Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: K018YOx3MvJ+V2z0hwM9PGK6kxdCnsh3j9wWztUEhlM=
Subject key identifier: 21:AA:09:1B:7A:B3:A5:FE:3D:B4:CC:5A:B6:EC:92:2F:41:91:7F:FF
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019D2A04C56C507A9DF7F4239EDB666ACBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 15B5
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: xoB7Uws3KlB6dH1OrYlG9VQ9UkxtvWMETjouqa8LENw=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c5:6c:50:7a:9d:f7:f4:23:9e:db:66:6a:cb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=21aa091b7ab3a5fe3db4cc5ab6ec922f41917fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:f8:73:91:4f:a5:b4:74:91:61:0e:71:02:
b9:df:9b:87:36:60:4d:8d:f1:8f:fd:5a:0e:0a:2b:
93:16:a0:f3:3c:d9:f1:77:2d:7d:dc:13:e8:5e:0c:
92:71:e9:9f:41:7b:78:41:b3:a3:e0:b2:3f:a7:c3:
fc:35:c2:28:1f:05:d5:21:00:16:d2:ea:b9:1e:64:
0c:3b:33:6a:3c:72:14:96:cd:c1:a0:7f:59:83:99:
1f:d7:cf:58:05:7f:e9:7f:99:60:c6:09:88:56:99:
61:af:11:04:d5:30:c4:32:f8:8a:f6:d4:75:b5:6a:
b8:7b:fb:71:65:6e:82:d6:88:1d:ea:63:0e:6b:de:
8a:0a:be:1d:b9:e9:77:f7:30:5e:a2:60:7d:67:58:
7c:0e:9d:17:11:a0:01:3b:67:08:22:39:2d:93:4c:
53:6b:fe:5b:a1:73:73:73:3d:0f:e3:6a:cd:92:14:
ae:6d:a4:a1:81:1f:37:d5:cd:04:95:f3:13:c3:82:
56:86:e7:47:7f:17:bf:b1:60:d6:ca:c8:38:aa:e9:
14:6b:bd:95:bd:7c:cf:05:7f:d8:77:fc:db:a9:53:
04:b2:76:69:7c:e9:bf:a1:59:41:4d:9d:d6:ac:b4:
cf:42:c4:07:2f:a0:44:e6:a4:00:47:29:76:d7:72:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:09:1B:7A:B3:A5:FE:3D:B4:CC:5A:B6:EC:92:2F:41:91:7F:FF
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9f:28:ec:78:82:ff:f9:64:8e:a4:37:fb:9c:0f:f3:97:6f:
fb:85:cb:2b:22:25:29:49:2d:93:8a:7b:ae:4a:a4:b6:7f:42:
77:f2:3d:f6:3a:88:48:2a:f4:de:0b:9d:d8:34:78:f9:29:3a:
fa:1d:c3:49:a5:62:69:1f:c4:7f:8f:34:78:6a:d7:e3:7a:34:
8b:a1:33:e5:91:07:f7:ea:95:9f:98:b0:a2:95:e1:52:5d:1a:
0f:04:91:6b:8e:07:e3:00:e1:97:f0:3a:88:e3:b5:22:2d:74:
09:22:fe:22:a3:b6:af:89:55:4e:09:2d:c8:37:1f:0c:0f:cb:
4f:5a:b5:45:30:11:7a:e8:c5:7c:15:41:7f:34:38:fb:83:97:
2b:a5:20:b1:e6:31:d9:af:94:9e:1a:97:20:12:b5:9b:e6:58:
79:63:47:eb:93:24:6b:3a:87:29:26:a4:11:70:16:2c:35:72:
b8:77:57:4e:99:de:f0:12:33:c5:83:43:2f:7b:f0:df:95:91:
da:54:75:1b:bf:a4:52:b1:ff:3b:ca:c5:35:ad:7d:a5:04:b5:
58:13:b7:00:93:32:a0:e5:6f:39:3b:45:75:f6:94:76:69:7b:
2b:8e:ff:5e:f5:c4:c1:aa:b2:95:5b:be:85:00:68:21:be:9a:
e7:05:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:14 2026 by rpki-client