Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: aoddTxm6ekwlaZ1hXk7iA4G0gHC/JWN/zG4kHFa5178=
Subject key identifier: 2F:ED:6A:CC:5A:39:17:4C:C9:B6:AA:A2:02:E4:86:82:9C:74:67:19
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 019F8F7DEA3653B27FBCFB2F388C79D2A4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 190C
Signing time: Thu 23 Jul 2026 15:00:21 +0000
Manifest this update: Thu 23 Jul 2026 15:00:21 +0000
Manifest next update: Fri 24 Jul 2026 15:00:21 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: AwqlvDJ/hZHhlmbysCSs4fvKxL9bz0TXaSrHbmopkGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:ea:36:53:b2:7f:bc:fb:2f:38:8c:79:d2:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Jul 23 15:00:21 2026 GMT
Not After : Jul 24 15:00:21 2026 GMT
Subject: CN=2fed6acc5a39174cc9b6aaa202e486829c746719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:2a:f7:e7:0d:4e:8c:98:1e:4a:d2:20:3f:
c6:49:59:e3:c7:b3:48:fc:bc:01:fc:ec:f5:db:c9:
f2:88:bf:38:5c:ec:a4:34:4b:6b:e3:8d:b6:89:47:
08:17:3f:f8:a9:d6:85:18:e9:e8:7c:58:e8:28:85:
bd:f0:2a:d4:0d:01:21:57:7a:27:96:c3:20:43:e2:
e9:ca:d6:c2:e4:aa:b3:bd:51:67:47:db:a4:28:73:
75:7d:bb:4d:07:44:8c:46:5f:e5:f0:be:e4:c5:36:
61:25:81:87:7a:52:f4:97:7f:8f:8b:14:66:b1:5a:
65:1e:e6:0d:72:32:b8:26:de:0e:95:92:ef:cd:83:
bd:af:6f:a7:ca:d9:d5:81:47:c0:21:c1:ed:34:27:
b0:36:ab:09:2d:26:d9:cb:0c:da:83:1b:5a:9e:94:
77:1f:99:b6:7a:ed:25:06:d3:be:4d:7c:1c:84:31:
71:a3:70:8d:b9:a8:5b:21:3b:a1:4f:fd:80:fd:12:
28:cc:5c:58:aa:6f:7b:12:2d:b6:5b:60:e1:ca:8b:
fa:63:40:6d:aa:a3:91:a3:c5:7c:5f:ba:30:3d:ed:
7e:19:97:53:d2:73:50:07:51:c9:91:b2:c4:85:4e:
22:11:a8:8c:b7:10:d8:49:ca:25:41:e0:67:f5:f6:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:ED:6A:CC:5A:39:17:4C:C9:B6:AA:A2:02:E4:86:82:9C:74:67:19
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:55:69:7e:4e:f2:c3:62:4a:2f:9e:2c:6d:76:5d:43:8b:
ba:0d:00:2f:6c:7b:7a:34:01:a7:a2:32:a5:4a:7d:57:1e:91:
47:dd:a3:b5:cd:da:a0:6a:80:fb:01:87:f1:97:08:32:5c:c3:
fe:27:8f:41:4d:29:d6:c0:eb:47:78:fd:9d:9a:ae:6c:28:14:
d4:52:9d:b7:7d:90:99:42:7a:7f:33:43:37:b2:b0:fb:de:23:
8f:ef:ea:15:43:fd:2d:48:11:13:b1:06:5a:0e:40:a8:85:64:
d8:de:69:91:ec:50:c5:c4:86:a1:1e:50:30:96:28:86:fa:37:
60:7c:de:96:0c:31:ca:71:b3:7c:b5:0e:37:c8:72:5b:70:96:
26:f0:96:76:a9:e1:80:7a:4f:fc:f4:c6:e1:c3:7d:c9:80:c6:
c0:b7:42:a7:80:48:17:cb:a2:83:0a:54:28:75:15:02:9e:ba:
ca:28:57:2a:ce:80:ef:59:97:70:4b:84:8c:b1:03:ed:91:49:
ea:24:6c:bd:5d:88:c1:f6:19:38:c9:24:ef:cf:5e:23:78:8d:
fc:42:4e:66:3e:fe:bd:44:7c:97:10:5e:39:8a:49:9c:f8:e5:
62:c4:79:de:00:23:fb:91:77:79:4e:c9:d0:1a:7b:cf:37:aa:
85:87:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:32 2026 by rpki-client