
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
File: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft (raw, json)
Hash identifier: KqudG8odvx2t4SrSooQDjhfGMbKg8OHiAHcYaAT7CtE=
Subject key identifier: 8C:42:F7:CA:47:F5:C7:1C:50:B5:99:B6:5C:4E:DC:3A:46:42:AC:62
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Certificate issuer: /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial: 019F8F7F491EBF57FB4BF1791AB5B45E4E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:51 +0000
Manifest this update: Thu 23 Jul 2026 15:01:51 +0000
Manifest next update: Fri 24 Jul 2026 15:01:51 +0000
Files and hashes: 1: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl (hash: 0OfgFJo/7QCpd8cr4zLd22/APLjjTldcpK3SIEmBax0=)
2: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (hash: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:49:1e:bf:57:fb:4b:f1:79:1a:b5:b4:5e:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Validity
Not Before: Jul 23 15:01:51 2026 GMT
Not After : Jul 24 15:01:51 2026 GMT
Subject: CN=8c42f7ca47f5c71c50b599b65c4edc3a4642ac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:9e:4f:1c:26:23:53:81:b0:d1:b0:5b:0d:
1a:f7:c9:6e:dd:7a:f6:64:25:3c:b6:a9:a4:da:ca:
3d:64:5e:74:0a:75:7e:29:48:2f:e3:d4:65:6f:1c:
5a:72:10:80:39:85:3a:1f:99:11:0f:ce:f3:3b:3d:
1e:25:ff:72:a8:d4:f0:e6:0d:2e:9d:2f:38:fc:12:
31:12:92:29:b8:a2:e6:a6:69:08:6a:d2:db:fd:f0:
31:72:d4:6b:0a:4b:55:8d:27:91:f1:0d:1a:10:eb:
bb:6d:46:d7:a5:12:4c:af:dc:82:ed:97:0d:0b:ba:
55:e2:91:16:b3:9b:1b:db:ed:20:f5:f9:7e:f5:23:
1d:dd:55:e2:cd:b3:0b:ef:2a:0d:8b:20:9b:bf:11:
0b:84:ed:c1:26:82:1c:da:1a:58:af:16:08:35:94:
39:42:42:83:d0:32:2c:b1:04:74:a9:f3:d9:f2:93:
4c:da:83:53:3f:e4:f5:5e:49:d0:59:3b:bb:9f:f7:
e3:97:75:51:a3:2a:32:ab:c6:e2:9f:59:9b:28:c9:
c2:a3:6d:81:b2:07:86:0c:c3:49:60:b1:67:21:fd:
b0:48:b1:99:db:30:ff:84:50:3b:6a:7b:c1:8c:80:
58:64:2f:6f:ca:48:97:d6:ac:ff:a7:22:ce:7a:ba:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:F7:CA:47:F5:C7:1C:50:B5:99:B6:5C:4E:DC:3A:46:42:AC:62
X509v3 Authority Key Identifier:
keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:92:54:bd:b1:35:91:e4:f9:72:ed:97:b4:16:a5:4c:98:02:
a8:2f:b9:8a:fe:85:58:d2:1c:26:07:6a:4a:ed:d3:af:0a:31:
c2:b0:96:86:a0:19:c4:67:e0:7e:90:6d:03:8b:b2:9c:8f:17:
c9:82:b1:6c:70:28:36:00:b7:2a:ef:5b:bc:04:08:99:b4:23:
3d:14:87:b7:24:39:53:ce:b9:96:54:52:28:16:26:fe:d6:9e:
4f:d7:f2:cc:09:d4:c5:09:5b:c9:93:92:01:ef:01:a0:93:b6:
46:6e:6b:d9:35:da:05:df:ff:6f:d2:3b:89:c3:f2:06:02:37:
72:0e:e8:43:7d:af:ba:e0:9b:40:e5:84:5f:61:8a:05:fb:e6:
d7:ff:e3:a0:63:9d:30:3d:c2:f6:a1:e4:75:bb:4b:94:18:93:
6d:f3:a6:94:82:72:8d:49:e1:45:19:6c:54:1d:4c:d8:95:56:
15:68:d8:03:4f:5d:c4:38:df:9e:1f:2b:de:3f:cb:b1:0b:67:
21:dc:7f:30:e2:75:41:5b:c6:cf:c6:9f:cc:a9:7c:76:8a:f5:
b9:bc:32:80:3e:d5:48:07:e5:d5:5b:d1:cb:09:70:98:4d:3c:
59:af:e7:7a:cc:08:41:fe:48:71:51:7a:2b:24:e8:f8:9c:5a:
4e:b4:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:10 2026 by rpki-client