Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: a7+pxTgW9VRV1f34unVQz89WtxtOOsursl0PmSQUa1E=
Subject key identifier: 34:D7:B4:B7:7F:63:AE:FD:A8:42:13:9E:61:7B:08:8F:6A:D6:99:A8
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019E1E6C193145BB908106B52A89BB6CD0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 10AD
Signing time: Tue 12 May 2026 23:01:01 +0000
Manifest this update: Tue 12 May 2026 23:01:01 +0000
Manifest next update: Wed 13 May 2026 23:01:01 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: vuckNKRML9E79LsiWmZa3SAjsvi1AVgEY/A1OzFrwDM=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:19:31:45:bb:90:81:06:b5:2a:89:bb:6c:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: May 12 23:01:01 2026 GMT
Not After : May 13 23:01:01 2026 GMT
Subject: CN=34d7b4b77f63aefda842139e617b088f6ad699a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:7c:04:8a:da:ea:a4:b8:21:ad:2f:54:9c:
2e:4a:ef:42:86:92:ca:a1:7a:21:2f:54:3a:06:e4:
df:7a:a1:24:d3:74:75:da:d5:e0:7d:7f:a3:65:f6:
76:d4:4c:9a:a9:c8:e8:63:03:75:95:ab:aa:30:75:
4e:57:b6:2b:ad:39:03:7f:1c:60:54:c1:17:e3:12:
a0:49:5a:9e:20:27:f0:16:0b:cf:4b:a8:d0:75:79:
87:57:b8:d5:64:1c:62:d6:6e:99:f3:42:48:89:9a:
b6:4c:ad:9b:e0:eb:a5:e9:d7:3b:04:fe:73:af:1c:
af:8b:7a:e5:bb:81:df:f8:bc:77:ff:db:0d:ba:0b:
26:29:65:7c:52:c7:aa:72:7e:c5:a1:24:8d:1e:86:
8d:39:99:53:41:87:d4:0b:ae:5b:25:25:5f:31:22:
bc:5a:85:1c:d4:ea:b0:00:7d:26:c5:cf:60:16:05:
29:c2:24:e0:57:ad:72:70:26:e0:af:ad:49:db:dd:
f5:fe:8e:c8:42:24:70:31:09:bd:11:d7:3e:1f:6f:
99:b2:9a:5c:41:7f:a6:47:f7:2b:16:24:c6:df:8a:
53:85:59:40:2f:c0:f1:21:36:57:42:89:68:fc:11:
7e:8d:f8:2a:21:73:67:d3:06:c0:f9:a2:b4:d6:e9:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:B4:B7:7F:63:AE:FD:A8:42:13:9E:61:7B:08:8F:6A:D6:99:A8
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:79:59:06:12:9d:2c:11:a6:f3:4f:35:b7:4e:de:74:91:ca:
76:56:6a:63:8b:ae:96:42:24:89:67:5f:57:c4:11:d7:c2:db:
77:44:e9:6d:89:65:d5:44:3a:13:2a:68:4b:1f:f3:13:03:50:
c3:94:22:6a:07:02:d2:0a:34:1d:40:89:58:5e:75:f4:26:f5:
9d:00:c0:dc:11:5a:13:5c:69:fc:c4:e0:f9:7c:03:2a:80:77:
1c:5a:90:7f:41:62:b7:81:b3:0f:b8:33:c3:48:88:a4:53:56:
b4:da:6e:2e:51:e2:21:03:55:6e:86:bc:ce:5d:86:24:eb:71:
90:7a:e6:50:7c:72:df:e4:52:bb:52:69:29:d6:d0:3c:90:99:
04:e6:09:6b:e4:28:d7:56:c1:b2:7e:96:9d:3c:41:ee:7e:98:
fb:d6:af:b5:63:70:ba:24:b3:a2:68:70:47:fd:96:0c:08:c6:
42:c2:0c:b8:26:b3:62:97:ba:00:4b:22:24:ad:89:30:74:bb:
eb:3a:dc:91:5a:12:2a:bd:0a:2e:44:74:d2:98:d6:71:69:41:
c8:5c:23:50:3a:39:68:c5:27:3b:b3:78:89:95:27:46:4f:87:
c3:4d:f5:8b:51:74:ef:17:50:ac:17:ef:6f:3e:f6:0b:bc:25:
0e:fd:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:16 2026 by rpki-client