Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier: W+olAADWKTemf/zRnrehw78gMlIGWmVmfVM9QA8KZeQ=
Subject key identifier: 7C:3D:05:C2:58:8E:A9:BE:CD:00:E0:56:D9:61:43:83:80:2E:A3:C0
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 019D38D33F57663D6048B71DB9ACDC19E4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number: 0C67
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: bYmWFZiu2Lz5CNXOSOiTNShKotMscD+ItchfF8QtbeI=)
2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:57:66:3d:60:48:b7:1d:b9:ac:dc:19:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=7c3d05c2588ea9becd00e056d9614383802ea3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:0c:d8:16:3f:12:eb:74:f1:f1:91:04:e1:
8c:3a:85:7c:72:fc:be:a0:a3:b9:0e:3c:48:67:8b:
0d:05:65:c9:54:11:c6:e4:e4:68:fe:47:f6:11:e4:
5f:15:38:ff:56:85:51:91:a1:f7:1f:57:70:e8:11:
e1:94:e5:0d:4c:ac:82:54:9b:cd:81:9f:f8:f0:6b:
c5:f4:76:02:f2:db:8b:02:1b:a3:d4:c1:ea:5f:13:
7f:52:73:88:58:03:bf:39:09:14:e2:65:d1:49:1c:
b1:f4:08:0a:cb:07:97:59:3a:8d:83:9c:a6:27:28:
d2:85:3e:a6:74:49:51:4e:91:39:05:63:8d:95:ae:
3b:2c:9b:4b:25:f5:e2:59:a5:e7:14:26:e8:80:43:
c7:d2:65:63:24:dc:b6:b1:db:12:fe:6d:bf:d8:a2:
c7:fe:67:71:4a:e5:d5:f8:f2:cb:58:79:44:57:41:
f6:7e:f0:64:ca:53:d1:7b:39:26:b4:32:de:81:1f:
78:93:15:86:51:e4:7a:9d:94:c5:89:56:c8:f8:65:
78:22:16:ec:07:13:94:2d:9a:fc:a0:ee:21:f1:1a:
37:f4:f7:68:cb:11:f8:bc:98:97:d0:8a:74:a4:65:
57:10:7c:37:10:5f:9b:eb:12:d1:b2:5f:84:85:34:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:05:C2:58:8E:A9:BE:CD:00:E0:56:D9:61:43:83:80:2E:A3:C0
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c5:87:d8:22:ab:5a:1b:c3:00:04:e0:fe:3b:cd:fb:3d:b2:
0b:44:85:51:1e:39:8a:12:31:14:2e:cb:bd:ad:92:1d:77:db:
89:a6:e8:c0:3c:30:0c:83:f6:3c:13:b1:41:c9:ff:4b:51:cf:
a6:0e:ec:9e:eb:96:e4:c6:82:e8:86:7c:0d:96:62:64:39:c8:
83:c3:c8:6b:86:75:ab:13:a5:12:60:b5:57:bd:a4:f3:eb:5e:
ea:e0:bb:4e:9f:d7:6d:76:1f:58:72:e2:dd:59:16:14:9a:f9:
4d:8c:7e:56:c6:89:36:41:c0:3a:6e:8f:92:e4:d0:41:cc:bc:
25:05:b9:1f:9e:32:db:ca:3b:f0:33:2c:55:ea:f6:0d:a6:c1:
3c:68:2c:a8:4a:07:4e:f9:08:7a:64:26:67:c7:a2:f9:64:4b:
cc:ea:72:b0:79:83:07:d1:c2:20:de:ee:39:05:13:92:1f:53:
3d:af:f2:f5:ca:46:6e:4b:9f:64:42:22:7a:47:09:ae:09:cc:
4d:4e:61:cb:8a:b8:5e:42:5f:70:58:77:40:7f:41:45:f6:16:
51:a9:ca:22:0c:02:f3:02:5c:32:0b:07:1d:be:ee:e5:f1:8d:
3a:76:13:33:ce:1b:c1:9f:e4:c8:4f:42:b6:53:94:65:de:26:
06:27:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:17 2026 by rpki-client