Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: iE4FPsYbCX859tH4kO08d/tCSBHL8kFOuVl2oEvAzeE=
Subject key identifier: A1:0C:34:33:4D:34:9D:75:BB:3F:E9:AB:28:3E:E8:0B:A1:28:35:8B
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 01A0016FB2E6888CAAC67086926299E8E764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0DD8
Signing time: Fri 14 Aug 2026 18:01:32 +0000
Manifest this update: Fri 14 Aug 2026 18:01:32 +0000
Manifest next update: Sat 15 Aug 2026 18:01:32 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: 5MOWum5ELOXBsjWvktZtlUOOzdYTOuUVhR+85iRpzVs=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b2:e6:88:8c:aa:c6:70:86:92:62:99:e8:e7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Aug 14 18:01:32 2026 GMT
Not After : Aug 15 18:01:32 2026 GMT
Subject: CN=a10c34334d349d75bb3fe9ab283ee80ba128358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:b4:a1:99:30:83:34:1e:d1:d0:d9:16:8b:
43:f3:60:2d:39:1d:6b:ce:c9:b9:8e:be:5e:37:20:
c6:1d:99:c4:a6:71:65:03:27:0d:b2:a7:6c:be:b7:
b9:32:67:99:1d:69:9f:a2:f2:f3:22:db:a6:15:1e:
e8:00:83:d1:36:56:da:37:14:20:c7:09:c3:29:1f:
db:53:17:8f:67:0c:75:d4:88:03:3f:90:67:96:65:
9d:0e:71:f3:16:7a:f3:60:2b:86:e3:91:0a:5f:c9:
01:4e:10:a1:fb:df:f8:1d:f9:1a:6f:f5:94:5b:6b:
5d:6f:8a:e9:c5:a5:41:7d:c6:d7:13:5f:83:23:6c:
84:1d:07:44:ec:e1:25:55:99:1b:38:33:3b:f8:de:
1d:15:8a:d9:3b:4c:f3:e8:ef:81:2d:86:b6:4b:3e:
a4:de:d0:6d:d4:1a:2d:f0:da:af:b7:d3:1f:b6:e6:
23:0f:05:a1:98:86:ef:16:aa:c4:45:d4:a7:f3:9b:
43:4c:a7:e0:c6:cd:31:7b:e0:85:3c:77:60:cb:83:
6c:05:4f:cb:7a:77:91:2d:75:d5:b3:db:5a:dc:8d:
30:5e:b2:b6:54:ad:d1:39:53:28:f0:ac:37:c1:e7:
92:16:6a:b9:ac:2e:6d:8e:99:11:94:76:12:0d:7e:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:34:33:4D:34:9D:75:BB:3F:E9:AB:28:3E:E8:0B:A1:28:35:8B
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5d:c3:3a:90:16:8d:42:f1:e9:1b:70:94:4b:8c:00:7c:0f:
1c:53:dd:15:28:5f:cb:6f:18:6a:31:c3:0b:5f:57:a7:54:d0:
62:9f:34:5d:09:e3:b9:95:59:01:41:82:9f:a1:67:01:53:b7:
3e:93:c2:64:da:1a:1c:8e:3b:87:39:bb:21:9e:cd:87:f0:38:
46:13:22:0d:1a:a3:eb:c3:b2:79:70:d1:73:de:ef:f5:5a:3b:
96:de:c5:29:31:d8:76:c2:7a:56:4d:99:0e:fc:62:bb:ed:f0:
97:58:24:13:c1:88:31:dd:02:03:07:0e:7d:18:63:51:72:42:
a4:44:54:15:63:89:3f:79:25:ca:6b:6b:a8:77:dd:b8:d1:74:
c3:c5:80:d4:74:2e:b2:50:30:19:3a:83:89:7d:2d:38:b5:31:
39:70:32:89:06:b1:d6:49:2d:fe:ed:67:4f:b2:55:e2:f5:d8:
07:11:6e:fd:75:d8:2d:81:12:47:27:41:7f:77:2e:33:c1:f9:
88:d8:fd:f3:64:08:75:df:36:3c:97:50:94:5c:63:aa:de:6f:
e0:df:a9:8b:12:ac:a3:6e:74:b2:18:ad:3d:09:89:df:5b:22:
0f:48:a7:da:06:00:d8:83:6a:09:7a:8a:df:f7:3d:b4:b4:ca:
79:45:23:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb7LmiIyqxnCGkmKZ6OdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzgxYzYyZDM5NDIwMzNkMGE3NDA0NGIwYzVhNGYxMTNl
NDNkZjMwHhcNMjYwODE0MTgwMTMyWhcNMjYwODE1MTgwMTMyWjAzMTEwLwYDVQQD
EyhhMTBjMzQzMzRkMzQ5ZDc1YmIzZmU5YWIyODNlZTgwYmExMjgzNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzG0oZkwgzQe0dDZFotD82AtOR1r
zsm5jr5eNyDGHZnEpnFlAycNsqdsvre5MmeZHWmfovLzItumFR7oAIPRNlbaNxQg
xwnDKR/bUxePZwx11IgDP5BnlmWdDnHzFnrzYCuG45EKX8kBThCh+9/4Hfkab/WU
W2tdb4rpxaVBfcbXE1+DI2yEHQdE7OElVZkbODM7+N4dFYrZO0zz6O+BLYa2Sz6k
3tBt1Bot8Nqvt9MftuYjDwWhmIbvFqrERdSn85tDTKfgxs0xe+CFPHdgy4NsBU/L
eneRLXXVs9ta3I0wXrK2VK3ROVMo8Kw3weeSFmq5rC5tjpkRlHYSDX7A7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEMNDNNNJ11uz/pqyg+6AuhKDWLMB8GA1UdIwQY
MBaAFNHIHGLTlCAz0KdARLDFpPET5D3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAt
ZGYzMTM4YjQzNGM4LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84N2Y5NzMtZWE2ZS00N2RmLWIxYjAtZGYzMTM4YjQzNGM4
LzEvMGNnY1l0T1VJRFBRcDBCRXNNV2s4UlBrUGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV3DOpAW
jULx6RtwlEuMAHwPHFPdFShfy28YajHDC19Xp1TQYp80XQnjuZVZAUGCn6FnAVO3
PpPCZNoaHI47hzm7IZ7Nh/A4RhMiDRqj68OyeXDRc97v9Vo7lt7FKTHYdsJ6Vk2Z
Dvxiu+3wl1gkE8GIMd0CAwcOfRhjUXJCpERUFWOJP3klymtrqHfduNF0w8WA1HQu
slAwGTqDiX0tOLUxOXAyiQax1kkt/u1nT7JV4vXYBxFu/XXYLYESRydBf3cuM8H5
iNj982QIdd82PJdQlFxjqt5v4N+pixKso250shitPQmJ31siD0in2gYA2INqCXqK
3/c9tLTKeUUj/Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:44 2026 by rpki-client