Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: OJvUNKgl+AfII4vm0D/1JqbnuYDq5wM1oqY27HpeHn8=
Subject key identifier: D5:71:A2:E9:B5:B3:C3:B2:21:46:65:AB:57:65:35:AF:D6:4E:68:94
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019F90908694A388FB241443CCE85B3092D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 20:00:18 +0000
Manifest this update: Thu 23 Jul 2026 20:00:18 +0000
Manifest next update: Fri 24 Jul 2026 20:00:18 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: EQk6HljSsIzdCfoho9qhkA4ryN7tubuIPuNsaB09zJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:86:94:a3:88:fb:24:14:43:cc:e8:5b:30:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Jul 23 20:00:18 2026 GMT
Not After : Jul 24 20:00:18 2026 GMT
Subject: CN=d571a2e9b5b3c3b2214665ab576535afd64e6894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:a2:35:f0:b4:dd:e4:c9:3c:44:a2:1b:9f:
2f:76:69:1f:16:2d:97:5b:5b:11:27:de:37:fc:56:
ae:3b:00:77:51:72:8e:fc:94:0b:32:0c:1f:d2:43:
5c:58:8a:1a:15:99:82:61:32:6b:8f:c2:4f:d5:8b:
8d:fc:c4:b3:12:4a:da:b3:10:a6:9c:5b:ce:a5:b6:
94:aa:fd:59:f1:9f:3b:cd:b6:f6:5e:40:d5:0b:2e:
d5:43:ee:2c:27:ac:cd:81:1c:4a:ef:d7:93:b4:26:
d7:48:78:75:4a:b0:7c:83:f4:44:02:d4:b5:1d:58:
75:74:21:0f:7e:23:ac:43:01:64:94:7b:23:3b:1e:
e2:c8:7d:e2:e6:65:ca:0b:3c:74:ab:f0:6c:28:9f:
f3:70:ea:fb:dd:ce:64:71:2e:d4:4f:70:64:ef:0f:
cf:12:a4:64:70:ee:ca:0d:8c:14:63:0a:78:e3:9f:
6d:d0:17:39:a5:2a:63:d7:f1:ed:b4:ab:c5:91:49:
75:e3:a6:d1:d8:8f:40:df:12:70:bb:a6:58:ab:00:
b7:a5:be:bc:88:26:4d:55:05:ce:89:55:b8:ef:5f:
bd:f0:16:9d:63:d7:32:7c:77:c8:5a:db:84:07:0a:
c9:c8:6c:b6:89:11:85:53:df:49:4f:7e:74:7c:1b:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:A2:E9:B5:B3:C3:B2:21:46:65:AB:57:65:35:AF:D6:4E:68:94
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cd:9e:fb:0c:2e:e5:47:20:42:96:24:66:48:e4:9d:bd:d0:
dc:2d:38:d9:ae:d2:58:9e:3b:24:e0:3e:53:28:90:47:ff:7a:
86:f9:34:13:c3:54:99:58:c8:65:3c:b8:bc:43:91:25:0e:20:
4a:84:7d:b5:87:a2:22:81:5c:80:6a:5d:c8:ad:b8:cf:05:20:
b1:2b:cf:58:15:33:c8:fc:1d:ee:c3:38:02:a6:23:6c:9a:08:
3f:d9:bc:6d:ea:c4:f0:3c:3e:74:dd:7c:5f:2a:f4:47:06:f1:
fe:1f:d1:1a:9e:ec:ee:a0:72:bc:94:26:b5:87:66:18:db:91:
2f:3d:6b:ce:a3:b4:3a:b1:ef:02:a5:fd:c4:1d:e4:37:53:d7:
93:21:05:59:5c:a5:72:11:9a:79:b2:40:2a:80:ee:ea:83:e3:
a7:ef:03:66:38:25:9f:8e:45:ac:01:d3:3b:59:a0:c1:79:3c:
f9:70:cd:87:f0:0d:4d:ee:f9:6f:56:c0:a1:db:ec:2e:47:69:
16:17:b7:17:01:52:c6:73:54:6e:ea:6e:7f:a7:35:9f:b0:76:
d8:99:4c:6d:a4:d7:fa:e7:5a:eb:35:34:51:f7:d2:8f:c8:b6:
6d:67:23:9d:98:90:b8:33:04:d4:f5:9b:21:b5:f6:8d:38:d9:
e7:d0:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:16 2026 by rpki-client