 16:01:31 2026 GMT
Subject: CN=a0f19ce837c62192c3bafa632a58625ad56861ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:91:f3:dc:e3:83:df:92:17:cd:94:9e:43:
32:48:50:4c:8c:82:b1:5a:4d:8f:71:f6:f2:75:0f:
39:44:b0:13:ed:28:93:e0:3e:8b:a7:e9:bc:09:41:
33:66:e0:0d:b8:82:6f:bc:09:91:e7:f4:6c:6a:d6:
fc:15:33:0d:33:64:8c:d0:32:e1:e4:8c:03:73:45:
85:84:f9:56:0b:90:e6:3a:94:3d:6b:92:d9:d8:4d:
58:73:b5:22:33:cd:dd:b5:9e:03:eb:da:fd:6b:15:
d6:34:b7:8b:d0:3a:97:8a:da:35:95:11:72:f4:28:
35:41:74:75:12:01:05:9e:ce:c8:ca:52:45:53:51:
ad:8f:49:82:6c:69:d4:f5:f5:c9:5e:76:62:ff:f3:
d7:59:fe:43:53:7e:55:7e:c1:f5:ef:2b:ec:12:c6:
5a:9a:43:79:42:6b:34:be:5a:c7:f4:a5:d3:c0:59:
d1:9f:6b:8b:75:37:43:ee:50:50:e5:3e:6a:e7:00:
3b:24:a1:dd:53:ee:71:7a:ef:71:1c:20:22:87:ec:
f0:b3:2a:1c:ca:3f:56:46:91:d5:73:8b:c4:36:09:
c1:47:cc:de:e5:5c:88:3a:57:c9:c9:f6:99:08:a3:
97:b3:20:b5:e6:4e:a1:45:b3:e0:79:e2:e2:a3:e2:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F1:9C:E8:37:C6:21:92:C3:BA:FA:63:2A:58:62:5A:D5:68:61:FF
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:12:16:cf:90:e6:61:42:50:64:8f:97:d3:8b:a1:e3:6d:
89:46:b2:5c:4e:e8:6f:87:0b:c9:9e:dc:78:ed:52:42:08:e2:
dc:e3:c8:08:15:d1:04:de:59:95:bc:1f:de:d5:fc:77:f4:28:
42:74:f5:76:5d:52:53:56:0f:fc:90:62:05:da:7f:d3:65:33:
5d:27:5f:e9:1a:07:2b:ef:18:61:bf:02:3d:2e:f2:91:5b:86:
e3:b7:4a:f8:f8:19:cb:4d:42:cc:4b:7e:cf:74:59:f8:63:36:
f1:67:1b:fe:0e:3e:9f:8b:21:e8:a5:a9:ac:93:ce:ef:fa:c3:
4d:0b:5b:05:31:85:01:e0:61:11:33:6f:17:25:59:bd:f3:c0:
6d:a4:0a:ac:33:05:b1:8c:fb:2e:36:7b:9c:f8:94:20:21:ca:
b9:d2:cb:4c:a9:24:94:5e:a0:ba:98:c4:63:38:ad:57:32:1b:
b4:37:1e:2e:82:5e:a3:cc:1b:bb:6b:e8:f6:cc:98:4f:33:9a:
e8:48:41:34:43:3d:d2:9e:1f:24:e4:d0:67:fb:64:3b:aa:81:
45:10:2e:ca:b3:29:ad:c2:ac:9a:9d:0b:82:86:ec:8e:e3:d2:
90:6f:32:f4:af:75:23:a0:56:98:aa:f8:9b:13:4d:8d:e5:e1:
5f:4d:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client