Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: s1EtnPS/MH1Kek6dG5/mbLIM4MkJ1Il7afLHjdPjMxg=
Subject key identifier: 57:9E:67:C1:B7:23:01:FE:CD:AF:D6:F3:AF:1F:58:E7:C9:69:1F:46
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 01A0D012D35039B86AAD15F6CDEEAA1FF591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 0902
Signing time: Wed 23 Sep 2026 21:01:29 +0000
Manifest this update: Wed 23 Sep 2026 21:01:29 +0000
Manifest next update: Thu 24 Sep 2026 21:01:29 +0000
Files and hashes: 1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: D4hCJQOv43/LI7gp49qtlt4qJBFJY8pMRepcvgU7Z/s=)
2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:d3:50:39:b8:6a:ad:15:f6:cd:ee:aa:1f:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Sep 23 21:01:29 2026 GMT
Not After : Sep 24 21:01:29 2026 GMT
Subject: CN=579e67c1b72301fecdafd6f3af1f58e7c9691f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:eb:60:00:07:04:fb:1b:be:26:53:20:70:
19:65:03:3f:ef:63:91:b9:18:dd:62:59:99:55:10:
5c:cc:57:de:3e:e9:25:a6:da:04:73:01:9e:cf:33:
44:9e:d0:fe:e6:43:e8:4a:11:96:bb:be:43:40:16:
ea:47:d4:5e:fa:4b:ff:e4:b0:64:8b:25:f8:f5:e9:
6f:0d:b7:80:2a:fa:e8:c0:08:ce:75:53:d7:64:47:
29:fb:4b:bd:a0:c5:53:90:68:79:f5:23:dd:07:44:
91:0b:9e:f3:9d:f0:be:c3:44:bc:91:24:7a:31:47:
31:2e:50:39:c8:47:cc:2a:83:d4:76:05:25:ef:70:
6a:5b:78:f8:41:62:20:b8:0d:fc:93:b1:42:45:10:
34:2a:78:87:bf:e1:64:65:4f:8b:82:09:83:de:56:
75:f7:f6:e7:fe:61:d4:8e:fe:c7:d2:7f:aa:c4:ba:
1d:86:5c:85:1d:40:2c:1c:54:0d:6a:c5:8f:f4:6c:
3c:2a:a1:8c:53:46:5c:d6:d0:c5:04:c2:6a:98:8e:
ab:42:5d:c2:1b:fc:5a:48:27:ab:28:ba:41:b8:e2:
54:c1:78:23:1d:3c:69:9f:83:a3:df:fd:fa:25:c6:
ea:be:70:64:8f:a6:96:bb:68:9c:90:10:b4:3f:d7:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9E:67:C1:B7:23:01:FE:CD:AF:D6:F3:AF:1F:58:E7:C9:69:1F:46
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:06:87:f9:57:c9:91:cb:21:bc:91:cd:34:4c:3e:aa:46:db:
21:68:39:15:a4:11:a9:e4:c0:12:6e:2c:35:35:46:e5:b5:82:
0f:fe:dc:46:a3:0d:1c:85:a0:61:99:bb:5e:1e:ed:b9:b8:0b:
fb:52:d3:ba:61:64:61:d2:f6:03:16:ab:d7:ab:68:cb:0a:ba:
e4:45:f0:71:e7:82:72:40:cf:7a:9a:c9:20:e0:c2:17:e9:45:
0a:94:66:5d:46:c6:73:34:63:07:9c:22:73:35:b0:33:39:4b:
b8:37:23:85:82:b1:22:49:b3:e4:77:b2:43:37:b3:00:9f:77:
5e:4b:29:88:8d:1d:f1:96:86:ad:bd:e7:44:f4:23:ae:b1:78:
33:ff:44:a4:d1:91:fe:00:a3:b3:38:38:d7:4a:db:82:d5:1d:
08:ac:30:3e:b5:80:4a:30:08:b6:9d:58:b5:50:18:0c:9d:ca:
50:6e:11:b4:42:ba:c8:26:58:1e:88:ac:cd:44:97:a0:58:54:
c3:fa:e9:45:68:4e:c0:a6:da:35:06:6b:f2:08:a3:4a:ce:5b:
00:dc:dc:5d:9d:af:57:01:b9:dc:7e:63:37:5f:b8:25:57:5b:
12:91:dd:92:39:0d:ea:2e:49:d9:91:4f:a6:48:90:ed:aa:2b:
d4:e6:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:41 2026 by rpki-client