Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: eXEUcWiyOGDbjXbV3Y1GkSduAT9yM/Qpixru327Uook=
Subject key identifier: 30:12:1A:90:62:DB:82:88:75:D5:56:8A:7A:F4:29:15:BB:8B:30:70
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019E1DC70FE47FC0B9E3234C60D96A994DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: kdI4kp6Dr7r463l58Lv/9Z+s8PQ5ZlL1iszBb9rsJw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0f:e4:7f:c0:b9:e3:23:4c:60:d9:6a:99:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=30121a9062db828875d5568a7af42915bb8b3070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:ca:b6:d1:ee:65:fe:18:e2:5f:ec:5f:83:
e3:50:09:4f:b7:d2:59:c1:96:ba:0c:74:b2:f2:61:
27:ef:e1:3e:d7:a4:cd:1e:d2:de:c9:58:65:7e:ac:
23:c8:c4:c7:45:ff:cf:8a:2c:e1:f7:00:a4:15:51:
f0:45:10:bf:0c:fa:67:c2:15:aa:d8:37:78:53:fe:
75:75:b0:a9:1d:25:92:86:d5:4c:c3:52:9f:b7:e7:
5c:45:d4:7a:c0:bc:eb:02:c3:76:62:51:1f:39:2d:
0b:ca:8c:a3:f2:20:44:65:96:cf:a9:65:a7:fa:1f:
fd:22:1b:02:03:f0:0e:f6:f8:05:d0:f4:9f:a8:b9:
dd:20:d4:45:84:2b:03:ff:be:95:e3:0a:1c:f4:34:
0a:d3:7a:57:1a:13:4b:b2:c5:1f:db:31:bb:ae:b2:
b3:37:5b:5c:f4:fe:12:1b:78:e4:c4:dc:1e:ee:ad:
38:aa:4b:ed:af:07:3a:95:19:95:0f:93:5a:d4:86:
3b:9f:92:b1:ad:ef:26:df:7b:3e:84:0b:53:f9:b6:
1a:73:ed:ee:60:06:ca:76:02:2d:f4:af:bc:32:86:
87:28:24:9e:5d:4f:f9:df:d2:ac:98:06:5d:fd:69:
08:6f:ef:d5:dc:68:5b:69:69:70:34:23:53:ad:13:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:1A:90:62:DB:82:88:75:D5:56:8A:7A:F4:29:15:BB:8B:30:70
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b8:14:b0:23:6a:e6:4d:4c:5a:10:f9:68:a7:39:ec:cc:13:
1d:e5:94:3c:94:38:0a:36:50:e5:6e:d8:ef:76:0e:5b:3f:79:
f3:f3:1e:fc:57:6d:93:5b:51:d2:ee:4e:0f:f8:7d:42:08:57:
15:ca:c8:9b:a7:54:1b:86:35:43:28:f9:4e:bd:b2:b9:3a:54:
e1:b0:0c:f3:4c:24:9c:54:82:f6:e0:24:4f:c9:fc:af:c2:86:
66:b1:f4:5c:b6:ae:c3:e0:12:90:b2:ef:1d:b8:33:ba:a7:14:
87:0a:ec:df:32:ac:87:ec:ed:15:31:69:6b:cb:d5:27:1d:84:
4f:be:90:de:c6:4b:b0:1b:ce:7c:48:ab:3b:bc:37:94:7d:0e:
65:94:51:bf:89:eb:07:fd:0b:69:79:82:79:9f:77:cb:bb:5b:
7e:88:66:67:73:84:f3:d1:16:ec:da:86:0c:86:15:1c:3a:3b:
16:90:7e:61:35:a7:4d:8b:50:86:1a:14:2f:14:98:17:63:43:
5f:b6:5e:9b:bd:91:3f:11:b1:67:de:1f:83:a9:14:c5:9a:1c:
39:6f:4a:eb:b7:4b:0e:a7:07:25:98:72:57:08:fa:bf:1e:fb:
a1:47:f7:5d:6d:87:bf:dd:aa:e6:74:45:07:8f:52:8e:db:43:
3b:5a:fe:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxw/kf8C54yNMYNlqmU3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5
YzVhMWMwHhcNMjYwNTEyMjAwMDQ1WhcNMjYwNTEzMjAwMDQ1WjAzMTEwLwYDVQQD
EygzMDEyMWE5MDYyZGI4Mjg4NzVkNTU2OGE3YWY0MjkxNWJiOGIzMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9TKttHuZf4Y4l/sX4PjUAlPt9JZ
wZa6DHSy8mEn7+E+16TNHtLeyVhlfqwjyMTHRf/Piizh9wCkFVHwRRC/DPpnwhWq
2Dd4U/51dbCpHSWShtVMw1Kft+dcRdR6wLzrAsN2YlEfOS0Lyoyj8iBEZZbPqWWn
+h/9IhsCA/AO9vgF0PSfqLndINRFhCsD/76V4woc9DQK03pXGhNLssUf2zG7rrKz
N1tc9P4SG3jkxNwe7q04qkvtrwc6lRmVD5Na1IY7n5Kxre8m33s+hAtT+bYac+3u
YAbKdgIt9K+8MoaHKCSeXU/539KsmAZd/WkIb+/V3GhbaWlwNCNTrRMAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDASGpBi24KIddVWinr0KRW7izBwMB8GA1UdIwQY
MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt
ZGMzYjYzMmU5ZTJiLzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi
LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7gUsCNq
5k1MWhD5aKc57MwTHeWUPJQ4CjZQ5W7Y73YOWz958/Me/Fdtk1tR0u5OD/h9QghX
FcrIm6dUG4Y1Qyj5Tr2yuTpU4bAM80wknFSC9uAkT8n8r8KGZrH0XLauw+ASkLLv
HbgzuqcUhwrs3zKsh+ztFTFpa8vVJx2ET76Q3sZLsBvOfEirO7w3lH0OZZRRv4nr
B/0LaXmCeZ93y7tbfohmZ3OE89EW7NqGDIYVHDo7FpB+YTWnTYtQhhoULxSYF2ND
X7Zem72RPxGxZ94fg6kUxZocOW9K67dLDqcHJZhyVwj6vx77oUf3XW2Hv92q5nRF
B49SjttDO1r+bw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:36:18 2026 by rpki-client