Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: FLIKch/QW1WBFpjvPEvsQ9FlzYQiDR1rU0dWs9AkHpA=
Subject key identifier: 47:71:18:A2:66:ED:AB:05:84:45:E6:5B:4F:D5:81:B5:8F:40:0B:06
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 01A0005CB1A6DB20429143654B501A66E9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0D59
Signing time: Fri 14 Aug 2026 13:01:09 +0000
Manifest this update: Fri 14 Aug 2026 13:01:09 +0000
Manifest next update: Sat 15 Aug 2026 13:01:09 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: MbYVrT4sQf+P2t++uQiTc9/6rh3TWzJ+dRPXCO9Ad/Y=)
2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=)
3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:b1:a6:db:20:42:91:43:65:4b:50:1a:66:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Aug 14 13:01:09 2026 GMT
Not After : Aug 15 13:01:09 2026 GMT
Subject: CN=477118a266edab058445e65b4fd581b58f400b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:87:2b:37:5b:8f:76:06:39:4d:96:0f:99:
d8:a7:3b:5a:fe:85:e9:0d:b4:5d:58:94:31:2b:a2:
27:33:2f:30:ab:bb:4e:1f:8e:1c:a5:69:ab:4e:5a:
b1:80:46:45:4a:55:df:c0:78:9f:fa:6f:13:fd:d2:
2d:c1:bd:d3:a4:fe:4f:a8:56:dc:da:71:e4:23:02:
1c:ee:ed:60:20:65:d4:18:9d:7d:0b:26:67:c6:e5:
1c:03:1f:d4:88:f4:a9:e3:c1:f9:48:41:a4:c0:fa:
f8:70:39:c7:e0:d5:06:0b:8c:d1:09:16:63:03:4b:
83:c1:03:ce:24:85:e8:e0:16:71:b8:f1:0e:6a:36:
72:b8:04:cb:29:7a:b9:af:1b:0a:9e:71:5a:c0:ca:
49:b8:0f:c5:34:4a:f7:f8:06:d9:7e:23:a9:c9:b7:
3c:0c:ae:6d:a6:fd:30:a9:2a:9b:07:ed:2c:3f:91:
27:16:82:f4:32:83:03:c9:ee:4d:7c:cc:5c:28:e8:
f6:34:42:7c:be:44:7f:72:36:d2:79:33:e2:8f:dd:
91:10:28:20:72:d1:ff:df:85:2e:ef:ed:ef:b8:ad:
84:01:21:6e:8a:d7:63:88:1d:42:22:9b:ee:b9:36:
eb:d5:88:22:00:b5:dd:3e:e7:6d:3a:01:2b:43:9f:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:18:A2:66:ED:AB:05:84:45:E6:5B:4F:D5:81:B5:8F:40:0B:06
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:87:a8:c4:98:38:5a:1c:55:26:c3:df:e1:1d:b1:a8:76:1d:
36:79:8c:73:1a:4f:58:f9:72:5e:55:1d:4d:08:26:1d:f4:bf:
b1:3e:ad:cb:c8:f8:bc:89:ea:f6:c1:0c:4c:22:bc:f8:0e:8d:
bc:45:a6:c5:28:f1:fb:14:88:66:65:42:55:94:bc:69:0d:3c:
72:10:ef:99:62:87:65:bb:32:b0:2d:5d:ee:f8:29:30:85:73:
72:44:11:29:fe:1b:45:6f:8e:ac:f9:77:2c:46:fe:c0:b7:2d:
4e:dc:11:ad:92:af:94:d9:90:50:e7:e3:bf:8c:36:22:27:e0:
de:71:22:3f:37:98:b4:94:61:9f:b3:1f:ef:dc:9a:be:30:37:
cb:e5:58:87:46:76:de:a7:87:0e:0a:f8:cc:2f:4c:2c:c4:08:
d8:e3:aa:fa:99:52:23:a4:86:5c:0d:84:4c:3a:8d:ad:63:b8:
e6:c9:c2:df:12:5a:d6:16:0c:81:b9:01:2d:91:74:9d:ac:59:
0a:1f:59:60:48:45:dc:a5:ff:db:29:1c:47:47:da:0c:7c:e1:
a4:15:04:b0:c2:85:f6:df:eb:a2:37:f8:3e:19:96:2d:02:9d:
30:db:bd:65:c8:34:cf:40:39:2a:73:c9:34:85:34:6e:cb:0a:
16:45:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:15:49 2026 by rpki-client