Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: R4mNtvRP0Q1ilia94lw3PggWe9a1mr8gvYapdhM1Is4=
Subject key identifier: F6:23:F2:8E:D6:50:26:9E:CB:E7:46:C1:72:21:D6:82:51:87:74:E5
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019E1D909FB57BB9F3A084EE50527C562E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0C5F
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: TfVR7vIWSkFvo9qAPUzdaqiy68H1Gv4YGjTFSKcDXLs=)
2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=)
3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9f:b5:7b:b9:f3:a0:84:ee:50:52:7c:56:2e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=f623f28ed650269ecbe746c17221d682518774e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:84:d2:33:b3:37:39:8c:61:04:6e:90:c2:
bc:fb:87:21:07:fe:37:01:c8:19:89:63:0b:e6:7a:
90:a5:1f:1d:f5:9e:c5:88:37:92:32:5c:66:25:e0:
6d:13:08:e4:8a:f2:ea:db:da:4d:a2:1a:24:dd:f1:
06:2e:7f:8e:e4:c6:d9:a0:b4:49:db:8a:16:70:73:
c2:03:6e:db:3d:7f:ca:d0:37:ad:91:2b:6e:30:66:
4e:4d:60:57:aa:aa:0e:f3:9c:0a:ef:3b:ae:7c:9c:
00:1c:20:93:24:64:13:96:3c:9d:b6:28:51:69:71:
61:de:21:66:43:01:40:ca:67:4f:b6:dc:55:22:02:
33:96:49:5b:70:67:4a:c8:fd:0b:96:b2:b5:8b:ae:
ed:d0:be:32:85:4f:8a:61:e8:ad:fc:90:dc:ed:6c:
01:ae:5d:d7:a2:08:75:2e:0a:aa:a3:03:eb:1b:b7:
4e:e9:14:78:c2:5b:9f:b4:46:d9:8e:3c:d4:31:3c:
d4:c2:8e:fe:45:74:af:e3:5d:00:77:85:0e:da:79:
af:d6:f5:26:a7:bf:c5:70:23:c2:bd:42:72:cc:4c:
3b:90:02:36:b6:3a:bd:14:0b:ee:40:4c:0d:94:e5:
a1:cd:e3:a1:b8:fd:f6:7d:d8:07:58:15:61:2e:ec:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:F2:8E:D6:50:26:9E:CB:E7:46:C1:72:21:D6:82:51:87:74:E5
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:84:21:9c:ca:f4:71:11:30:6d:cd:82:8f:a0:ce:24:34:
fc:c4:12:86:0c:57:08:eb:95:e5:e5:e4:23:77:87:a2:bd:56:
99:c2:ed:7f:82:40:29:63:1a:19:bf:40:bd:68:95:6c:23:50:
a2:e7:d5:90:8c:45:2f:60:9b:70:60:b4:2c:ad:e3:9d:cb:18:
81:5f:e0:aa:5c:17:79:80:59:1a:bf:20:c8:0e:7e:8f:37:fe:
3f:55:39:82:7c:2a:dc:1b:c1:04:50:e5:17:66:2c:54:b2:68:
3f:2c:f1:0f:a8:18:a3:36:e5:11:03:af:4a:56:7a:19:3c:a7:
65:98:0a:76:0a:5e:e9:19:36:51:43:f8:e5:c8:f7:0a:0b:34:
8e:1b:76:14:6d:20:f5:1e:46:2e:d8:98:ee:8b:d7:4d:60:4c:
c3:0d:6e:d7:fb:2c:e9:7b:79:75:95:f2:25:7f:ed:84:0f:b7:
ac:65:81:3f:4d:27:0b:21:3a:14:0b:05:c0:8d:01:be:05:92:
04:4e:86:b7:15:97:c0:d3:d2:e3:0f:59:91:5b:73:e3:4a:91:
99:00:d9:47:5a:ea:ff:9b:4e:2e:40:7e:b6:f5:b6:a3:97:f2:
de:20:32:44:d2:57:17:f5:e3:32:67:5c:7e:e5:17:05:d1:28:
44:e3:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:19 2026 by rpki-client