Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
File: 0c0c1HQkGQk2se35qYScPjBYfzo.mft (raw, json)
Hash identifier: 7UtqnwBflUZxMmulPHqC6+0gBpptf7ptznEO75timJU=
Subject key identifier: 6F:75:BA:AC:30:39:F0:D2:A7:1F:9E:47:1B:9B:45:68:F1:BD:3D:38
Authority key identifier: D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
Certificate issuer: /CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Certificate serial: 019F90FE84AD224F0F5D605341967A086603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
Manifest number: 1126
Signing time: Thu 23 Jul 2026 22:00:26 +0000
Manifest this update: Thu 23 Jul 2026 22:00:26 +0000
Manifest next update: Fri 24 Jul 2026 22:00:26 +0000
Files and hashes: 1: 0c0c1HQkGQk2se35qYScPjBYfzo.crl (hash: 06Cq8jlUbsrIqWVaxQrIScm7srXgmw+09Vw+tz7fkEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:84:ad:22:4f:0f:5d:60:53:41:96:7a:08:66:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cd1cd47424190936b1edf9a9849c3e30587f3a
Validity
Not Before: Jul 23 22:00:26 2026 GMT
Not After : Jul 24 22:00:26 2026 GMT
Subject: CN=6f75baac3039f0d2a71f9e471b9b4568f1bd3d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:4e:55:eb:81:b7:98:0b:10:8b:61:f6:d2:
08:d6:22:e5:9f:13:f2:be:27:8c:88:94:c6:a7:7f:
73:df:fb:0f:3d:6b:e5:34:ce:e5:0d:d3:41:b9:a4:
26:0c:75:8d:73:26:46:40:af:93:bd:b3:cf:eb:12:
01:a0:22:c5:66:2c:84:11:6b:a0:da:cd:6c:9f:c4:
b7:cc:c7:f3:49:1d:73:78:3e:0b:43:55:6b:cc:5a:
37:c7:ae:91:ff:45:c4:70:a7:5c:95:41:1b:96:73:
43:c8:5c:9e:df:ed:a8:74:58:5b:3c:c7:79:e2:be:
49:6f:0d:22:b5:f1:05:7b:57:6c:db:e3:f8:ff:0f:
20:d2:0f:79:8a:f8:86:c5:e6:e8:18:10:c2:42:e2:
b9:f1:c5:24:14:2b:15:31:90:fd:fe:d3:25:de:e3:
9c:a8:ff:1e:da:c1:b8:b5:75:55:a0:01:52:39:f8:
89:14:d6:67:f6:2b:48:7d:60:2b:89:b7:4b:a1:b5:
08:f3:f9:cd:5c:9f:a7:53:d7:f5:bb:fd:32:41:d6:
30:44:10:82:2a:41:35:ae:fc:af:ce:b7:3f:47:7f:
cc:b1:10:45:1b:a4:2a:db:3e:ef:09:a6:c3:be:43:
6f:e9:fd:48:f5:5f:5a:7f:d9:79:e0:11:93:19:e8:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:BA:AC:30:39:F0:D2:A7:1F:9E:47:1B:9B:45:68:F1:BD:3D:38
X509v3 Authority Key Identifier:
keyid:D1:CD:1C:D4:74:24:19:09:36:B1:ED:F9:A9:84:9C:3E:30:58:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c0c1HQkGQk2se35qYScPjBYfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/14aafd-d5bb-4644-bed7-b4533a088dc4/1/0c0c1HQkGQk2se35qYScPjBYfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9b:1f:42:68:93:3d:06:8a:d1:e2:53:ef:7d:ab:2c:0e:a0:
6a:1b:70:e8:a3:df:08:de:0f:27:be:52:9a:29:49:0d:fe:d6:
68:ab:2f:42:f1:e8:b0:c5:9f:48:04:bf:89:a0:56:64:44:06:
53:88:7b:da:e3:9d:39:dc:03:4d:a5:a7:75:e1:01:2f:b3:3b:
c0:a9:05:36:d5:9a:19:10:c5:26:20:1b:f1:03:df:5e:97:54:
d6:99:75:ec:ea:02:f1:47:f3:0d:cc:48:f4:eb:fc:3e:32:c7:
b6:da:f2:6a:5d:ed:0a:78:d4:26:19:a4:16:39:26:32:75:a0:
c7:ca:03:35:8d:ca:7e:3c:a6:a5:dc:37:4a:98:cc:a2:36:be:
dc:40:1d:48:16:48:ca:77:32:ba:c6:52:70:18:51:ee:17:0d:
8c:37:f9:4f:be:9c:9f:97:33:24:6f:ae:0c:05:0f:d6:29:c9:
3f:70:53:72:2e:a5:7b:bb:e3:cd:0e:11:16:7e:dc:69:fd:3d:
50:4d:f8:36:87:96:8d:a7:45:75:19:bd:a7:2a:a8:a9:90:01:
4a:57:36:79:32:d2:71:c6:85:ed:4d:31:bf:18:15:87:7a:22:
76:0e:2a:dd:30:68:a2:76:08:03:1a:34:02:ba:22:6f:c8:71:
02:69:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:35 2026 by rpki-client