Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier: g9Tnh0qtQiWOF7S7mXaYs1s5D1jIFOsjs4nCnohYD6w=
Subject key identifier: 5E:75:25:51:A2:F8:DC:96:9D:73:F0:2E:AC:B4:8E:0A:36:D7:7D:C9
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial: 019D2BF2F605134AD654DEC72B365F2F480D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 21:00:36 +0000
Manifest this update: Thu 26 Mar 2026 21:00:36 +0000
Manifest next update: Fri 27 Mar 2026 21:00:36 +0000
Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: AlbIAwdY7AabJdd2M0D4CigFUpp2UfGaTIBat0QBC4A=)
2: knQYsypbRhqwvEH3fTnKrdPWqWY.roa (hash: WNEtwLYJf9qeEVFV6iUsuz+sfad0kenK8BH3vda/2QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:f6:05:13:4a:d6:54:de:c7:2b:36:5f:2f:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Validity
Not Before: Mar 26 21:00:36 2026 GMT
Not After : Mar 27 21:00:36 2026 GMT
Subject: CN=5e752551a2f8dc969d73f02eacb48e0a36d77dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:3a:00:94:91:b5:f7:38:3e:6f:a2:3e:52:
4a:e1:83:4e:2e:5f:85:80:66:e4:f4:66:6f:f2:74:
3e:a1:0b:e5:5a:3d:5a:05:1c:a4:aa:98:d1:bb:97:
bf:8a:b3:e7:be:25:ee:8b:9f:41:4d:84:f8:eb:89:
36:86:07:76:c0:9c:7d:0b:a4:01:1c:ab:68:82:cf:
e6:5b:a6:b0:1e:3f:c4:a8:a8:73:ee:37:fd:fc:e9:
78:8c:ff:ca:6a:56:9e:14:31:1e:60:9c:c4:a0:66:
9a:ad:ae:d6:8d:96:43:d2:83:82:e9:3a:40:aa:f1:
b9:77:f2:06:5f:d5:c2:ef:6c:89:cd:73:14:e0:b8:
77:6a:b1:ce:ff:7c:e5:cc:e3:78:6c:49:0c:2f:68:
6a:c7:85:dc:32:4c:eb:e9:51:34:a5:2c:6a:da:95:
b6:40:0b:43:b3:d3:40:f8:59:9f:6f:fb:d0:35:69:
90:7c:5c:45:cd:a4:25:2e:60:ef:47:45:a6:d2:ff:
5c:91:b6:94:1f:5f:e3:a3:94:e2:9a:2f:31:01:4a:
4a:26:c3:20:90:ab:29:93:27:6e:5c:ee:73:41:78:
68:ed:c6:7a:5e:ff:6e:16:37:43:08:d8:c8:1d:6a:
fa:6b:8c:1e:c4:92:24:d2:d1:e7:97:aa:e5:73:37:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:25:51:A2:F8:DC:96:9D:73:F0:2E:AC:B4:8E:0A:36:D7:7D:C9
X509v3 Authority Key Identifier:
keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:34:d7:91:6f:f3:7a:4f:5b:0e:52:4e:e0:7b:73:c2:91:9c:
8c:13:66:12:72:11:d0:80:c2:1e:b7:11:fc:99:d6:ad:ba:fe:
85:e9:63:e9:5d:f3:d2:05:fd:59:52:58:5c:5c:60:ed:46:a1:
f2:83:ea:9d:b2:2d:ee:07:c4:ac:08:4f:f0:81:43:79:67:4f:
c4:81:e3:4e:e2:4c:c7:02:93:9a:af:05:ba:54:f9:ed:2b:a1:
07:0c:71:4c:a5:3d:c7:5a:13:ff:ee:cc:e1:a8:6a:bf:cf:ad:
88:7c:e9:c0:c0:ab:77:e8:9a:7e:88:b8:9c:77:c2:68:32:63:
21:09:57:cf:62:5f:f6:c7:c5:73:65:43:f5:d9:6e:b9:63:41:
e7:4d:d8:2e:a1:45:60:8a:ad:15:ec:62:7d:cb:4d:ea:cd:ee:
99:14:88:90:97:f3:5d:c4:3f:6a:f8:6e:43:84:15:e9:ad:ad:
1c:d3:c7:53:76:2c:38:9b:16:58:bd:57:49:db:1b:58:ae:75:
a6:9d:74:d3:12:eb:bc:85:88:b7:3d:4a:0e:b7:f2:c6:9d:b9:
38:1c:28:b4:e3:5d:39:6f:b3:db:80:f7:e5:7f:31:9b:b9:f8:
75:1d:90:e4:f4:91:34:2e:f7:c3:a0:55:76:c2:32:cf:30:b9:
c1:1c:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:06 2026 by rpki-client