Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: exJk7EJf3Hg8kJ+zoyU4qcqozZGtOsjSF17+s+S7xPw=
Subject key identifier: 9B:58:5E:27:54:D5:4C:5D:F1:9A:5C:12:7D:B6:0B:74:67:06:15:B0
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 01A13ECB51C2E46438A894B3FB15658C126B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 09:01:14 +0000
Manifest this update: Thu 15 Oct 2026 09:01:14 +0000
Manifest next update: Fri 16 Oct 2026 09:01:14 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: EWUSb2SUIGPwggiBnlKqJ5QC+xUg8GrCfd0I1Ah3ahM=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:51:c2:e4:64:38:a8:94:b3:fb:15:65:8c:12:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Oct 15 09:01:14 2026 GMT
Not After : Oct 16 09:01:14 2026 GMT
Subject: CN=9b585e2754d54c5df19a5c127db60b74670615b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:cd:36:81:01:06:7c:53:bc:79:36:11:7e:
d7:d7:5c:fc:7b:a8:d8:70:d7:1d:26:d4:35:ec:80:
6c:a2:38:fd:65:ea:c8:4f:92:9c:62:7d:79:ff:88:
da:94:ed:c7:1d:1e:22:b2:b7:cc:f0:cf:c3:61:b6:
10:44:9c:ad:71:ff:93:6b:0f:44:e9:d3:73:da:f2:
97:33:d4:a5:ad:6e:d3:10:75:a0:05:8c:87:1b:cb:
80:e6:55:5d:c3:28:c0:e3:1c:da:a6:d9:c1:34:c0:
d8:8c:ef:f1:ba:74:61:51:ff:af:b8:ce:3b:9d:c5:
5b:f0:44:7e:4f:fd:7c:78:9c:de:d3:45:db:de:a2:
ee:6e:db:7f:df:d0:f2:17:02:fd:10:44:42:87:6d:
a2:e7:aa:7d:fb:c6:f8:b9:f7:fd:76:83:5c:f4:14:
b4:81:b7:e3:f9:18:23:92:0e:9e:33:a4:9e:de:6b:
56:ed:01:59:42:f0:46:49:39:a0:c6:30:e9:60:10:
55:0f:15:bf:01:48:ab:ed:29:55:83:b5:59:4f:84:
f4:cd:4a:7b:99:7b:0e:b3:50:f0:e4:b5:a2:fd:d4:
d5:f7:98:13:e3:af:dc:4e:1e:14:21:8e:2a:70:ab:
42:fb:c6:ae:54:e5:ba:08:1f:c7:a6:5a:02:8f:f9:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:58:5E:27:54:D5:4C:5D:F1:9A:5C:12:7D:B6:0B:74:67:06:15:B0
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:cf:39:02:e4:dd:f1:31:13:f1:ad:31:4c:87:c3:37:1c:
c7:d7:a7:01:75:c7:48:a5:ad:41:aa:0a:49:cf:fd:9d:7e:45:
91:52:0d:f6:6a:0e:76:49:3b:c2:64:c9:18:ae:d8:a5:88:97:
09:33:0c:56:c2:e6:08:5a:58:74:21:b1:72:e7:e8:ca:99:11:
97:8b:94:24:06:1e:29:e3:ec:f0:ce:1e:2d:9c:9a:aa:ce:b4:
64:26:b3:e6:a4:5b:d0:bc:78:c8:d3:0d:1a:0e:e0:41:94:c7:
f3:05:c8:3c:a0:1c:1e:ec:b6:20:c5:bc:e0:be:fc:0e:cd:dd:
dd:dc:0d:72:9e:01:13:07:14:e2:d5:e1:69:e0:a0:bc:ac:eb:
d5:a7:a8:dc:51:a8:15:1f:88:a4:35:ad:b6:9c:3b:18:20:15:
98:07:36:1b:22:ec:40:e7:21:76:68:57:91:96:0e:a2:c8:c7:
e9:44:e9:08:ec:a3:ce:92:29:6b:e7:4d:7f:b3:c5:5c:99:2e:
b6:83:31:84:aa:6a:a3:e0:e2:61:eb:e1:84:2c:2b:cf:7e:ae:
7d:b3:6e:ae:dd:24:c4:d2:da:9d:4a:88:fc:00:06:ee:9e:52:
e3:f0:24:f1:f2:1a:cb:bf:7e:c7:cf:9b:26:f5:55:d4:81:c0:
71:e3:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:46 2026 by rpki-client