Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: CwBMYnCPVwIgRPukDYbGS9QUXQI0bwA3mCD7j2Km4rw=
Subject key identifier: FC:98:D2:92:7D:BF:66:DA:22:01:9A:D6:22:16:E8:79:37:91:83:D3
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 019D28845E1CC35FFFFF696C6DF91AF5E1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 058D
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: aPh1S9Wk/ka4cPrkHZ1kzVeyyCiH4RcUAHl9cGYLfSw=)
2: KUjkZ8QU9wVEQTMwvaNEDbxlxDU.roa (hash: SSnpC+LDbpJEWW7Dz9SA6laQ6jwgy6aN8IlIVc7fue0=)
3: aXRWeaKRfz8xctBkOcAjTiqqUyc.roa (hash: 1GTiSvFGIEqbWdGzrD6YYk/YH+B3NyH6shZKFsYxvxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5e:1c:c3:5f:ff:ff:69:6c:6d:f9:1a:f5:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=fc98d2927dbf66da22019ad62216e879379183d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:d5:cc:53:ff:e6:fa:b4:70:7c:e9:32:07:
38:6a:be:30:d2:9c:3f:92:4e:ca:c1:b6:28:8b:1b:
55:04:c6:06:12:07:42:29:62:0a:a2:bf:c7:f2:6f:
83:bf:34:71:20:b6:a4:d3:9b:6b:59:ef:64:ed:33:
15:6d:5b:1a:a5:64:5b:39:e5:93:63:2e:4e:ad:cd:
4f:83:e9:23:8a:10:ab:9d:f4:7a:0c:58:13:7b:5f:
6f:0d:ff:d8:03:44:e6:e0:d5:96:cc:70:0e:33:84:
9e:23:19:d2:88:36:90:f7:5b:03:7a:3c:91:7b:fd:
34:ef:69:b0:3e:ae:2e:8e:47:50:2a:02:61:1d:22:
4a:35:fc:b0:50:2d:d4:a3:4a:ee:53:fd:4c:d7:ad:
1b:08:32:c6:33:c1:39:f9:7c:40:15:61:b5:52:58:
13:f9:b7:4f:a7:f6:85:6d:1a:24:0c:72:50:64:52:
a6:35:6b:1c:4e:7e:29:3d:90:0c:ab:d1:d6:be:e7:
53:79:73:de:45:d0:d7:44:90:e1:b1:30:6a:50:af:
cf:9a:d7:1f:a2:9d:5f:94:94:7b:2f:86:aa:9a:1c:
92:41:9c:e5:77:4c:cb:fc:cc:96:be:d6:ea:e5:c4:
83:b2:af:91:0b:76:66:c0:3d:13:68:ad:7c:69:20:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:D2:92:7D:BF:66:DA:22:01:9A:D6:22:16:E8:79:37:91:83:D3
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:01:54:90:d7:2b:89:44:83:fd:7e:24:c1:25:db:99:48:
f6:8a:a9:52:9c:87:d8:de:e6:49:e9:b6:4a:7a:02:47:51:8a:
1d:10:45:7b:98:9a:a1:12:9c:c6:fe:32:99:09:4a:55:28:46:
d4:bf:88:3b:03:5c:04:9e:30:60:29:34:d2:18:ef:aa:80:e6:
b1:ce:6d:38:81:8d:e8:4e:26:9f:0c:27:93:fe:ef:16:62:38:
74:b1:09:91:74:e2:32:41:6d:e0:ba:88:66:12:c2:c7:07:4b:
6c:b7:f8:fd:e7:a8:34:a9:9f:7a:a4:13:d8:e5:97:d7:d3:48:
91:3a:2a:4f:85:78:dc:77:8b:4a:5d:83:15:b2:13:df:7a:46:
20:fe:ca:e6:59:50:30:ab:34:33:36:94:ef:e3:79:9d:89:07:
76:47:b4:95:57:f8:8e:b6:8c:0e:1e:fb:55:a8:f8:bd:8c:f6:
06:a0:9e:1f:3f:0d:d9:79:a3:af:ae:56:80:52:5f:b4:eb:6f:
7c:ca:d9:a1:9e:6a:1c:a5:f5:e1:74:fc:55:52:31:a0:95:3c:
82:24:ae:07:dd:ec:b1:e4:22:9b:a4:75:b5:05:24:c5:4d:e1:
0c:f5:75:24:08:95:80:16:c8:ff:94:d3:b8:57:9f:7c:bd:72:
aa:40:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:52 2026 by rpki-client