Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: ogKKI5cN/1eQw8HcDLEHVqO1OMrvhvdbkYPUliEJtH4=
Subject key identifier: 03:4D:26:B3:41:2D:99:8F:F7:A8:14:16:FA:59:B9:96:6A:32:8D:54
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 019D284E2E04DFE5BA98D85CD5D49129269A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: CTbzY3XTICaTnZepPSS7Dqa06twjsEbTd9BqIyhF65c=)
3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2e:04:df:e5:ba:98:d8:5c:d5:d4:91:29:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=034d26b3412d998ff7a81416fa59b9966a328d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:cb:f6:bd:00:29:46:a0:ad:da:bd:a6:12:
2a:cf:b4:25:5d:02:49:cf:c5:81:3e:59:b3:1d:b9:
94:0b:6d:68:38:65:37:46:87:c4:3b:d0:4f:28:6f:
69:09:e9:5e:09:7b:97:03:0e:08:06:c7:55:15:1d:
80:b4:67:ce:9c:06:9f:82:d0:4f:22:59:2b:8e:54:
48:96:b6:ac:9d:cd:7f:e6:d5:fc:15:05:5d:82:8a:
00:ea:06:53:4a:63:f2:fa:ec:11:47:47:ca:6b:eb:
ae:24:67:ac:67:f5:c9:c1:e6:e9:50:8d:38:0e:ba:
a9:eb:5e:c4:a5:d8:d5:26:03:cb:a5:6e:31:d1:5e:
e6:73:2e:53:9c:5b:ed:d0:3a:e2:c4:27:4b:c4:c9:
4c:7a:40:d6:bf:cb:7b:23:9e:21:fe:b5:37:80:f7:
74:0b:39:ad:6a:80:4b:70:30:b7:45:23:f5:49:39:
e2:af:e8:b2:75:fd:bd:59:6a:bc:94:29:74:31:67:
3c:2d:af:09:e0:05:21:3b:60:f1:84:ba:dc:cb:e8:
14:32:9b:e1:e4:7e:f1:62:c6:85:0c:2e:d9:77:4e:
5e:14:28:79:01:da:78:db:c5:42:30:c5:17:52:a3:
7d:64:61:8a:d1:e1:d1:01:80:b8:bb:6e:4e:05:3e:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:26:B3:41:2D:99:8F:F7:A8:14:16:FA:59:B9:96:6A:32:8D:54
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:49:5c:61:df:f5:f1:9a:5d:9c:5d:0d:79:58:7f:8b:79:b3:
76:06:a2:5e:e0:fc:cf:be:74:92:7c:36:2a:2a:3d:28:11:ae:
1f:af:d0:ec:64:c8:35:50:49:2c:ad:58:ae:42:0d:51:65:23:
46:fc:0a:90:58:b6:33:fe:ec:75:51:ef:a9:94:75:e1:ff:d6:
af:43:ba:7b:dd:fc:42:5f:58:20:87:ce:b1:03:b3:74:8a:f2:
3d:a7:53:a2:6a:84:7d:b9:04:3f:82:4c:b8:15:2f:63:9f:6a:
4d:f2:e9:ad:0b:ef:8b:34:4f:5a:9c:00:bd:0d:74:7f:88:d0:
c4:c6:ed:0c:eb:3b:55:47:6a:37:97:84:12:53:a8:8f:63:d9:
4b:3f:51:d5:df:e5:6a:71:90:bb:6f:02:cf:9d:8f:8a:bd:08:
5a:7a:05:f6:7d:ed:d7:3a:45:4b:2c:1f:05:08:58:62:9a:3b:
2c:bc:9a:56:b1:21:3a:b6:ac:a6:0a:63:17:cc:e8:f2:62:0e:
02:9f:5c:c8:84:aa:b2:81:6a:f4:34:d5:02:40:b6:85:7a:b7:
28:bf:29:08:2d:70:fa:36:01:c6:83:eb:fa:20:e4:31:4d:22:
d9:ea:09:36:b0:bd:9a:49:ac:d4:67:79:ed:0f:a3:6c:0e:bc:
b3:13:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:11 2026 by rpki-client