Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File: coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier: gP1JJL+Agde/xiNdbB8Tht42tNfWF6ZN6n7sRguCI9A=
Subject key identifier: EE:C1:A7:DE:18:37:EC:42:7A:24:BD:1F:65:36:87:72:03:BB:2A:C2
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer: /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial: 01A0D0EDE227377908D48BAED5E5CB0EAC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number: 0E7A
Signing time: Thu 24 Sep 2026 01:00:45 +0000
Manifest this update: Thu 24 Sep 2026 01:00:45 +0000
Manifest next update: Fri 25 Sep 2026 01:00:45 +0000
Files and hashes: 1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: 9mRm6z80Y0TxZYD24waaYTogupZD2uC+JAN/arBimVs=)
3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:e2:27:37:79:08:d4:8b:ae:d5:e5:cb:0e:ac:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Validity
Not Before: Sep 24 01:00:45 2026 GMT
Not After : Sep 25 01:00:45 2026 GMT
Subject: CN=eec1a7de1837ec427a24bd1f6536877203bb2ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:30:3d:3f:99:14:24:0c:bf:9a:88:97:50:
3d:55:01:bb:20:07:64:8d:22:a2:d0:67:e2:9e:fc:
0b:3a:ca:d1:9f:70:5a:a9:fb:1d:52:4a:92:aa:ae:
3b:1c:28:87:36:58:97:7f:26:fe:f7:38:fd:42:e0:
2e:68:09:5e:bb:bc:a0:e8:42:41:f4:18:37:69:2e:
f0:ed:25:d5:da:be:45:38:e7:ab:ec:87:1f:1f:0c:
7e:6c:2e:9a:86:e9:88:b1:f3:2d:d0:46:c3:25:67:
43:1c:1e:f7:e1:49:ef:67:bb:aa:6c:b5:a4:e1:5e:
ae:7e:d2:4a:aa:ac:51:a5:fb:5b:96:02:a4:85:d4:
22:6b:da:9e:9f:5a:fd:54:97:30:13:e1:a7:bd:4e:
f2:90:d9:1e:5c:fe:24:44:db:71:59:57:56:c7:12:
cf:a1:0e:0e:cf:ce:0e:c3:6e:cf:dd:ea:46:de:d2:
2c:04:c3:b6:e0:e9:51:25:f0:01:ce:0b:12:31:96:
87:ec:c4:35:6e:10:f1:53:bd:6f:7a:e5:88:53:dc:
43:eb:2a:d3:a7:36:21:b0:b6:94:02:ad:16:4c:3d:
5a:dc:34:c6:39:0c:ce:5b:f7:50:69:5b:e5:77:17:
23:a1:d3:0e:b5:62:f9:48:a4:33:9b:ef:37:35:56:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:A7:DE:18:37:EC:42:7A:24:BD:1F:65:36:87:72:03:BB:2A:C2
X509v3 Authority Key Identifier:
keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:39:98:fb:95:5a:f7:2f:89:05:d7:a2:4a:9e:c8:8b:91:af:
2a:e2:a8:ad:57:40:71:6d:ca:52:42:3d:36:bc:6b:ab:e9:52:
7a:e3:08:20:54:cd:80:bc:de:17:74:18:11:ce:66:30:c4:4d:
d7:f6:41:87:c4:10:5d:06:04:78:8b:91:1f:5a:43:23:0d:d6:
85:33:88:3c:51:12:a4:f3:ba:e0:09:4b:69:f9:dd:0d:49:4b:
45:ed:2e:78:31:af:35:a1:49:fa:f2:99:ff:e9:c1:5d:83:6f:
60:5c:4b:31:e2:5c:35:a4:09:33:de:00:6a:d7:38:84:60:c6:
77:47:5f:8b:c4:85:1b:e3:4f:a9:70:2e:0b:0e:94:82:f7:28:
b0:21:b1:5e:a3:7f:47:71:4a:66:32:be:ea:d7:81:92:ae:34:
12:73:e7:8f:25:e0:7f:ca:1e:1b:76:db:ca:79:4e:00:ea:29:
a5:e1:33:13:a4:22:d1:a8:b3:60:8e:d4:8e:32:8f:dc:91:e6:
91:85:d9:e0:d9:09:92:ba:63:63:d8:17:1e:e5:5e:13:49:af:
4a:a9:f9:e7:3d:c2:cb:fe:1a:5b:a0:90:56:4b:11:76:4e:29:
c6:1a:d1:77:0e:91:9c:14:fe:04:80:96:cd:d8:29:e4:b7:5c:
cc:3f:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:05:41 2026 by rpki-client