
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: Yvziepz1b1gfXYN5bGG7acGVkxr44wpd6KP1YPmcZI8=
Subject key identifier: 7B:1A:F4:E3:48:A7:9E:86:CE:98:04:0D:B2:8B:4D:42:A2:58:CA:E4
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019F186805D5B3C3D42F62C644683BB36B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:38 +0000
Manifest this update: Tue 30 Jun 2026 12:01:38 +0000
Manifest next update: Wed 01 Jul 2026 12:01:38 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: /2C1olNjGmjigEtdHql5ohPMmjgjIPTbb6g+Bfq4eJQ=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:05:d5:b3:c3:d4:2f:62:c6:44:68:3b:b3:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Jun 30 12:01:38 2026 GMT
Not After : Jul 1 12:01:38 2026 GMT
Subject: CN=7b1af4e348a79e86ce98040db28b4d42a258cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:fa:10:6d:2a:a1:31:18:f6:78:34:66:36:
71:a1:98:10:3c:c6:3a:c2:57:53:37:e4:7b:fb:fd:
08:6b:f4:0c:15:76:56:0c:d4:18:df:a5:2c:d0:aa:
28:0a:bb:e6:a7:a7:8a:9b:85:3c:b0:5e:3f:89:1f:
ee:0d:48:cc:fe:95:8b:6f:56:2f:b4:9f:64:ba:ea:
dc:cb:a3:1d:1d:d7:63:87:4c:69:fc:a0:d6:bc:11:
2d:68:01:5e:94:33:96:c5:26:25:e5:2b:4b:b8:a3:
dc:56:56:8b:3a:88:bf:b8:ea:70:39:37:b9:c8:bd:
df:8e:4e:be:22:cc:89:76:36:5c:ea:8a:52:6d:5e:
47:d1:45:09:83:df:0a:e7:71:71:35:d8:12:1c:77:
d8:96:c5:71:9d:2c:3f:4f:d3:4d:0e:d7:83:a4:62:
dd:6b:c0:3b:be:37:e0:ae:82:11:f3:98:3f:01:59:
f2:06:04:92:ec:e6:2b:12:fd:7f:38:68:64:a4:71:
db:29:6d:15:d5:18:ff:10:d1:c6:34:85:9a:bb:72:
8d:0e:8a:29:2e:1f:54:fd:0d:5d:ab:86:9e:c2:62:
6f:5a:0f:ae:de:b6:ce:15:a5:12:67:05:8e:d9:d7:
71:46:a8:07:ca:9e:70:16:10:63:b3:82:4a:1a:51:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:F4:E3:48:A7:9E:86:CE:98:04:0D:B2:8B:4D:42:A2:58:CA:E4
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:cd:3c:5b:7e:52:23:1a:5e:fd:18:90:92:b3:37:cc:e5:
b0:ae:6f:36:19:ba:f5:8b:65:e3:14:95:24:92:20:1a:43:dc:
95:6c:74:f3:f7:52:1a:f1:4e:e9:4e:35:d7:3e:32:ff:25:12:
e5:d4:02:38:e7:8f:93:7b:94:11:26:d2:fc:3f:99:f9:dd:62:
0a:a2:0f:0e:d9:76:8e:36:b7:dd:17:ea:68:f1:fe:b2:c9:b6:
1d:bf:31:35:56:8b:87:69:0b:e5:d7:b8:ef:5c:7f:68:45:cc:
31:31:ef:d1:7c:9e:18:1b:7c:d4:ce:68:71:31:c2:0c:13:75:
96:94:47:36:ed:2e:2d:2c:e4:de:2e:bb:c3:b6:a1:f6:68:a7:
96:d8:d2:90:52:0e:70:9a:2f:ed:a1:48:2f:72:18:c9:2f:1e:
7f:95:eb:7a:20:d4:15:1f:34:04:a0:c7:bf:f8:3e:a9:31:b6:
49:f9:d7:bc:d4:73:d5:19:0a:4a:22:c0:7a:7a:e9:e3:42:0d:
d2:9e:33:d5:2a:b4:c5:22:0f:6c:d3:08:77:08:23:91:83:ac:
d7:a6:27:7f:71:58:53:d4:cf:6f:eb:fc:4c:05:49:eb:9d:a8:
52:cb:be:ff:25:8f:b1:c6:cb:8d:bd:6d:b2:75:ed:1b:cc:03:
b5:1d:63:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YaAXVs8PUL2LGRGg7s2uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4
ZGUxMGYwHhcNMjYwNjMwMTIwMTM4WhcNMjYwNzAxMTIwMTM4WjAzMTEwLwYDVQQD
Eyg3YjFhZjRlMzQ4YTc5ZTg2Y2U5ODA0MGRiMjhiNGQ0MmEyNThjYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42b6EG0qoTEY9ng0ZjZxoZgQPMY6
wldTN+R7+/0Ia/QMFXZWDNQY36Us0KooCrvmp6eKm4U8sF4/iR/uDUjM/pWLb1Yv
tJ9kuurcy6MdHddjh0xp/KDWvBEtaAFelDOWxSYl5StLuKPcVlaLOoi/uOpwOTe5
yL3fjk6+IsyJdjZc6opSbV5H0UUJg98K53FxNdgSHHfYlsVxnSw/T9NNDteDpGLd
a8A7vjfgroIR85g/AVnyBgSS7OYrEv1/OGhkpHHbKW0V1Rj/ENHGNIWau3KNDoop
Lh9U/Q1dq4aewmJvWg+u3rbOFaUSZwWO2ddxRqgHyp5wFhBjs4JKGlEiTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsa9ONIp56GzpgEDbKLTUKiWMrkMB8GA1UdIwQY
MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct
ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw
LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRDNPFt+
UiMaXv0YkJKzN8zlsK5vNhm69Ytl4xSVJJIgGkPclWx08/dSGvFO6U411z4y/yUS
5dQCOOePk3uUESbS/D+Z+d1iCqIPDtl2jja33RfqaPH+ssm2Hb8xNVaLh2kL5de4
71x/aEXMMTHv0XyeGBt81M5ocTHCDBN1lpRHNu0uLSzk3i67w7ah9minltjSkFIO
cJov7aFIL3IYyS8ef5XreiDUFR80BKDHv/g+qTG2SfnXvNRz1RkKSiLAenrp40IN
0p4z1Sq0xSIPbNMIdwgjkYOs16Ynf3FYU9TPb+v8TAVJ652oUsu+/yWPscbLjb1t
snXtG8wDtR1jXg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:27 2026 by rpki-client