Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: PSRnFySir7u1ttkF+XCzZ3axLwcQxJCaEbHHdGh6n00=
Subject key identifier: 96:96:F3:2A:1F:32:75:A1:BE:11:95:A2:99:82:E7:DF:F6:E9:7A:2D
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 01A0E362A79827D8AA6E03582A2C0C111EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 19BC
Signing time: Sun 27 Sep 2026 15:01:28 +0000
Manifest this update: Sun 27 Sep 2026 15:01:28 +0000
Manifest next update: Mon 28 Sep 2026 15:01:28 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: Tf+FsaAwGqywltBHpAEdqdNCfWsHqa60ezvWAl5dVvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:a7:98:27:d8:aa:6e:03:58:2a:2c:0c:11:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Sep 27 15:01:28 2026 GMT
Not After : Sep 28 15:01:28 2026 GMT
Subject: CN=9696f32a1f3275a1be1195a29982e7dff6e97a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:d8:4f:38:f0:07:7e:6c:24:cf:79:86:36:
38:10:d0:ca:26:08:86:87:b9:38:f8:15:09:36:a1:
57:cf:f2:b0:3e:e8:e9:2e:8a:23:74:9e:ba:d2:da:
d4:a8:14:bd:fa:ca:02:85:80:a2:b0:d4:8d:89:19:
0d:18:f1:e1:5f:0e:1b:94:3e:3c:76:6f:73:1d:43:
6d:76:fd:d7:6a:6e:e0:22:c4:b7:1c:be:d9:1b:7d:
45:11:08:0e:9c:f9:1c:78:fb:c5:58:17:9c:82:b4:
50:9d:e2:b8:e5:f3:e9:51:4b:aa:cc:90:eb:17:b4:
ef:6f:08:15:0d:e3:34:d9:ed:80:4c:89:e0:b8:ff:
03:8a:af:a6:8c:9c:c9:e0:ec:9c:d8:e1:7c:7d:c1:
a9:af:8d:47:86:8e:82:e8:d4:6c:94:4c:6c:84:67:
0d:f2:24:78:02:cd:c9:89:0e:d1:cf:25:01:6a:aa:
4e:b3:ea:15:4c:26:70:a3:0b:87:13:f7:90:4d:08:
fe:03:4f:8f:1d:ca:6c:7c:b2:43:7a:35:e7:81:4a:
8b:85:0b:35:5f:91:12:9a:ed:71:3c:57:74:06:21:
b9:f6:b9:c8:6e:bf:6d:10:40:a1:2e:ab:f8:80:d5:
b9:17:d7:2c:36:64:55:1e:4a:86:c1:65:3e:8b:a4:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:96:F3:2A:1F:32:75:A1:BE:11:95:A2:99:82:E7:DF:F6:E9:7A:2D
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:b2:c7:98:be:bd:2c:d1:fe:c5:22:0f:f9:86:b7:f6:81:
86:a6:fd:f3:97:14:81:4c:fb:1a:82:47:87:27:4c:f4:ff:99:
07:9a:41:1b:cc:fe:3c:10:2b:d6:14:55:a1:06:d8:10:78:be:
99:be:99:0e:5b:0b:19:fb:67:cb:99:84:b9:f7:fc:25:cd:14:
d4:e2:f0:45:30:5c:57:86:a3:e5:c5:2b:55:15:51:2a:4f:ea:
ba:c2:eb:38:d4:46:77:5e:79:64:f1:53:5f:ad:ca:2a:ba:e7:
cd:cd:74:ce:b0:ac:47:be:ed:28:a5:55:43:2f:f0:c3:27:6c:
74:63:f0:e9:64:78:fa:4c:d9:80:40:16:61:3c:9b:c6:12:1c:
77:01:25:b9:7a:cc:15:1b:c3:5e:88:39:a8:a4:91:e3:8d:d6:
a6:c4:7e:22:49:7e:c5:3e:31:46:c2:07:13:b5:ec:12:12:3a:
e3:d2:03:d8:fa:f9:9c:c9:07:f3:c5:21:d1:8f:f0:b0:fb:c1:
e1:ea:51:62:35:57:2b:80:db:47:d9:0e:2d:63:be:59:ab:31:
b0:1a:76:43:f1:cd:bc:30:0d:50:a8:59:78:d7:8b:27:05:5a:
d7:7b:5d:c2:d9:66:fb:cc:b5:d6:4c:4d:22:bd:ea:bb:22:ee:
86:c8:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:46:58 2026 by rpki-client