Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: 5gptbmoFXUBtJ82K/QSh2cKNo9jreWVA4FApPIY6Etc=
Subject key identifier: 39:38:9B:37:6D:0A:09:4E:36:39:B4:CD:DC:A5:98:1C:34:AE:41:6D
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019F189DEEA9F5196007CFBDDEB7B925A957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0CE1
Signing time: Tue 30 Jun 2026 13:00:31 +0000
Manifest this update: Tue 30 Jun 2026 13:00:31 +0000
Manifest next update: Wed 01 Jul 2026 13:00:31 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: NUC6ntRdeChnLe+LZbpWmsfjqNDWxruL6dpK5qh8Q8g=)
2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=)
3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:ee:a9:f5:19:60:07:cf:bd:de:b7:b9:25:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jun 30 13:00:31 2026 GMT
Not After : Jul 1 13:00:31 2026 GMT
Subject: CN=39389b376d0a094e3639b4cddca5981c34ae416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:c6:8a:3f:b6:ee:5b:f7:ae:17:a5:12:90:
d8:cf:06:d3:9b:62:b5:4a:f6:93:a8:7e:27:b2:9e:
34:4a:03:33:8e:76:7e:fb:1b:f7:d1:72:fe:86:ed:
e7:f5:1e:32:ce:34:a8:f9:c6:f9:72:ec:ef:61:47:
93:1b:b2:21:fe:e1:3f:8e:76:03:5e:15:66:ed:22:
ff:21:eb:8c:ed:fd:d3:af:44:0f:ec:9b:2a:ef:6a:
78:2f:ac:7d:75:65:3f:e8:ce:ec:f0:cd:fc:23:1c:
9e:31:5a:52:36:bd:6d:43:3d:5d:99:ae:c9:2a:a0:
0c:f0:7d:d1:55:5e:2a:a6:b7:9b:95:e2:7a:56:95:
59:70:b9:cd:08:7b:81:13:40:cf:cc:0d:33:8e:6b:
a8:fe:80:33:e9:0f:c4:9f:ff:5b:16:4e:27:f5:79:
9e:6c:dc:85:f0:10:06:03:8c:d2:57:09:90:56:10:
2c:6f:1c:27:44:de:c5:a3:46:eb:66:60:08:0f:62:
c1:e5:6a:23:7e:66:25:1b:fb:a2:bc:42:ce:46:0c:
93:aa:b8:ae:ef:e0:c1:8c:a4:25:05:17:09:13:a0:
f3:fc:59:8c:fc:90:49:19:7f:9e:c7:b3:51:e2:74:
89:75:4b:f0:13:c2:ea:e8:fd:5a:b8:a7:3a:8a:6b:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:38:9B:37:6D:0A:09:4E:36:39:B4:CD:DC:A5:98:1C:34:AE:41:6D
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:0a:6c:18:77:8e:08:71:12:13:fe:1c:c5:f5:16:e6:34:
a5:a6:86:06:3d:8a:eb:0a:c5:18:46:83:69:b3:98:30:2f:08:
f3:75:e5:94:99:c8:17:0b:f1:ee:bd:5e:ad:77:33:96:74:01:
d7:c4:a7:ff:72:a0:0e:99:86:04:89:d8:dd:70:83:72:86:23:
f3:1a:b2:21:39:d8:9a:58:12:d4:bd:b6:64:db:fd:b3:ae:78:
3f:ab:77:5e:f9:43:f5:88:10:20:d2:8d:34:47:39:82:84:1d:
68:58:83:a8:3f:89:e6:39:c9:d3:d9:0d:05:41:d8:c6:3c:f9:
aa:38:ad:c4:28:19:fe:7d:e9:0d:61:cd:fa:c3:e8:60:f6:da:
d2:6c:52:54:71:35:41:dd:62:e0:f6:be:ad:0e:c0:36:73:21:
79:0e:cf:95:1d:dc:b4:df:b8:68:3c:94:ab:9d:11:1d:e4:ba:
39:68:b9:96:1c:85:e0:8c:e6:46:64:a8:44:3d:98:88:8c:07:
0c:72:57:3f:9b:0d:65:9c:f8:02:40:5c:21:d8:e4:70:5e:8d:
07:40:42:28:ea:c9:bf:2a:96:03:11:9a:8d:26:27:51:53:58:
dd:b6:03:7d:f8:c8:f0:5e:c3:e9:d9:63:57:94:8a:93:53:e2:
bc:ff:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:43 2026 by rpki-client