Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: kh5U3UHwTRvdYLthuOLX/9Q+GfvH4MUBSCDxOH7tt24=
Subject key identifier: 2C:A8:73:0E:28:43:2A:7A:5B:68:7C:F0:68:83:9A:17:B1:0F:81:1E
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019D3789164F6DB1E35AA8B4256592970B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: oPWPoXL+2Yn5EP/I4u3pfU+Le8PChQe45APx4wY/uM8=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:16:4f:6d:b1:e3:5a:a8:b4:25:65:92:97:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=2ca8730e28432a7a5b687cf068839a17b10f811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:63:7b:1a:cf:f9:8b:5f:8e:5a:c8:57:1e:
05:ec:ea:86:61:9c:38:77:cf:47:3f:b4:29:10:fb:
0b:ef:00:69:21:59:08:67:f3:85:60:d2:72:54:5f:
87:5b:16:27:3e:5a:e3:c8:61:a5:94:a0:71:17:6a:
13:9c:b8:ff:0a:ac:0c:89:26:75:ef:e0:bf:07:3e:
eb:3c:fb:a5:ab:28:5b:2a:3d:2e:48:ee:6d:fb:5d:
cd:0d:bb:0a:9b:c9:1b:ea:0d:0b:8f:23:e9:e6:2d:
98:17:42:04:a1:ad:e6:29:71:b7:90:c2:41:f1:df:
80:d6:bb:0f:dd:0d:1c:61:c2:30:cd:4e:80:a6:55:
9d:f5:f3:10:e3:3f:4f:39:7e:7e:2c:29:af:1a:69:
20:ef:59:da:8f:2d:b4:f6:b0:ca:3f:cc:2b:86:c3:
04:07:42:70:a1:17:64:e1:7e:dc:83:9e:c1:d0:7d:
ea:ae:c9:ac:02:17:b1:d9:fc:5b:7b:96:c0:4b:c7:
4d:43:72:69:c0:13:e9:86:c6:3f:89:15:1c:10:9d:
4b:51:b9:d0:10:1b:c4:8c:0f:33:26:39:64:d7:31:
33:9c:f4:f2:bd:95:82:64:93:38:a7:47:bd:05:f0:
8f:6a:d6:28:c7:7a:34:43:38:66:a5:83:73:af:5c:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:73:0E:28:43:2A:7A:5B:68:7C:F0:68:83:9A:17:B1:0F:81:1E
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:6e:31:35:2b:04:29:cc:56:30:58:61:21:87:79:c8:ba:
a0:50:fd:09:81:21:65:1b:ad:c6:24:e7:dd:c1:19:cd:16:86:
cb:d5:6f:57:aa:89:45:4e:8b:32:79:8b:bd:a3:00:15:6a:85:
01:64:40:ce:c1:bc:9a:27:4d:83:2e:62:30:0f:fa:b0:58:fa:
f7:c6:46:ad:a9:ff:9c:43:df:de:f4:fa:c1:18:dc:3d:4b:57:
35:e3:9f:a8:ec:fd:ba:52:44:09:72:25:68:67:b3:97:61:24:
ac:0f:7e:be:1f:a5:bd:4d:5c:2e:b0:1a:e4:f2:d5:b2:0c:ff:
46:4f:90:be:ea:23:32:f6:7b:17:02:51:ba:8d:68:75:4f:1b:
59:71:23:85:2b:f0:49:81:d6:7a:46:50:c2:4b:d9:98:16:bf:
86:16:8e:e4:af:c8:38:0f:26:ec:07:11:6b:b7:a8:1a:4d:f0:
c9:64:b7:10:41:08:60:f2:31:57:87:71:22:2f:68:b8:34:5c:
ce:45:1a:1f:38:c4:5d:78:40:8c:e8:3d:19:8e:57:6e:fd:59:
9d:a4:e8:66:93:f4:58:67:7f:c0:63:52:4e:43:77:0d:f7:fe:
34:a7:06:85:6f:63:16:be:5d:6a:28:2d:3c:3a:f1:87:9d:92:
75:c8:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:48 2026 by rpki-client