Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: l8lcFp/bGaQVZmejbZq4zQ7kEaMANc9HudAZsJI+la0=
Subject key identifier: AD:4D:8C:C0:70:00:7F:4B:46:CD:98:BF:BD:B1:0C:31:10:AD:D8:72
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019D2BF336DD5D9191B633FE5A648F7C5108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 080C
Signing time: Thu 26 Mar 2026 21:00:52 +0000
Manifest this update: Thu 26 Mar 2026 21:00:52 +0000
Manifest next update: Fri 27 Mar 2026 21:00:52 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: tTfUN7py7smC7F8lv1oQPuf8p7WwjfgounOMGRAjDrE=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:36:dd:5d:91:91:b6:33:fe:5a:64:8f:7c:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Mar 26 21:00:52 2026 GMT
Not After : Mar 27 21:00:52 2026 GMT
Subject: CN=ad4d8cc070007f4b46cd98bfbdb10c3110add872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:63:17:dd:f2:57:b1:d2:7d:0a:14:a5:30:
63:17:4e:22:2c:cd:d8:1b:d2:68:94:7c:ac:53:b5:
b3:4d:37:a0:0c:b3:67:b1:de:55:72:63:83:ef:6a:
3c:52:b7:39:fa:93:10:55:4f:8d:48:8f:79:64:34:
f6:af:f0:f4:46:9f:92:a4:b2:d1:6b:49:1f:85:b2:
f0:c0:d2:8d:45:a8:ec:f5:88:91:7c:26:fe:12:d3:
f1:9a:30:15:73:81:cd:d9:11:6e:ab:88:3f:50:3d:
ae:b3:39:95:4b:51:15:ad:46:95:7c:a1:4c:d9:db:
94:43:8a:62:fe:d9:47:5b:9f:61:03:72:53:31:90:
36:a2:50:26:a6:ec:0d:75:91:ea:85:30:70:48:67:
e4:72:f1:21:a3:d8:95:a2:3d:2f:03:92:be:17:b8:
1a:c5:65:bd:19:3b:10:3a:7f:67:59:e0:cc:61:05:
d9:c8:18:12:08:44:7a:2c:b7:6f:fd:6a:15:0d:d2:
5a:0e:d0:1a:30:36:2a:65:b5:1b:c8:f9:b7:8a:7a:
c3:96:84:3a:db:d8:8a:bd:0e:03:81:93:fd:06:5c:
d0:a3:09:25:d6:14:20:4c:25:23:19:53:df:d2:bb:
b0:75:f9:56:4e:58:fd:cc:44:49:ff:61:59:f0:62:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4D:8C:C0:70:00:7F:4B:46:CD:98:BF:BD:B1:0C:31:10:AD:D8:72
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f4:f0:b7:6f:f3:39:05:b8:33:43:fa:31:27:69:b0:bf:51:
56:a3:b8:6e:e1:4e:17:3e:6e:6a:6e:f0:d0:b9:5f:a8:43:39:
20:f9:45:26:0c:3c:55:ec:05:c8:f1:f6:e7:ea:c6:3e:f4:7f:
20:4f:e2:8f:e5:72:dc:1e:e7:c2:64:67:a9:a0:90:96:98:09:
58:df:49:f2:6a:dd:61:48:a2:9e:cb:cc:f1:ad:6e:27:fd:66:
61:9f:33:b7:2a:14:a3:59:d4:7c:54:af:7d:7b:f8:70:5e:ec:
81:52:88:d1:a8:d9:69:92:e5:0f:9a:47:c8:29:61:e4:61:3b:
dd:73:cd:b0:71:4e:73:8c:ea:59:72:64:8c:46:0a:8e:cc:d3:
33:7d:73:45:f4:2f:b9:5b:40:a2:9c:e8:2a:60:de:53:10:1a:
4a:8c:71:b5:5e:e3:b5:a2:d0:c1:f8:a8:18:63:4d:70:9d:72:
b0:0e:09:2d:09:6d:33:da:30:ab:cd:25:d7:a6:36:76:0a:b9:
cf:f7:3c:7f:fa:eb:bc:b9:f6:b8:39:35:39:81:bb:a4:de:10:
b9:f1:3b:b3:79:ec:f2:74:82:4f:59:fd:88:27:c7:1a:48:58:
b8:62:7b:16:e8:65:43:c7:a7:3c:e5:1e:3e:e9:a5:41:6b:7c:
92:22:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:42 2026 by rpki-client