Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: TLOgRK1yqfZ8OzWwMQCALE2nC+eV1NUa59v/+mKWiNE=
Subject key identifier: F8:72:94:FE:8A:51:DB:1D:09:B6:EA:99:B5:67:CE:B4:13:9C:96:93
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 019E1D907D9DA82C4219B31007603A7DEAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0D14
Signing time: Tue 12 May 2026 19:01:09 +0000
Manifest this update: Tue 12 May 2026 19:01:09 +0000
Manifest next update: Wed 13 May 2026 19:01:09 +0000
Files and hashes: 1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: +kSq2L8PTiXLTSter9xa2Z8k4wDMihAhVokED9vtDiY=)
3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:7d:9d:a8:2c:42:19:b3:10:07:60:3a:7d:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: May 12 19:01:09 2026 GMT
Not After : May 13 19:01:09 2026 GMT
Subject: CN=f87294fe8a51db1d09b6ea99b567ceb4139c9693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:c6:d4:68:e5:5d:b2:80:d2:b9:03:56:d5:
fa:ee:6e:cd:49:af:c8:73:8e:5b:2b:d7:4f:4c:54:
83:93:cb:a4:80:47:c7:84:2f:51:28:b9:99:7c:53:
65:84:e1:b2:61:99:51:27:83:c2:25:cc:2a:c5:b0:
89:75:30:5a:43:a6:06:a9:a5:9d:a5:13:3a:38:46:
3e:1c:5a:cc:04:ea:39:6a:fa:ca:2b:07:2e:da:69:
97:08:ba:bb:b6:b2:b2:7c:43:ba:55:e8:2e:80:37:
2b:69:8d:4b:8a:73:34:43:82:22:f5:00:15:78:c6:
4c:ac:12:f3:f1:a5:eb:d6:e5:60:c4:a5:52:b7:14:
c1:75:47:53:36:48:63:96:73:da:d2:d0:6d:e1:20:
37:89:f4:92:49:f6:58:b5:2c:02:58:4e:85:ae:dd:
7d:37:3f:c3:59:61:d3:26:c4:11:22:61:0f:43:47:
3e:34:a0:f2:ef:49:56:0f:a7:83:18:4c:61:b7:20:
87:0e:43:ee:ce:e4:e9:26:e4:9c:2c:e3:11:8f:8c:
69:c6:e2:69:d8:33:d6:da:a3:f6:40:7e:33:f3:87:
2e:b7:37:25:e6:a0:c7:2c:21:ec:03:e9:cb:04:cd:
02:b8:da:07:bc:28:7d:e7:6e:9b:23:ff:61:5b:16:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:94:FE:8A:51:DB:1D:09:B6:EA:99:B5:67:CE:B4:13:9C:96:93
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:07:7a:af:b9:da:3c:ab:ed:4d:75:27:60:84:81:26:c1:92:
6b:08:a5:fe:f0:27:6b:86:40:9c:a6:76:42:5d:ed:72:ad:42:
3c:ca:50:e2:71:bc:dc:06:51:6e:f0:d9:d6:49:fc:8f:59:07:
4b:d3:c3:62:09:68:8b:2e:6c:45:e7:52:33:97:e6:d8:eb:7b:
9c:02:10:94:b3:81:b7:fa:df:b7:15:97:1d:de:de:ed:b7:90:
5c:ac:91:b1:df:49:fe:ab:a9:e5:d8:b7:5b:c3:82:6e:4e:4f:
30:92:7a:19:91:68:e8:46:08:13:04:39:bc:2f:ea:e2:23:e5:
c9:b9:bb:79:04:e4:47:9c:5a:7a:57:d3:07:67:11:f7:40:75:
50:d4:5b:d7:be:ca:24:71:09:a7:26:8a:14:75:a5:46:17:f2:
9d:e4:3b:3b:19:7f:2c:3c:ed:00:bb:17:d1:a2:d3:19:9d:26:
23:17:9d:58:34:c2:88:7b:f2:3b:64:97:53:81:fc:48:bc:25:
75:35:ab:5f:bd:bb:a7:36:2a:d4:4e:80:d5:a1:36:ed:34:71:
a2:ad:aa:4e:e7:e0:b3:9e:6f:45:ed:b0:46:67:78:49:a6:73:
d2:62:a9:b2:b2:da:2a:b3:62:16:bb:49:e2:37:99:15:fe:b8:
6a:f8:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:38 2026 by rpki-client