Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: mqPXUqzdwafQH6Ke94rvLr55Xj1M6HhOjJ99SSCLUQM=
Subject key identifier: A8:49:7C:C1:E1:84:57:21:14:47:A2:52:27:52:ED:DB:2A:8A:18:74
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 01A0D4CBAC8E7D62AEF751A3D58CA181E69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 068D
Signing time: Thu 24 Sep 2026 19:01:52 +0000
Manifest this update: Thu 24 Sep 2026 19:01:52 +0000
Manifest next update: Fri 25 Sep 2026 19:01:52 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: 4jw488OARZuKOOBWozYga8EUgvWDlo41qVg/QPdyksA=)
2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ac:8e:7d:62:ae:f7:51:a3:d5:8c:a1:81:e6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Sep 24 19:01:52 2026 GMT
Not After : Sep 25 19:01:52 2026 GMT
Subject: CN=a8497cc1e18457211447a2522752eddb2a8a1874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:95:bb:56:fa:bc:f8:49:99:f9:2e:f3:d4:
77:53:ac:84:c5:af:ac:0a:8c:2a:4a:ab:29:3e:db:
1c:cc:14:b6:9d:15:fd:61:74:dd:20:79:b1:36:f1:
12:c9:27:7d:b7:e7:97:53:70:0c:45:67:39:84:76:
75:08:ec:99:fd:94:e4:40:de:52:6d:51:b6:d7:85:
9b:21:e2:8b:38:94:72:02:cb:55:d9:29:1f:1c:88:
07:11:01:9a:74:62:fa:44:90:c8:33:d6:8d:74:18:
02:c3:fe:c5:52:d4:57:a3:ae:10:d9:98:ab:81:3d:
3a:40:38:08:50:52:d5:7b:fc:63:60:a0:fc:4c:48:
48:ec:c6:79:f4:37:86:87:48:09:6d:cc:6a:97:48:
20:1b:35:85:c4:d6:af:de:06:3f:d5:c9:a8:0c:ae:
d9:e5:83:91:83:96:62:d2:12:87:4a:1d:1f:9a:7f:
89:60:7c:41:e0:ea:98:c4:ba:ea:59:67:3c:43:f0:
23:b6:97:6d:84:07:da:ea:59:d8:84:45:2b:df:8e:
f8:50:22:9f:db:d6:37:0b:ea:f3:00:61:ca:13:34:
61:7a:bb:65:92:a9:f4:7f:54:bb:13:c9:6a:ff:6a:
6c:72:df:0e:05:61:ea:34:a3:5f:6e:46:40:35:6f:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:7C:C1:E1:84:57:21:14:47:A2:52:27:52:ED:DB:2A:8A:18:74
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:14:4e:a3:97:21:9c:90:3e:c5:d6:8b:03:53:af:03:84:
8b:77:de:4d:35:79:e5:de:88:30:9e:42:76:57:47:f3:00:7d:
f1:16:2e:3b:25:6d:ce:a5:45:e7:0d:a8:1c:1d:4b:1c:aa:a6:
26:bf:2b:54:b6:56:97:5c:34:58:31:fc:aa:cf:e3:0f:95:89:
44:90:d1:0a:0d:29:b4:0d:7d:a3:3b:5a:c3:ba:96:4b:d4:5b:
cc:6c:ab:54:31:1d:33:91:65:d3:9f:67:7e:5e:e9:7a:15:5e:
06:d9:03:87:e1:fe:d0:1b:d5:64:23:82:fa:8a:1e:d9:ca:33:
f4:fc:b6:52:90:25:c0:56:65:42:86:02:14:7d:bb:54:ae:40:
44:21:30:27:c3:dd:f8:94:1e:0e:15:f3:95:6e:26:17:89:83:
94:3d:29:63:e2:a6:9f:5a:f1:27:c5:b0:94:43:be:84:a9:29:
39:21:ff:b3:40:84:ca:2e:5f:d0:79:1f:56:0d:f4:5e:ce:86:
11:32:ea:1d:90:d7:ac:b4:51:ce:c0:cd:27:38:30:75:db:3f:
07:0b:98:e1:6a:ea:b5:04:37:43:6a:4c:15:2e:fb:e3:07:a2:
d3:7d:72:3b:15:6b:98:9e:d8:0f:08:15:31:59:85:0c:b3:b7:
91:d5:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:38 2026 by rpki-client