Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: yRFnGOmmuPuyJYwARjN2oYTYdK4Y2Rwg1Rapm1hgUk8=
Subject key identifier: A3:6C:4A:0C:B5:A8:42:AF:D2:35:1D:5D:DB:F2:47:1B:4C:32:3A:98
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 01A0D0B68A469A0E06AC31C38388863811C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 09EF
Signing time: Thu 24 Sep 2026 00:00:18 +0000
Manifest this update: Thu 24 Sep 2026 00:00:18 +0000
Manifest next update: Fri 25 Sep 2026 00:00:18 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: 6vv6VEr+ps3XbLKNaPtw1MASj1ylJJV1S9WPL5DfvlU=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:8a:46:9a:0e:06:ac:31:c3:83:88:86:38:11:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Sep 24 00:00:18 2026 GMT
Not After : Sep 25 00:00:18 2026 GMT
Subject: CN=a36c4a0cb5a842afd2351d5ddbf2471b4c323a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:0c:d7:07:a5:aa:d5:21:56:88:97:e8:d1:
b6:7c:44:1b:4a:cc:88:38:a8:e7:9f:e2:55:7b:c9:
9e:f7:a1:09:8e:c4:d1:59:ff:5a:0f:b6:8b:b7:46:
75:51:60:cb:80:ee:bd:bd:4e:c0:00:0b:33:2b:80:
25:22:44:0d:a9:33:71:37:d2:e5:7a:de:04:85:51:
a7:dc:42:4e:7c:d9:ab:81:fd:27:06:b6:d6:f2:54:
b6:4e:0d:d4:e4:02:43:f5:ad:7b:03:f0:a3:5a:d5:
8d:0e:1b:94:e6:11:55:24:34:5a:8f:b0:06:98:15:
f5:1a:8a:13:30:17:5f:20:fe:ad:88:c4:0b:1f:6b:
c4:5e:db:7e:f6:1f:78:e6:7b:0f:d8:31:ab:21:40:
0a:e0:66:94:f4:67:0b:76:91:97:e9:9e:34:db:f4:
8d:98:5a:76:2b:56:b2:30:5e:71:b1:ec:d7:82:67:
cd:1d:98:68:f0:4a:55:88:7b:3f:ad:6c:40:16:11:
49:77:96:72:a5:93:44:a5:6b:f4:af:a9:56:62:96:
f4:10:8f:9f:86:00:4b:4c:fc:73:03:ce:a6:46:5d:
0f:e7:d9:4e:03:2c:52:d7:1d:ef:78:23:fc:55:ad:
d5:f5:46:19:4e:9e:4e:47:fd:42:d0:15:63:f8:2c:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:4A:0C:B5:A8:42:AF:D2:35:1D:5D:DB:F2:47:1B:4C:32:3A:98
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:d8:c8:dd:c9:a3:55:76:63:0c:50:56:c0:81:6c:88:9e:
19:6a:7c:bd:4a:7f:2d:05:1b:32:2f:79:38:8b:ad:73:ba:37:
f8:c6:7a:b2:2a:0d:b2:6a:a5:ce:a6:28:ba:b7:aa:76:c9:37:
a2:22:90:29:9e:ab:71:69:77:c0:ba:d2:6c:9c:5b:fa:7f:1d:
48:f3:18:4b:02:51:bd:fe:14:f5:fa:52:74:f3:1a:95:9e:e5:
7c:b5:0e:ac:92:61:67:31:e5:e4:c7:de:09:33:c5:d6:8d:97:
e9:45:6c:99:82:40:6a:c2:c6:7d:73:49:2e:18:18:d0:37:c0:
4e:ee:40:a5:75:ac:f5:a1:e8:59:74:30:6e:6d:87:70:4c:2c:
5c:06:ff:9c:4c:26:ff:25:03:87:8a:79:76:e1:da:56:bf:37:
2e:8f:84:bb:52:3b:41:1f:9f:06:d8:8b:37:3b:6f:b4:aa:f3:
43:08:98:40:63:ad:12:77:c9:64:ac:72:f7:b9:37:20:fa:d3:
99:f8:d8:84:fb:d9:f8:15:27:3b:77:2f:07:1c:62:d5:c4:9b:
a1:6e:d8:aa:06:3b:de:b9:c9:8a:41:ff:a3:02:7e:02:0f:8c:
04:74:05:1a:85:ce:75:01:10:9c:37:dd:2b:a9:e9:6d:58:b2:
51:38:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:09 2026 by rpki-client