Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: ZfdHuU7KY6p9VohP8pgi6ddgZIJvs9G/uVZRYpZWnhk=
Subject key identifier: 8F:DC:87:D6:3E:D1:14:71:1B:29:EC:FD:C0:1A:3D:90:0F:FE:07:39
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 019D284D7744DFE6378EA3CF68BC1CDBE04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 04A6
Signing time: Thu 26 Mar 2026 04:00:58 +0000
Manifest this update: Thu 26 Mar 2026 04:00:58 +0000
Manifest next update: Fri 27 Mar 2026 04:00:58 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: Tg6R4xdooIZhWXbCMb+GuKeh1CRcfpTHr0NdQayTV+M=)
2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:77:44:df:e6:37:8e:a3:cf:68:bc:1c:db:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Mar 26 04:00:58 2026 GMT
Not After : Mar 27 04:00:58 2026 GMT
Subject: CN=8fdc87d63ed114711b29ecfdc01a3d900ffe0739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:75:c6:ba:6c:10:4e:02:18:09:23:17:c6:
0c:81:d3:86:eb:a6:5a:fc:d0:f1:7b:4f:c9:35:d7:
48:a8:61:f4:12:55:40:16:ce:9e:f2:1c:88:5c:f4:
fc:b2:8c:fb:65:2f:f0:6b:ff:80:71:7c:d4:36:0e:
88:9d:1b:24:09:38:0f:b9:c2:24:96:25:27:c7:21:
e7:ec:59:8e:9e:d7:50:52:7e:27:c9:99:8a:7d:21:
0d:8d:97:81:1d:49:d0:2b:16:8c:65:da:6a:d1:0a:
76:c6:5e:2d:5d:fa:48:8d:5a:c6:42:8d:c1:3a:93:
9c:c9:62:96:a7:e3:46:df:f4:f1:94:13:7f:e2:3b:
66:2e:08:b4:b6:9e:f3:7e:7c:2d:12:a5:50:57:24:
2b:9f:42:90:d0:27:58:95:51:e6:bf:87:86:aa:c2:
ea:02:8c:fa:83:24:52:a3:d1:84:34:ac:8e:74:54:
97:43:1f:d5:0c:e8:23:9d:4f:34:2f:88:75:2e:2c:
c4:68:9c:33:02:aa:53:6a:3f:89:78:3c:ca:f9:ed:
67:91:4b:37:f1:42:f4:72:1d:3b:c5:78:07:5d:23:
80:cd:c6:4a:9e:14:53:97:dd:94:64:2d:2d:37:7a:
3f:dd:07:49:a7:81:98:b7:07:79:bc:3b:cc:2e:71:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:87:D6:3E:D1:14:71:1B:29:EC:FD:C0:1A:3D:90:0F:FE:07:39
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:90:fd:26:cf:2a:aa:5e:53:da:25:74:06:17:0d:2b:76:
df:47:e6:93:1e:05:21:6b:fa:88:97:50:a7:af:5b:3b:d8:f0:
89:e9:fb:ec:4b:f6:24:35:fa:4c:55:23:47:22:0e:8b:f0:97:
34:18:82:8d:9e:78:aa:3b:79:11:0c:05:b5:ec:d0:51:31:dd:
9d:3b:4d:84:ba:47:bb:2d:fa:ce:d2:0e:f7:33:b3:62:96:ad:
80:5d:47:e6:88:f8:ba:a5:de:a5:99:a3:be:90:5e:a7:bb:cd:
90:13:7e:a4:4d:30:7d:38:70:97:4a:34:77:e3:18:1d:14:4c:
98:ad:56:6a:c2:c4:e2:20:ef:19:0c:0b:cc:bb:e5:53:4c:52:
33:95:a8:57:dd:10:72:b3:d6:48:46:2c:29:d7:85:f5:2d:16:
d3:a2:2e:73:50:73:5a:a3:78:c3:c7:f6:d8:d2:ff:60:a3:2e:
40:f4:47:59:eb:9e:d7:43:19:b1:1e:cb:eb:69:38:23:c5:07:
84:25:34:ba:d3:ef:a9:22:72:b0:fe:bb:1d:ab:a3:bb:b3:d5:
10:4d:fe:c3:2b:a3:f8:16:a5:e6:22:5f:54:bc:ec:14:65:3f:
fa:2f:3a:ab:6a:70:e5:95:40:e1:80:27:eb:45:ce:9f:0f:9c:
38:57:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:49 2026 by rpki-client