Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: MaeXd6McIMDLXRO8jQBoAn/H0HzcOLB6E4dg+WxMn7o=
Subject key identifier: 03:D1:D9:93:F0:5D:EC:14:14:93:D8:15:87:C6:C2:F4:9D:11:F5:25
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 01A0D0EDD94D40A3B0B38EAABDD278DD3B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0DC5
Signing time: Thu 24 Sep 2026 01:00:43 +0000
Manifest this update: Thu 24 Sep 2026 01:00:43 +0000
Manifest next update: Fri 25 Sep 2026 01:00:43 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: jVF25AZX1suSIGZKkC/mcMdYSnYnkmeWfhnkMF1ulec=)
2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=)
3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:d9:4d:40:a3:b0:b3:8e:aa:bd:d2:78:dd:3b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Sep 24 01:00:43 2026 GMT
Not After : Sep 25 01:00:43 2026 GMT
Subject: CN=03d1d993f05dec141493d81587c6c2f49d11f525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:86:64:72:88:c9:93:4a:29:3b:85:bd:8a:2d:
05:ab:22:9c:a2:e5:b9:ab:80:5d:d1:22:30:ab:18:
43:c5:b9:b5:0a:40:c8:4c:c3:38:5b:49:54:1d:2a:
3f:61:5b:98:96:ec:35:e3:51:0b:65:b1:ae:d2:75:
67:95:a8:2f:55:cf:79:04:f4:f8:60:b2:75:78:7d:
93:2d:6e:7c:f5:22:7b:99:d5:5d:90:6d:a8:8b:15:
62:56:3a:29:b9:b2:bd:24:9e:0d:c3:4e:b2:86:f2:
ee:8f:d6:53:61:1d:3e:b4:0d:03:85:6c:df:22:40:
2e:15:44:f1:32:b3:57:88:a1:67:ea:05:f9:00:73:
12:50:fc:b1:5a:c7:f2:ee:c9:a1:58:29:38:f5:d8:
51:e4:a7:88:51:cd:f2:0a:81:cd:4a:26:ee:ce:75:
b1:e1:44:1f:44:88:d1:e3:77:6f:97:c4:8d:e2:19:
22:0e:ef:81:b1:78:fb:14:2b:4c:b8:76:13:6b:2d:
2a:68:e1:6e:76:ab:59:94:9a:be:50:a1:b5:ab:aa:
21:f0:af:52:fd:92:16:69:d9:f1:cf:2a:1c:fd:27:
52:f4:29:d6:13:44:24:fe:89:89:69:61:b8:ad:f4:
cc:6c:c3:2b:e9:29:11:78:06:9f:0f:2e:c0:89:bd:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:D9:93:F0:5D:EC:14:14:93:D8:15:87:C6:C2:F4:9D:11:F5:25
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:99:74:75:fe:13:92:e0:54:49:1c:1d:cb:ad:91:b6:89:
1e:2e:e2:67:dc:d8:64:8e:30:53:0d:05:1c:7e:87:00:04:cc:
87:b5:45:d9:6e:19:54:57:0f:9c:a0:57:73:25:6b:a1:42:ee:
76:c3:79:a1:a0:67:00:35:bf:63:a5:77:9e:58:a0:3a:79:b8:
98:5a:4d:b9:46:d1:d4:1f:1d:8e:20:77:79:7f:c2:37:b3:dc:
66:85:a9:db:1d:47:e1:0c:82:91:fb:35:a7:48:c7:91:33:c7:
4e:46:93:f5:77:0b:8d:78:21:ee:f8:99:0e:f9:24:d2:c7:75:
69:13:0b:80:73:64:3d:76:82:a8:17:aa:3d:ef:c4:71:a9:2a:
f9:12:c3:16:6b:d7:73:e9:27:14:42:48:13:21:bd:4f:37:eb:
35:1b:32:df:1a:75:c7:97:c9:39:0e:0e:aa:c9:46:f4:8d:f0:
62:0d:e3:c8:ac:92:87:6d:c9:4a:aa:cb:45:8a:f6:cd:00:fd:
52:f6:38:29:e9:5a:4e:88:7f:0b:e7:8d:10:69:d3:e6:1a:0f:
a7:33:28:5b:36:3e:a6:74:6f:89:40:70:91:47:5d:86:ab:e1:
79:d4:22:fc:6a:a0:46:b8:cd:01:c2:e9:fc:81:f5:20:ba:1d:
73:eb:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:32:00 2026 by rpki-client