
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: 1jQNQPsTZ4n012SF4J/t7t6BObb8a0nYYCFi0jrsHU8=
Subject key identifier: BC:23:A9:E0:CB:C8:90:6E:34:B9:B3:81:4E:21:9A:0A:53:7C:1B:F8
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019F860D548DC010206D7EB1E76DC2A6C9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 0246
Signing time: Tue 21 Jul 2026 19:00:48 +0000
Manifest this update: Tue 21 Jul 2026 19:00:48 +0000
Manifest next update: Wed 22 Jul 2026 19:00:48 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: 7pX6QYzbecQyXiHlYAdgVtC1WhU4u17vyChUgogrsyQ=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:54:8d:c0:10:20:6d:7e:b1:e7:6d:c2:a6:c9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Jul 21 19:00:48 2026 GMT
Not After : Jul 22 19:00:48 2026 GMT
Subject: CN=bc23a9e0cbc8906e34b9b3814e219a0a537c1bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:75:93:c0:de:24:cf:1b:cd:27:0b:62:b0:
42:e1:5b:4b:4f:cf:c6:12:42:42:1e:46:1c:cb:4c:
82:30:44:8d:32:93:85:3c:4a:10:aa:03:c2:fb:77:
f9:0c:f5:8a:cf:d7:1b:69:7a:1f:c3:44:b4:8a:e2:
c0:ed:f1:df:6c:99:c1:4b:2e:11:ea:ad:60:0c:aa:
e0:58:e8:51:3a:3e:56:fb:7e:89:92:77:04:41:64:
96:d4:38:48:3c:f0:93:65:75:0b:30:ff:17:4d:87:
ec:4a:36:9b:5c:60:23:04:b4:82:7e:66:b3:4d:4a:
77:2a:37:7e:ca:c0:0d:ab:2d:10:c7:75:8a:ba:65:
f2:5e:7f:de:eb:70:6e:f6:8b:b3:02:3a:8b:ea:72:
72:31:63:01:9a:df:a6:2d:2a:d6:11:f9:6d:65:21:
ad:d5:d1:5c:68:3a:6a:64:3d:bf:61:f7:62:68:f0:
db:00:4b:0b:1d:93:ec:ae:4f:2a:45:6b:f8:29:a2:
9d:f9:99:5a:20:42:28:e2:42:9d:b8:eb:1a:6e:84:
bc:50:8a:86:d0:bb:32:74:df:c3:87:b8:62:81:be:
7c:f3:ec:03:7e:cd:3f:ff:b2:09:df:b1:19:53:b4:
b8:00:98:61:63:82:eb:ac:57:4f:60:bd:01:c3:2d:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:A9:E0:CB:C8:90:6E:34:B9:B3:81:4E:21:9A:0A:53:7C:1B:F8
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:12:2f:b9:28:cd:15:5b:2c:08:f7:28:b9:27:be:67:08:de:
63:f1:2a:0d:fc:62:16:11:87:f8:f8:e1:7a:c9:bb:63:b3:36:
7b:7b:c9:dc:43:02:22:0e:d7:c9:ad:c3:dc:6c:84:55:d7:96:
00:7e:5e:f8:18:86:23:26:cf:e9:11:89:49:f7:a6:7b:59:87:
72:f3:ea:14:67:6b:1a:44:95:6f:39:e3:e3:c0:de:66:6a:23:
64:c5:7c:36:8e:0e:23:00:f6:92:84:1b:0c:55:5f:79:47:2b:
b7:84:c3:dc:c0:1f:ff:b4:49:9e:52:18:a7:bc:da:d6:93:2d:
bc:63:07:55:10:0e:6c:a7:c4:fa:b1:db:67:e5:93:7b:38:d5:
d8:8c:8e:6b:e2:63:94:59:ff:4e:66:65:8a:fe:48:ab:86:02:
0a:a6:1e:01:65:19:81:67:eb:f4:68:34:ec:e2:ad:67:0c:1e:
c5:b7:5b:27:57:9c:b8:bc:d0:02:0d:6f:e3:eb:63:0b:54:d4:
5f:ad:13:d1:b2:46:23:b5:bf:73:b1:74:d1:0c:3b:1c:63:ad:
cc:3a:ea:a4:9a:aa:a8:89:94:97:48:80:29:1d:b0:a6:a3:98:
ad:91:cc:db:88:ce:a2:40:77:3d:6c:d3:8d:a1:43:f9:7b:0f:
96:a7:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:44:04 2026 by rpki-client