Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier: LKwgKAdsTruDGw+QrxpoqCsbW69XMEvAfXfz2VrteLk=
Subject key identifier: 85:9C:FD:56:53:12:A7:5D:D2:A6:6C:E7:8E:E5:40:8C:5C:79:FD:29
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 01A10324F8A26B2ADE65AF1D44000282881A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number: 0CD0
Signing time: Sat 03 Oct 2026 19:01:56 +0000
Manifest this update: Sat 03 Oct 2026 19:01:56 +0000
Manifest next update: Sun 04 Oct 2026 19:01:56 +0000
Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: qI6LnnNZ+dGRCLiYZPkfnJYw0CprTwz28HzGE1unxlA=)
2: 7B8O0Mnyyh2qZkey3_nlrdE6F1I.roa (hash: uMXq6RM9bsi7csBoXXzVYWtOjoiaJPfzZD+xorWCev0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:f8:a2:6b:2a:de:65:af:1d:44:00:02:82:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: Oct 3 19:01:56 2026 GMT
Not After : Oct 4 19:01:56 2026 GMT
Subject: CN=859cfd565312a75dd2a66ce78ee5408c5c79fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:3e:25:39:40:5a:3b:5b:c3:24:3c:57:1b:
6a:ea:0c:47:da:ad:d9:70:db:e4:57:74:aa:62:0d:
79:d2:70:a0:6b:2c:67:95:ba:cc:8d:d5:3b:9d:44:
40:37:12:6b:37:d6:a2:e2:9b:e2:6a:98:7f:7c:59:
bc:35:b1:f1:6a:d6:92:1f:74:c3:79:59:d7:0b:b1:
11:9b:aa:da:aa:d6:1d:69:79:8e:7a:29:79:d3:ed:
05:56:ea:a8:28:7c:eb:ed:16:96:d1:ba:df:c0:2c:
c4:8d:2e:c6:3e:ba:58:ea:ef:47:c1:ca:c0:8a:90:
5f:c1:c9:46:cc:4d:34:6b:e0:fd:9f:11:b1:0f:46:
2c:26:01:33:89:de:22:fc:37:48:06:14:6c:64:f5:
38:85:df:ca:6e:3d:16:b7:78:dc:cb:ba:81:2a:cd:
e3:16:a8:6a:d3:c2:bb:f8:d8:8e:5f:16:81:8e:0a:
ca:10:d9:3e:b0:96:ba:fc:b0:a6:3b:08:bf:41:7b:
1e:c7:2f:79:82:a3:25:a3:ee:dd:20:f4:66:39:8d:
e0:9d:b4:7b:83:6e:b7:04:60:41:cb:f7:84:4c:25:
ff:77:22:2a:a5:fd:5a:b0:71:88:c4:fc:68:a1:63:
01:66:63:39:d1:76:de:4a:59:77:dd:2e:bf:cd:a9:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:FD:56:53:12:A7:5D:D2:A6:6C:E7:8E:E5:40:8C:5C:79:FD:29
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e9:99:f2:9d:8a:e7:5e:2b:c8:e9:fe:71:97:e0:19:99:94:
b0:5e:3b:7e:7e:bc:1b:0b:15:19:c1:fc:3f:4d:4c:87:e0:15:
34:62:1e:fc:79:c3:14:e4:63:6b:c5:e9:d8:e2:7a:e5:ab:15:
e6:cd:7a:c2:2e:62:db:13:79:af:7e:80:cd:dc:9e:45:df:8c:
20:19:33:9f:f0:09:0d:34:b3:fa:d5:f2:24:a4:f4:2f:bd:90:
90:49:75:ff:45:17:ac:72:c5:a4:f1:cd:cc:af:43:38:41:71:
1c:d6:31:4b:39:e4:30:b2:b1:ab:66:3f:4a:ca:c2:ce:64:f2:
55:e3:96:b8:5a:97:d7:77:08:ff:93:28:0d:34:42:3c:9c:a3:
c8:1d:82:fe:80:f2:f9:e8:ea:59:8f:3c:95:5f:53:63:82:a4:
b0:e2:85:3f:c8:0d:61:89:f6:bc:26:58:e9:5a:23:32:34:b6:
35:1f:b2:d1:ee:23:70:e6:33:ab:ae:89:55:01:92:dd:cc:bd:
50:05:82:19:3f:11:d0:7f:cb:d1:09:59:0d:a9:ce:80:97:cb:
e6:70:c8:a9:dc:4e:56:cf:e8:96:f1:67:2b:b5:3d:5e:f0:d3:
78:d8:b6:df:7b:d5:b0:8a:16:22:f6:5a:55:77:99:ba:ca:3a:
24:2e:6e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDJPiiayreZa8dRAACgogaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzc3M2MyMGFjOGU0MDkzZGY2MmJiYjg3MmNhZmNkYjY4
YjU1ZGMwHhcNMjYxMDAzMTkwMTU2WhcNMjYxMDA0MTkwMTU2WjAzMTEwLwYDVQQD
Eyg4NTljZmQ1NjUzMTJhNzVkZDJhNjZjZTc4ZWU1NDA4YzVjNzlmZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xc+JTlAWjtbwyQ8Vxtq6gxH2q3Z
cNvkV3SqYg150nCgayxnlbrMjdU7nURANxJrN9ai4pviaph/fFm8NbHxataSH3TD
eVnXC7ERm6raqtYdaXmOeil50+0FVuqoKHzr7RaW0brfwCzEjS7GPrpY6u9HwcrA
ipBfwclGzE00a+D9nxGxD0YsJgEzid4i/DdIBhRsZPU4hd/Kbj0Wt3jcy7qBKs3j
Fqhq08K7+NiOXxaBjgrKENk+sJa6/LCmOwi/QXsexy95gqMlo+7dIPRmOY3gnbR7
g263BGBBy/eETCX/dyIqpf1asHGIxPxooWMBZmM50XbeSll33S6/zanFjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWc/VZTEqdd0qZs547lQIxcef0pMB8GA1UdIwQY
MBaAFNHHc8IKyOQJPfYru4csr822i1XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTkt
ODg1NmM2NWZlMTgyLzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTktODg1NmM2NWZlMTgy
LzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+mZ8p2K
514ryOn+cZfgGZmUsF47fn68GwsVGcH8P01Mh+AVNGIe/HnDFORja8Xp2OJ65asV
5s16wi5i2xN5r36AzdyeRd+MIBkzn/AJDTSz+tXyJKT0L72QkEl1/0UXrHLFpPHN
zK9DOEFxHNYxSznkMLKxq2Y/SsrCzmTyVeOWuFqX13cI/5MoDTRCPJyjyB2C/oDy
+ejqWY88lV9TY4KksOKFP8gNYYn2vCZY6VojMjS2NR+y0e4jcOYzq66JVQGS3cy9
UAWCGT8R0H/L0QlZDanOgJfL5nDIqdxOVs/olvFnK7U9XvDTeNi233vVsIoWIvZa
VXeZuso6JC5uSQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:36:07 2026 by rpki-client