Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: gzJt1OdOVrlTmfJh4i13j1wRZXFwyF8GBHoPzLZPzgE=
Subject key identifier: 06:08:38:15:95:89:42:23:F0:89:6C:EA:8A:08:24:78:89:EE:98:A3
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019F90233355ACF477B6B2328099E59197AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0949
Signing time: Thu 23 Jul 2026 18:00:53 +0000
Manifest this update: Thu 23 Jul 2026 18:00:53 +0000
Manifest next update: Fri 24 Jul 2026 18:00:53 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: IbZKTe0WGV0wxKnjNodC9/cDA+aGodiTeBJAXZ1hykk=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:33:55:ac:f4:77:b6:b2:32:80:99:e5:91:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Jul 23 18:00:53 2026 GMT
Not After : Jul 24 18:00:53 2026 GMT
Subject: CN=0608381595894223f0896cea8a08247889ee98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:b7:7d:c0:49:5d:b6:30:b1:1f:2e:f3:36:
4b:42:69:f4:6f:70:31:88:df:23:4a:c1:1d:0e:26:
a0:5d:97:04:e0:b5:a1:c7:51:ad:35:a3:e4:6e:eb:
45:bf:66:39:f8:06:0f:67:1f:7a:96:d1:6b:24:d1:
97:b9:f2:8f:53:10:a8:9a:23:69:81:52:4e:54:2d:
75:7a:ce:d6:97:ea:1b:a0:1a:ff:f6:d0:a3:8e:b8:
3f:1a:0e:52:54:1e:b0:c3:f5:43:b0:59:55:00:ec:
94:a2:d9:c4:ad:ee:91:8e:41:d2:92:b6:69:a7:f5:
b6:bb:0d:54:52:cf:4b:db:8e:ea:2d:ea:8c:36:39:
2e:5f:17:9b:65:a7:5c:e2:a4:b2:f8:62:53:b0:f4:
c5:7a:54:79:70:9d:0d:eb:b3:b4:67:39:f1:d1:db:
34:82:c6:f8:70:6f:b7:51:94:c2:b4:b4:e4:44:98:
e1:be:c4:0e:a6:87:9e:37:b5:dc:54:11:2b:0c:70:
8a:da:02:80:af:23:74:94:de:55:c4:dd:4f:bd:bf:
6a:d7:11:27:12:b4:30:0d:1a:f8:96:0f:ce:03:29:
d3:86:23:b6:55:ae:3b:ad:f4:4d:ed:f3:7a:39:cd:
66:08:49:3a:60:5c:c1:46:f4:9c:7e:a1:74:46:95:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:38:15:95:89:42:23:F0:89:6C:EA:8A:08:24:78:89:EE:98:A3
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:74:7c:a9:95:af:6f:22:ae:86:36:c8:7a:21:ff:61:9d:3d:
85:0b:9e:ff:8b:43:83:98:f7:8c:1f:0c:0c:de:94:c1:1d:ae:
b9:4f:3d:09:3c:cc:72:35:d2:1b:02:91:9d:89:58:b9:9a:8e:
81:ec:37:d4:11:43:44:b7:52:16:71:2b:3b:48:bb:88:f2:b4:
06:97:29:4f:9a:1a:8c:78:7c:38:1c:3d:06:ac:a0:3e:f1:8b:
c7:0f:46:f5:ba:52:7e:75:d3:ac:c7:a2:f0:cb:ff:e4:b8:fc:
1a:d9:14:97:3b:6f:6e:77:4c:fd:ee:f5:10:29:be:d3:19:36:
62:04:39:5c:8c:51:91:86:36:40:6a:0b:db:46:b6:89:b5:c6:
24:fe:4b:48:94:a7:9b:05:20:96:fb:8b:ba:f5:9f:f4:1a:80:
d0:a0:ec:a7:21:15:e3:75:05:aa:49:e1:2c:c8:f1:d0:19:97:
79:83:fb:b6:9c:0a:5e:ad:90:8d:7d:f5:09:ed:f9:54:f6:e7:
9d:b9:22:90:dd:18:cd:2e:36:8b:c3:c8:36:c3:d0:6b:25:3d:
84:8d:d4:f4:b9:cd:c7:f1:17:54:5f:26:86:95:31:f1:4d:2b:
98:e5:35:98:00:53:9c:cd:67:0a:ae:09:3b:2b:0d:8a:40:a3:
25:b6:98:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIzNVrPR3trIygJnlkZerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzA4ZGQxMTIwNmZhNTJkYjAwNGU0NTVhYzhkOTk1YWY0
YzNiMDgwHhcNMjYwNzIzMTgwMDUzWhcNMjYwNzI0MTgwMDUzWjAzMTEwLwYDVQQD
EygwNjA4MzgxNTk1ODk0MjIzZjA4OTZjZWE4YTA4MjQ3ODg5ZWU5OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47G3fcBJXbYwsR8u8zZLQmn0b3Ax
iN8jSsEdDiagXZcE4LWhx1GtNaPkbutFv2Y5+AYPZx96ltFrJNGXufKPUxComiNp
gVJOVC11es7Wl+oboBr/9tCjjrg/Gg5SVB6ww/VDsFlVAOyUotnEre6RjkHSkrZp
p/W2uw1UUs9L247qLeqMNjkuXxebZadc4qSy+GJTsPTFelR5cJ0N67O0Zznx0ds0
gsb4cG+3UZTCtLTkRJjhvsQOpoeeN7XcVBErDHCK2gKAryN0lN5VxN1Pvb9q1xEn
ErQwDRr4lg/OAynThiO2Va47rfRN7fN6Oc1mCEk6YFzBRvScfqF0RpWKIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYIOBWViUIj8Ils6ooIJHiJ7pijMB8GA1UdIwQY
MBaAFNIwjdESBvpS2wBORVrI2ZWvTDsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYt
ZGFkYmVlMWUyYzJjLzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jZmViMDctNjZmNy00YjUxLWJlYTYtZGFkYmVlMWUyYzJj
LzEvMGpDTjBSSUctbExiQUU1RldzalpsYTlNT3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnR8qZWv
byKuhjbIeiH/YZ09hQue/4tDg5j3jB8MDN6UwR2uuU89CTzMcjXSGwKRnYlYuZqO
gew31BFDRLdSFnErO0i7iPK0BpcpT5oajHh8OBw9BqygPvGLxw9G9bpSfnXTrMei
8Mv/5Lj8GtkUlztvbndM/e71ECm+0xk2YgQ5XIxRkYY2QGoL20a2ibXGJP5LSJSn
mwUglvuLuvWf9BqA0KDspyEV43UFqknhLMjx0BmXeYP7tpwKXq2QjX31Ce35VPbn
nbkikN0YzS42i8PINsPQayU9hI3U9LnNx/EXVF8mhpUx8U0rmOU1mABTnM1nCq4J
OysNikCjJbaYYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:06 2026 by rpki-client