Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: PlDF2bP/Bf17XU9yB1dSAcCD6xzhaPjG7TxOE7aaAqI=
Subject key identifier: 1C:31:BC:2D:A4:2A:69:32:18:FC:6C:04:1C:16:47:2C:60:33:2E:D0
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019D2884BBBF395FC976A4065CC89DE612C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: DtvDvFgO2cyH8c90M1WzS4R6Gxuh4gncvGdS33brX4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bb:bf:39:5f:c9:76:a4:06:5c:c8:9d:e6:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=1c31bc2da42a693218fc6c041c16472c60332ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:36:f5:84:1e:e7:2d:c6:81:2c:6f:62:d6:
7d:3a:36:2f:61:46:b9:9f:60:4c:4a:0b:b2:9a:2c:
47:a8:4c:37:c0:e1:a9:35:46:1c:8e:b1:a7:8a:e2:
95:7f:fc:a8:6e:92:ee:38:06:02:bc:0e:04:06:c7:
70:f4:9e:2c:40:8a:70:80:55:42:f0:55:2d:c2:27:
00:20:2c:76:1c:65:e5:46:af:59:96:a7:6c:78:19:
c3:79:b9:2b:32:53:90:1a:7e:eb:d9:40:b1:62:2b:
e1:b8:1b:be:ae:05:9e:07:46:84:65:a1:c1:20:56:
fd:9e:5e:22:dc:df:6b:9d:2b:b8:04:b2:a7:a1:38:
5f:78:2a:ea:ed:b0:37:4d:5b:88:33:1e:6c:10:34:
4c:5f:5f:13:47:e8:f5:5a:de:06:dd:54:88:f2:be:
c2:6f:a7:a8:2e:80:b9:17:4a:26:a8:36:f7:de:a1:
5d:b6:03:95:c6:13:16:8b:d8:1c:cf:f1:7b:f3:dc:
17:42:b2:dc:ed:8d:a7:18:4d:2d:f6:52:76:8c:e4:
a2:72:5c:fe:b4:ba:21:ef:c7:cd:54:7e:fd:4d:e3:
0b:a9:ea:ca:a4:d6:29:04:d2:7f:26:27:f9:75:4c:
40:4b:5d:04:c9:0f:2e:34:6e:0e:7b:4e:80:1f:32:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:BC:2D:A4:2A:69:32:18:FC:6C:04:1C:16:47:2C:60:33:2E:D0
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0b:43:66:71:3c:82:0e:33:c1:2b:84:84:ae:4a:66:60:a0:
01:ee:8d:b2:b9:4e:4c:81:64:62:1d:38:d0:dd:6d:63:60:5b:
c6:6e:d5:61:14:c3:79:fd:36:de:5c:4a:90:0a:08:10:fa:3c:
86:f6:45:dd:a8:0d:a0:25:8f:db:f1:a7:b8:35:84:33:0e:ce:
a8:92:2b:ba:e7:cb:93:43:f0:06:4e:84:19:9c:ba:d4:35:d8:
ff:55:74:00:c2:8e:24:f7:e4:c4:b4:3b:08:dd:08:66:3a:cb:
25:ee:9f:16:fe:1d:d9:14:78:30:4d:80:a9:d8:1c:17:d2:69:
06:57:dc:6b:f0:cd:52:64:8d:3c:b1:6f:cb:ab:37:0f:d0:57:
5c:fd:92:5c:15:81:77:05:fe:81:4a:ac:f0:47:3a:98:26:97:
af:c5:17:82:ef:a0:27:28:37:9a:dc:7c:21:9f:4e:8a:3e:15:
85:e2:07:de:ce:57:66:b8:87:40:f0:f3:18:84:94:80:18:6e:
2a:51:19:2d:d5:0d:7b:c8:c7:0a:bc:ab:88:43:f9:96:4a:a2:
d8:d5:54:41:57:82:f4:73:36:c8:a2:68:9d:2c:4b:ec:3c:fa:
d1:2b:ff:80:a5:ab:17:ea:e0:14:4e:10:dc:90:01:97:58:f3:
35:47:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:52 2026 by rpki-client