Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: apipB8tayNawNC1AKsV8QObPK8ozppVINhf0PxGzLhc=
Subject key identifier: 34:25:C9:10:3E:87:3B:54:CC:C5:A1:9B:04:21:6D:CF:16:C2:E1:D8
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 01A0CDECA47C9DED092305DB2246F20EACC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0866
Signing time: Wed 23 Sep 2026 11:00:32 +0000
Manifest this update: Wed 23 Sep 2026 11:00:32 +0000
Manifest next update: Thu 24 Sep 2026 11:00:32 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: hM1pCE6ZRnhBF5a6LoO/sckJxBVFfwgZLMylWhpojl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:a4:7c:9d:ed:09:23:05:db:22:46:f2:0e:ac:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Sep 23 11:00:32 2026 GMT
Not After : Sep 24 11:00:32 2026 GMT
Subject: CN=3425c9103e873b54ccc5a19b04216dcf16c2e1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:5a:0f:da:c3:a3:76:94:05:06:9f:f6:64:
56:19:e3:46:a0:2c:a3:c1:fc:93:33:ab:e3:dc:a0:
9e:d4:fa:e7:f2:23:da:65:6a:19:d7:30:b0:2b:1a:
d9:b0:35:fd:07:d9:1a:64:0a:73:a6:97:e0:46:51:
db:64:ce:03:6b:c4:94:c4:67:84:4c:b3:88:c1:6a:
e2:98:f3:8e:f2:25:f8:4c:62:12:f9:a3:a7:c1:e3:
bf:18:35:21:e7:bf:8d:53:e0:45:2e:24:60:fb:e6:
78:46:9f:b9:92:a7:3b:40:92:86:58:79:7e:6c:d0:
e2:86:d5:76:05:a5:13:8d:00:6d:98:7d:23:ed:f3:
ce:10:58:4f:60:98:ef:66:b9:ab:cf:c6:6c:44:1b:
8d:0a:f2:7c:5a:18:93:ed:7a:da:8e:4c:94:48:c4:
3c:75:f3:36:8a:90:a0:80:65:4c:30:09:2a:c5:d9:
7d:a0:75:3d:e0:85:8e:92:27:16:18:2c:28:47:ed:
33:c3:9c:57:cd:e9:e9:79:57:2c:0d:d2:1e:68:2d:
39:20:0d:c3:aa:3c:00:49:ed:bd:99:f6:4c:91:b4:
99:89:e3:c6:87:e5:b4:a3:4d:8a:3b:9c:4e:10:f7:
53:7e:e9:b5:5a:b6:f9:aa:36:41:2b:b6:83:0b:5a:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:C9:10:3E:87:3B:54:CC:C5:A1:9B:04:21:6D:CF:16:C2:E1:D8
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:ae:2c:24:e8:eb:66:fc:e0:a5:df:e6:22:73:7e:ba:b6:3a:
c4:62:6e:b5:6e:29:5a:a6:60:3d:66:d5:96:2a:04:67:88:92:
f2:f7:2b:95:b3:9c:a9:c5:f0:c9:20:60:2c:b7:7f:cb:86:de:
1b:45:54:87:67:b2:9b:17:90:28:fd:5b:9b:f3:88:d9:eb:4c:
55:93:97:00:4f:22:4c:9a:2a:8b:09:a0:3b:48:e0:1f:2b:cb:
01:50:f4:56:76:ea:08:78:b4:71:fe:bf:5b:d6:98:a3:76:ed:
89:5f:a2:fc:17:e2:a2:a7:9f:db:7b:ea:7d:51:6b:19:65:5e:
7d:4a:a9:ab:62:ef:cc:65:b2:59:f9:17:be:b1:5e:57:da:ba:
7c:66:8c:f8:56:92:84:5b:dc:76:2c:0d:3e:c8:56:15:c2:67:
38:b7:f4:09:45:64:bc:f0:92:0e:40:cb:cb:71:b1:ec:06:53:
69:ad:54:be:5a:e5:99:ed:b5:74:01:1c:12:4a:72:c2:4f:4c:
1d:25:7c:ef:44:96:78:71:16:f3:f3:bb:e5:e2:92:1d:c9:f9:
28:22:f4:bb:1c:30:eb:9b:d2:5d:05:d8:11:94:ab:1f:81:03:
05:4a:e6:a0:b9:aa:bd:83:16:c4:a2:63:8f:8e:66:dd:fb:c8:
79:63:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:20:24 2026 by rpki-client