Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
File: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft (raw, json)
Hash identifier: 8oXKo5LO9rAC9VvjgqHGSwTC9LNbN4YsCTS2PiT03sU=
Subject key identifier: 9A:B5:54:2B:3F:70:17:F2:A7:2A:00:A8:EF:61:D4:62:6C:AB:80:68
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Certificate issuer: /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial: 01A15930288A0141427FE014B1D322A6A9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:30 +0000
Manifest this update: Tue 20 Oct 2026 12:01:30 +0000
Manifest next update: Wed 21 Oct 2026 12:01:30 +0000
Files and hashes: 1: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl (hash: RtyJ8tkCpCkokTcAEf7DEx7Emy6wxNCBmzYOn9cxMjE=)
2: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (hash: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:28:8a:01:41:42:7f:e0:14:b1:d3:22:a6:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Validity
Not Before: Oct 20 12:01:30 2026 GMT
Not After : Oct 21 12:01:30 2026 GMT
Subject: CN=9ab5542b3f7017f2a72a00a8ef61d4626cab8068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:33:a6:0f:32:9e:52:6f:7a:a9:11:dc:a8:
1d:54:6b:50:77:4c:6b:76:f4:01:40:f9:40:c0:96:
79:e6:c2:84:84:dd:84:29:ff:3b:38:00:1d:87:8b:
49:8a:5c:51:eb:05:a7:bc:35:d4:a1:51:83:16:a6:
15:de:c6:df:ac:69:e1:76:f0:89:96:18:c8:f3:6f:
4c:df:73:dd:fe:0e:b9:ec:50:0c:e9:eb:1a:87:ab:
6f:f4:c1:b8:d0:b4:a1:35:5b:f4:ec:4e:fd:46:59:
d4:4b:f1:c3:f9:31:bc:b3:c1:fc:88:66:3e:05:e4:
67:9d:6f:e1:2d:9c:1a:f2:a5:ea:e0:68:fe:16:96:
b3:79:31:ae:6c:36:ff:6d:7d:87:8e:64:cd:0b:15:
84:e4:f3:b5:28:a4:ae:9a:e6:21:a9:88:43:f5:bc:
c3:14:f4:9c:fc:d8:ef:f4:9e:cf:9b:fa:df:d3:aa:
13:60:1f:f9:31:73:1e:eb:1c:b3:e7:eb:31:21:06:
ba:6c:b1:f6:e8:d0:7d:8f:94:ca:bb:03:3a:30:55:
cd:da:d9:88:6e:1f:a5:d7:f7:07:fb:85:08:00:f6:
b2:c0:79:08:26:01:d7:de:57:a9:99:bf:15:c7:a3:
60:85:21:df:6f:dc:f0:e6:a8:68:70:36:ed:58:2c:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:54:2B:3F:70:17:F2:A7:2A:00:A8:EF:61:D4:62:6C:AB:80:68
X509v3 Authority Key Identifier:
keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:20:d8:fe:92:00:dc:1c:bd:ac:4d:16:b1:7d:9f:35:73:
20:fb:a3:1e:b9:86:be:57:c0:a1:bf:4c:42:de:df:27:02:10:
c1:37:dc:41:21:ae:32:d0:21:62:fb:66:a9:30:a2:b3:55:92:
f5:49:ed:86:60:9e:68:b8:4d:e1:a9:aa:e0:ea:3d:84:c8:96:
a8:63:f5:d9:55:e9:75:59:b1:bc:7b:17:60:b8:b6:cf:a7:a7:
39:68:d2:98:26:be:32:ef:8c:3f:6c:2c:d9:69:94:b8:dd:bb:
d3:3a:f5:7e:60:55:24:f3:c8:a3:9c:4e:7b:f3:93:74:59:c1:
91:35:a6:e8:ef:ac:f2:c9:dd:23:44:87:eb:31:f6:03:10:70:
19:da:50:cf:a8:8a:07:5a:4c:8c:b4:a4:52:17:bc:8c:ff:41:
c1:df:50:1f:93:94:d7:76:f8:9d:95:b1:f7:54:ac:d9:af:b7:
b4:db:5a:30:a6:7d:cc:26:3d:ca:b4:93:1d:a2:ae:4d:5e:e2:
57:d2:48:77:a6:dc:af:a6:f4:3a:a3:33:78:f7:4f:e8:93:e4:
bb:15:06:6d:4d:59:a9:89:40:ef:78:cf:c5:3e:e8:51:25:a0:
f0:1f:39:e3:57:85:21:0f:d3:eb:fc:ee:5b:a7:36:76:90:46:
5d:a1:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:50:29 2026 by rpki-client