Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: 7+Ceq5ylOnkdckkWjC8brBIJ5lQAcUbSDvIYrvYAMuM=
Subject key identifier: 0D:CB:63:72:03:DC:0C:57:38:16:A6:A9:AB:5D:EC:85:50:7A:13:CA
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 019E1D90202CD42E1E2CCC41CF0D32CFA26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 0525
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: ZRH5rIyJvTrcfJ0/YJUD3Dho9ML3cRjpz8So9JWc4SM=)
2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:20:2c:d4:2e:1e:2c:cc:41:cf:0d:32:cf:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=0dcb637203dc0c573816a6a9ab5dec85507a13ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:eb:be:8d:df:8c:d8:f5:b3:e9:af:4d:0c:
92:eb:ad:47:d4:aa:15:43:e2:99:47:a1:2e:5d:35:
e0:9b:2d:ce:a6:75:36:58:6c:7e:26:08:0a:7c:1c:
fc:96:3a:d9:c9:6a:04:c2:f4:ce:f3:e4:ad:84:68:
d4:b9:a1:4f:4b:63:89:a8:32:dc:d7:a2:de:e0:46:
b4:df:18:35:cc:34:45:65:c2:13:c9:e2:f1:6e:3f:
0b:d1:d5:2f:f5:ca:8a:86:dc:16:36:25:4a:3f:d0:
f4:ef:f6:ec:5b:71:84:0d:e3:50:50:52:6d:04:57:
8a:66:c7:f9:ce:57:c2:75:0b:b9:cf:f2:69:3b:f1:
93:d1:8a:5b:55:e0:19:33:85:8a:6c:e6:01:34:49:
6b:88:e5:28:18:4f:f4:03:1f:d5:cb:88:08:9d:80:
fa:e3:48:f7:37:80:d0:65:1f:db:a4:1d:ee:02:82:
85:90:77:57:15:09:bc:2f:87:99:fc:e1:75:8f:15:
1f:17:e7:b2:c1:68:6c:25:d3:63:0b:23:10:3a:32:
e7:f4:0e:7d:25:d5:be:8a:14:a6:de:3a:5b:3c:c2:
c9:58:cb:86:88:92:ce:1d:72:54:6a:1f:8b:be:fa:
33:a5:4b:fc:35:3f:3f:dd:e8:48:3c:6c:47:39:d1:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CB:63:72:03:DC:0C:57:38:16:A6:A9:AB:5D:EC:85:50:7A:13:CA
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:8a:0e:1f:73:86:31:07:68:dc:bb:17:16:a6:b2:6c:df:
84:a8:55:6b:2f:35:a6:10:3a:1f:9d:46:d1:4a:92:16:b8:15:
bd:d4:77:08:93:f4:e2:de:b7:fc:b3:50:a5:ba:ec:aa:b4:6d:
aa:d3:3f:77:b6:d6:5f:82:bd:34:ae:68:92:f5:64:3d:b3:ce:
d3:64:30:f7:72:91:7e:3d:4a:90:6d:09:a8:ec:98:98:29:4c:
2a:42:f1:d7:dd:93:f4:39:a8:0d:c4:97:4c:7a:9e:bf:e7:1b:
ba:df:87:b1:bd:8b:fe:81:7c:6f:e0:a8:1d:6a:86:ff:75:ed:
5a:d3:bf:f7:14:ea:cf:d5:88:21:5d:c4:fe:bd:41:8a:e1:71:
f7:dc:ec:29:fc:75:9b:b6:7d:6d:a2:3d:17:39:72:e3:13:31:
ce:f9:fb:7f:b2:47:ad:fb:59:e2:ab:e4:c6:7d:a2:cb:03:52:
60:75:5e:ca:c0:16:41:ac:e9:d3:fa:69:d8:b3:25:b8:60:d0:
d2:42:f4:aa:d1:ef:9d:2c:26:ea:b2:7a:9c:f2:1a:d6:61:a7:
c6:2c:19:48:00:ea:74:81:4e:c3:e1:53:43:02:3b:43:31:f6:
83:53:4d:5a:35:f9:5a:a5:ce:24:b3:01:ca:4c:ae:8c:0f:4f:
20:93:bf:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkCAs1C4eLMxBzw0yz6JrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZTc1NGMzYTNkYjJlZDE0YWE2YzA2YTk5ZDc5NzI5MTcw
MjAwMWMwHhcNMjYwNTEyMTkwMDQ1WhcNMjYwNTEzMTkwMDQ1WjAzMTEwLwYDVQQD
EygwZGNiNjM3MjAzZGMwYzU3MzgxNmE2YTlhYjVkZWM4NTUwN2ExM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbrvo3fjNj1s+mvTQyS661H1KoV
Q+KZR6EuXTXgmy3OpnU2WGx+JggKfBz8ljrZyWoEwvTO8+SthGjUuaFPS2OJqDLc
16Le4Ea03xg1zDRFZcITyeLxbj8L0dUv9cqKhtwWNiVKP9D07/bsW3GEDeNQUFJt
BFeKZsf5zlfCdQu5z/JpO/GT0YpbVeAZM4WKbOYBNElriOUoGE/0Ax/Vy4gInYD6
40j3N4DQZR/bpB3uAoKFkHdXFQm8L4eZ/OF1jxUfF+eywWhsJdNjCyMQOjLn9A59
JdW+ihSm3jpbPMLJWMuGiJLOHXJUah+LvvozpUv8NT8/3ehIPGxHOdG/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3LY3ID3AxXOBamqatd7IVQehPKMB8GA1UdIwQY
MBaAFAjnVMOj2y7RSqbAapnXlykXAgAcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMTZlZmMtOTI1NS00Y2FiLWJmOWEt
OGVkYzUyZGM2MGNmLzEvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wMTZlZmMtOTI1NS00Y2FiLWJmOWEtOGVkYzUyZGM2MGNm
LzEvQ09kVXc2UGJMdEZLcHNCcW1kZVhLUmNDQUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOiKDh9z
hjEHaNy7FxamsmzfhKhVay81phA6H51G0UqSFrgVvdR3CJP04t63/LNQpbrsqrRt
qtM/d7bWX4K9NK5okvVkPbPO02Qw93KRfj1KkG0JqOyYmClMKkLx192T9DmoDcSX
THqev+cbut+Hsb2L/oF8b+CoHWqG/3XtWtO/9xTqz9WIIV3E/r1BiuFx99zsKfx1
m7Z9baI9Fzly4xMxzvn7f7JHrftZ4qvkxn2iywNSYHVeysAWQazp0/pp2LMluGDQ
0kL0qtHvnSwm6rJ6nPIa1mGnxiwZSADqdIFOw+FTQwI7QzH2g1NNWjX5WqXOJLMB
ykyujA9PIJO/vA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:38:20 2026 by rpki-client