Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: dl66FF++tDal664T7f8owpspj/lOUbG/7R8HeLTuFkg=
Subject key identifier: E0:4B:9F:5E:15:1F:EE:AD:0C:47:3D:A1:06:8B:B5:67:5C:52:4E:61
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019E1F47CDFFA98C264673DEC951DBE78200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1634
Signing time: Wed 13 May 2026 03:00:59 +0000
Manifest this update: Wed 13 May 2026 03:00:59 +0000
Manifest next update: Thu 14 May 2026 03:00:59 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: LkGOohx7Da5mc/cOw+GzMW3nBJDvry9Ctq4RfbhlFNo=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:cd:ff:a9:8c:26:46:73:de:c9:51:db:e7:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: May 13 03:00:59 2026 GMT
Not After : May 14 03:00:59 2026 GMT
Subject: CN=e04b9f5e151feead0c473da1068bb5675c524e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:7c:77:1d:b8:cf:12:b8:99:af:00:55:75:
85:5a:08:26:a1:31:22:7d:e6:e6:fe:aa:82:bf:26:
c7:2b:30:1d:e4:72:05:8b:6a:72:4f:76:fe:65:0e:
1c:b2:85:f5:d1:e3:25:f0:39:e2:7b:e2:e2:38:95:
a4:5a:f6:71:b7:d0:f5:d3:57:f8:42:1f:f2:f4:05:
53:b0:b0:e1:36:d1:b3:95:5d:cd:45:77:fa:2b:a4:
c1:80:3d:d6:cf:92:a7:62:1a:b3:6c:d2:65:f8:5a:
87:da:67:5d:f1:d8:91:f2:3d:20:db:00:f9:8f:bc:
00:ea:0c:0c:be:06:93:a3:c4:ea:20:55:c7:c7:37:
8f:89:16:b1:33:f0:4d:ab:8a:35:80:da:e6:ec:04:
61:ba:b3:e4:de:1a:6c:b6:9f:e9:9e:83:06:88:ed:
ef:c2:12:fd:46:19:dd:4e:f2:ce:09:e9:68:3f:63:
9e:d3:2b:47:a1:44:c3:48:d5:1b:5d:86:4f:7e:e4:
0e:17:e8:08:50:d1:d9:19:65:1c:44:62:66:50:3a:
62:eb:4d:91:5e:79:c1:f2:85:d8:fa:13:88:27:82:
d9:58:1b:da:b8:eb:50:a8:45:f7:fe:7b:4a:08:aa:
00:e3:21:2c:18:bb:3c:a7:57:e7:db:97:8d:b1:da:
4e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:9F:5E:15:1F:EE:AD:0C:47:3D:A1:06:8B:B5:67:5C:52:4E:61
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:d4:55:89:61:66:ad:64:61:08:d7:ea:7c:8b:11:02:93:
d2:70:f1:68:7d:40:ce:86:a3:8b:4d:ef:73:ae:5e:eb:9c:1a:
15:06:c0:cb:00:de:e2:99:1b:1d:77:03:51:7a:80:cc:b3:c7:
f3:2b:bd:0e:ac:64:a7:bb:e7:ab:6e:01:8b:bf:7e:c0:e5:29:
e5:68:16:20:c6:b6:c5:c7:ce:67:2b:a7:33:b4:9e:e4:5b:1d:
33:f8:ed:e3:bd:41:12:ac:5a:10:e0:c2:bf:de:51:ba:ba:7e:
6a:7a:5a:13:46:dd:4c:89:a1:6e:c6:6d:f3:53:92:45:e2:40:
a9:35:92:ef:68:3c:45:76:52:93:77:28:e5:6a:c9:dc:31:11:
21:14:01:aa:b6:41:66:a6:8b:55:fe:9e:11:5f:05:12:b6:b9:
7b:63:a2:9f:50:58:a7:26:11:18:c4:5d:cf:02:23:5c:28:f9:
e7:26:da:89:de:02:45:93:e9:89:fe:9a:f9:23:e6:13:40:36:
cd:13:d6:07:66:94:fd:20:fa:e4:3c:84:f1:ff:11:a5:31:5b:
45:a9:15:2e:f7:87:7f:0e:20:e7:89:62:42:df:45:93:3c:d0:
cc:14:03:12:aa:d3:61:a9:70:4a:a4:58:57:12:35:ba:b5:9b:
ef:8a:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:47 2026 by rpki-client