Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier: 6uj1XWGKeBui74pjiUujY6ezo7jhxcmGr7yaCtMWw0k=
Subject key identifier: 27:AF:4F:85:13:F2:8A:C5:04:7C:AE:43:C7:98:46:32:AA:CB:24:A9
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial: 019D27E075B620BC96EA81BD95FD2AC838E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number: 1740
Signing time: Thu 26 Mar 2026 02:01:54 +0000
Manifest this update: Thu 26 Mar 2026 02:01:54 +0000
Manifest next update: Fri 27 Mar 2026 02:01:54 +0000
Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: Lip/joiLuft00J+KvGH5JPpIFOvSfkt+xTsFZbJit68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:75:b6:20:bc:96:ea:81:bd:95:fd:2a:c8:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Validity
Not Before: Mar 26 02:01:54 2026 GMT
Not After : Mar 27 02:01:54 2026 GMT
Subject: CN=27af4f8513f28ac5047cae43c7984632aacb24a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:66:ea:14:23:2d:a1:b6:53:96:39:35:8f:
6f:00:7f:7f:88:9f:df:ec:ee:2e:16:31:75:ae:25:
0c:c5:9c:82:75:91:cb:a1:59:05:09:6b:84:61:99:
de:1e:5f:1a:91:65:e3:a6:70:9c:e9:4a:70:be:ba:
40:1a:9d:d0:ca:a2:f8:25:69:e0:87:41:b0:ea:e2:
97:61:f3:39:8e:3d:1d:ff:5d:d5:8c:66:e7:40:9e:
af:d8:19:6f:e5:e3:5e:e7:07:8b:d7:c0:28:bc:58:
14:7f:ec:8a:c4:48:dc:00:85:b7:76:47:71:7e:fa:
27:45:9c:0f:18:bd:78:c4:50:77:2b:77:1f:bf:5d:
7a:26:35:79:97:cc:f0:10:bd:fb:86:95:9f:95:41:
4b:c9:6e:83:a3:5c:26:85:80:8e:5c:5b:80:01:cb:
49:f3:10:dd:f3:82:df:fe:74:f7:29:ba:a7:fc:e2:
04:39:63:af:2b:0e:8b:99:e0:63:bf:09:0a:7e:43:
66:d3:fc:31:25:a6:69:c1:a6:5f:1c:34:77:d8:db:
cc:8c:77:3f:d3:71:fe:e5:7b:4c:b6:51:9f:90:4c:
6e:9c:b5:44:7a:fc:d9:59:74:9e:23:0d:e8:5e:bf:
c7:e9:53:e8:9d:30:e3:2e:af:9e:a0:ef:8f:a8:8f:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:4F:85:13:F2:8A:C5:04:7C:AE:43:C7:98:46:32:AA:CB:24:A9
X509v3 Authority Key Identifier:
keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:14:a8:b1:4f:1e:b5:38:ba:a7:00:59:81:10:95:c5:b9:
90:eb:05:76:8b:8a:7f:da:1b:f5:65:5d:26:ac:71:a9:ee:2d:
91:d9:bb:0c:c8:6a:eb:6f:15:6b:f9:8f:a9:6f:69:69:3e:ee:
7b:31:34:54:fb:17:ca:d6:22:1f:4f:c6:7f:fd:50:83:d8:cd:
51:63:1a:7f:82:35:dc:a7:70:39:48:05:2f:fc:b0:0f:3c:df:
a7:62:f3:a5:c5:20:3d:03:ed:3d:f1:c2:9d:98:fc:c3:c1:61:
ca:f8:48:ac:e1:e1:49:24:94:c6:d3:ed:ec:ec:28:09:79:78:
23:4f:7e:ce:75:00:32:32:a2:1b:e4:42:e9:f0:ab:18:87:53:
5d:49:e1:df:2e:19:6b:4a:71:93:9b:67:8c:59:fb:a8:2d:47:
89:b1:e0:1c:c1:72:57:25:ff:a1:7d:66:59:92:f8:44:77:35:
4c:4a:e9:06:65:d2:e7:59:4a:1f:7a:93:a3:9c:05:39:d2:ed:
4c:0f:3e:e8:9b:0c:16:8b:74:53:e0:f3:70:ae:4f:38:a5:18:
97:35:f8:e9:1c:e6:cf:6e:aa:1b:05:3b:b6:ad:c6:09:82:7c:
7c:2e:8f:eb:cd:63:06:8e:d4:8e:40:00:e2:de:ed:c3:24:6f:
b8:7b:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:33 2026 by rpki-client