Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: hCPikvqJ+cxv8Icwe7HDTcSZE3tbxqR+m+OaZOyewwI=
Subject key identifier: F8:42:F9:C2:22:F6:AE:FA:18:91:82:C9:C7:F6:F3:2C:68:D5:90:29
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01A104DBD45E5ECBA333EA8288B981DC8DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 17B4
Signing time: Sun 04 Oct 2026 03:01:17 +0000
Manifest this update: Sun 04 Oct 2026 03:01:17 +0000
Manifest next update: Mon 05 Oct 2026 03:01:17 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: jO0rE3VtEEMAqXapj3XlUNzjiWpvgSq1odHVw0YTkVE=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:d4:5e:5e:cb:a3:33:ea:82:88:b9:81:dc:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Oct 4 03:01:17 2026 GMT
Not After : Oct 5 03:01:17 2026 GMT
Subject: CN=f842f9c222f6aefa189182c9c7f6f32c68d59029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:de:af:10:f7:c7:a0:44:0c:44:6f:53:f5:
9f:83:70:75:b9:89:49:61:1c:81:06:31:9c:bc:ff:
32:f0:f6:46:4f:73:48:76:ad:3a:7a:0b:aa:6e:c4:
64:e9:16:86:3c:9c:c2:58:15:85:a5:fc:da:a8:0c:
86:4b:86:12:23:62:0a:5c:80:03:82:ab:4f:a3:ea:
e2:a4:e2:c0:fa:9c:59:db:c6:f2:e0:26:d6:7f:53:
6d:16:f5:01:15:28:b5:8b:ae:47:a5:89:79:d3:e8:
fe:d9:6f:c4:c2:ba:b9:14:cf:48:9c:a7:c4:df:02:
a0:2c:96:6c:07:1b:ab:48:de:94:db:9e:4e:2d:c1:
dc:fd:97:5f:a0:40:fd:75:51:ab:60:e0:35:2d:61:
e5:69:0e:d4:b1:16:bb:84:15:54:20:ba:fd:34:41:
fa:eb:45:5c:94:12:1f:95:41:9d:03:76:c4:d2:f1:
de:f2:b4:75:aa:48:c8:fc:9e:d6:31:85:c4:2c:ca:
e7:78:8d:6e:79:d5:14:6e:55:f1:b6:27:15:0b:2a:
1e:12:c0:81:6c:1d:39:82:14:aa:ca:b4:01:43:33:
01:7e:bf:e9:3d:dc:95:c6:1c:31:25:9d:1b:02:bb:
e5:ac:87:b6:cd:0d:20:2d:ea:62:c1:68:ab:a3:c9:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:42:F9:C2:22:F6:AE:FA:18:91:82:C9:C7:F6:F3:2C:68:D5:90:29
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d4:01:49:dc:4a:78:73:4e:19:6d:28:98:12:74:13:48:fd:
f5:23:64:0b:14:81:c9:4e:4a:30:88:7d:05:15:0c:45:8a:1f:
28:2e:a0:eb:7a:14:d5:50:aa:07:5e:a1:d3:88:0f:6a:82:d8:
62:52:09:aa:cc:93:ce:84:bf:19:44:1f:e1:16:63:91:9c:48:
9e:77:c7:d4:57:c5:8b:16:ad:0b:81:30:3a:ee:71:0e:ae:0f:
19:3b:47:fe:75:83:14:bc:0d:dc:95:21:a4:8d:0f:0a:7a:7b:
65:2f:59:8a:f1:b1:ca:93:fb:4b:4e:8a:d1:ed:36:37:db:9a:
76:d4:8d:d6:72:a7:ec:52:9e:a7:a1:8c:14:59:99:5e:a2:4d:
11:b8:92:9b:ed:b7:ed:c6:a4:de:2e:84:30:f5:90:04:c1:85:
30:4f:01:6c:45:b3:b0:b5:c2:26:3c:44:e0:3a:bf:05:b7:04:
f8:01:91:65:d5:5b:f9:d3:e4:fc:10:dc:03:97:25:d3:24:28:
ac:53:e4:21:48:82:43:08:b0:c8:8d:91:fe:37:48:1c:db:93:
26:3b:10:11:5e:34:58:f2:b8:99:95:e0:d2:e1:ef:59:9d:cd:
95:b0:f7:b0:b7:6a:b8:75:14:8d:6e:32:4a:01:8c:ff:10:ce:
35:52:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:11:56 2026 by rpki-client