Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: kz31OvpNoY5bvYgcQh2Fb3wOucLIDlPSmpOZerqJ2OA=
Subject key identifier: F0:B6:F3:38:87:C7:B7:AD:1A:D9:B8:11:86:D4:87:D2:7B:3E:9C:0C
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019D273B31FECEBE2E9701D859D61F807A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 102D
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: eMkPEvTISwkIusr53rgO3xnn4nDQNz2PPhm6q4UjphU=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:31:fe:ce:be:2e:97:01:d8:59:d6:1f:80:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=f0b6f33887c7b7ad1ad9b81186d487d27b3e9c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:fc:21:e3:50:85:2b:6e:fb:8d:ef:a6:25:
20:f7:15:b3:d5:af:96:7f:39:af:c0:77:f2:3b:f1:
7a:af:94:d6:b6:96:96:c4:d4:17:1f:d9:32:c7:5d:
dc:6b:a3:63:ee:3e:e9:3e:8e:88:0c:12:41:b2:8a:
5d:c1:46:e6:99:3c:71:08:71:6f:1a:b1:2f:44:93:
70:54:9a:54:75:84:9a:e8:12:6c:76:ee:d8:64:53:
a9:cb:44:0f:89:f8:d1:c0:c6:b1:76:8b:b9:ae:50:
71:ba:25:ca:1a:cb:03:df:b8:07:4d:8a:c8:be:16:
09:fc:dd:b0:73:39:0c:b4:7c:62:7c:b1:9f:c5:60:
f2:fb:60:aa:79:8c:37:ef:a1:51:b9:18:2b:26:fd:
94:56:08:be:d9:85:7d:6e:98:86:80:eb:48:38:7c:
5b:ba:2f:15:c2:e0:80:81:97:d7:1f:21:be:8f:b8:
20:20:d5:50:00:8e:24:bb:78:6e:41:ef:6e:f6:a0:
3b:ea:2d:9f:5a:ea:b1:7f:ac:37:0f:26:cf:03:0a:
00:c5:e0:68:83:04:62:68:ab:17:af:da:08:e0:7a:
1d:bd:05:9f:df:90:66:c4:fc:93:c4:dd:92:a1:3a:
61:53:6c:31:ae:23:4d:af:75:dd:cf:0d:83:3b:2f:
b1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B6:F3:38:87:C7:B7:AD:1A:D9:B8:11:86:D4:87:D2:7B:3E:9C:0C
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:3b:06:ba:23:56:4c:9c:36:bd:33:42:b0:ac:64:c3:d6:
6d:29:37:ef:44:f2:10:2f:da:e8:30:c6:c3:19:b6:72:fd:08:
f9:3b:25:77:9d:18:f9:05:8d:72:9b:19:d3:3f:80:48:5f:58:
63:35:55:16:b2:54:de:43:84:51:1a:c6:29:58:03:3f:5d:4a:
5f:82:7d:3a:2f:59:6e:d7:e3:24:2f:0f:b6:6e:03:b5:d7:8e:
3b:3e:d8:e3:e6:44:66:fa:fe:a2:e7:a1:ec:33:10:0f:25:82:
2c:81:de:d9:20:10:a5:94:fa:cc:11:72:cc:11:91:19:c0:af:
33:09:d7:93:91:83:92:e8:5d:51:83:5f:a5:37:7d:92:0b:d7:
4d:35:b8:68:83:c0:5b:af:b1:0f:cb:f4:f2:17:27:32:8b:b9:
bf:e2:de:ba:ca:0a:a2:63:d1:1c:2d:28:73:7e:19:80:8b:a2:
d3:54:b7:91:d5:fd:f7:f6:03:ea:d9:ec:19:88:f0:d2:86:c0:
79:03:8e:eb:34:5f:87:1e:cb:85:9a:61:67:29:0b:6b:0d:99:
c2:5b:86:c3:e4:5f:bf:9d:3c:2c:74:3e:96:a3:8d:a7:ea:5a:
48:a2:8e:f7:67:6f:14:64:52:bf:16:6d:35:3b:7c:b8:b4:40:
a2:d7:c0:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzH+zr4ulwHYWdYfgHpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
EyhmMGI2ZjMzODg3YzdiN2FkMWFkOWI4MTE4NmQ0ODdkMjdiM2U5YzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0X8IeNQhStu+43vpiUg9xWz1a+W
fzmvwHfyO/F6r5TWtpaWxNQXH9kyx13ca6Nj7j7pPo6IDBJBsopdwUbmmTxxCHFv
GrEvRJNwVJpUdYSa6BJsdu7YZFOpy0QPifjRwMaxdou5rlBxuiXKGssD37gHTYrI
vhYJ/N2wczkMtHxifLGfxWDy+2CqeYw376FRuRgrJv2UVgi+2YV9bpiGgOtIOHxb
ui8VwuCAgZfXHyG+j7ggINVQAI4ku3huQe9u9qA76i2fWuqxf6w3DybPAwoAxeBo
gwRiaKsXr9oI4HodvQWf35BmxPyTxN2SoTphU2wxriNNr3Xdzw2DOy+xswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC28ziHx7etGtm4EYbUh9J7PpwMMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCE7Broj
VkycNr0zQrCsZMPWbSk370TyEC/a6DDGwxm2cv0I+Tsld50Y+QWNcpsZ0z+ASF9Y
YzVVFrJU3kOEURrGKVgDP11KX4J9Oi9ZbtfjJC8Ptm4DtdeOOz7Y4+ZEZvr+oueh
7DMQDyWCLIHe2SAQpZT6zBFyzBGRGcCvMwnXk5GDkuhdUYNfpTd9kgvXTTW4aIPA
W6+xD8v08hcnMou5v+LeusoKomPRHC0oc34ZgIui01S3kdX99/YD6tnsGYjw0obA
eQOO6zRfhx7LhZphZykLaw2ZwluGw+Rfv508LHQ+lqONp+paSKKO92dvFGRSvxZt
NTt8uLRAotfAkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:57 2026 by rpki-client