Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: NpUFvwGsp47/rbU09uLmnYsSs3IRrAPJWdt3GJyrNUA=
Subject key identifier: 43:5F:31:83:A4:D2:0C:8F:67:76:95:BD:DD:68:4C:D2:61:0D:DB:CB
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01A0CF6CEC5B3B3D15AF2C3EBC5BA03F4E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0FEB
Signing time: Wed 23 Sep 2026 18:00:17 +0000
Manifest this update: Wed 23 Sep 2026 18:00:17 +0000
Manifest next update: Thu 24 Sep 2026 18:00:17 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: o+gqHaiSrs0xUFp5l1cNhvk7qoinO/AnRJCfdiNrxgQ=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:ec:5b:3b:3d:15:af:2c:3e:bc:5b:a0:3f:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Sep 23 18:00:17 2026 GMT
Not After : Sep 24 18:00:17 2026 GMT
Subject: CN=435f3183a4d20c8f677695bddd684cd2610ddbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:f9:96:6f:e7:e9:1e:20:d5:2c:93:6f:59:
cd:e9:f1:6d:09:3f:6a:fd:ac:f6:7f:36:4d:51:f9:
f7:13:eb:7d:20:74:73:0b:a1:fe:6b:64:8d:be:b1:
73:9c:83:32:fe:b2:c7:9b:ee:eb:02:53:1b:4f:49:
bd:e9:01:41:db:ad:a3:ca:0b:d3:00:16:af:72:1b:
26:63:d8:91:27:d4:dd:d9:53:b4:5b:ab:34:43:08:
10:b7:40:52:fc:71:13:2e:77:66:70:31:b6:e0:13:
2f:37:12:3f:f2:ce:1f:d4:63:fb:07:c0:d3:77:d8:
7b:fe:6c:8e:42:2b:6e:b6:6d:ed:cc:2c:e3:8f:77:
44:bd:de:6d:e3:ac:76:9d:3b:c7:1c:af:ed:9d:75:
9f:d4:2d:b7:20:53:02:de:c0:1b:5c:00:fb:d4:9c:
69:d7:c3:98:26:48:bc:9c:62:cb:9d:c2:77:fb:40:
ed:7f:4d:b6:42:73:b9:b0:fc:ef:e6:52:d8:1b:14:
4b:74:f3:91:db:8f:e1:c6:9c:32:5c:59:0a:87:04:
52:bf:fb:27:0a:7f:75:8c:f0:79:8c:26:dd:08:b8:
be:7f:af:3d:22:3f:d7:77:6c:57:ba:da:43:96:bb:
92:fb:26:36:f0:74:46:c5:b3:61:86:e9:77:b4:13:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5F:31:83:A4:D2:0C:8F:67:76:95:BD:DD:68:4C:D2:61:0D:DB:CB
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cf:dc:21:6e:bb:4b:3b:a2:75:e2:ca:25:24:8f:a5:f8:73:
ff:b3:47:ca:85:9d:7e:61:99:7f:0e:22:35:9b:21:c9:1c:ee:
4b:7d:c2:e9:25:4d:cb:14:17:ad:57:0e:13:03:e9:c1:2f:7d:
37:48:ac:a5:5d:c8:a5:5b:8d:3b:c1:41:c5:d9:e1:4a:fd:78:
0e:7e:38:f0:cc:04:01:76:2d:88:36:74:83:5b:86:84:2f:14:
7f:a5:60:31:cd:f5:f6:30:e5:a2:cf:f4:71:fa:87:67:87:06:
7b:f4:5f:17:c6:06:e7:3f:20:f7:37:5d:e4:5a:44:83:16:9e:
64:b3:23:bc:7b:80:55:83:c2:31:d7:5c:be:4e:f8:76:e4:1a:
5b:3a:72:0b:93:25:86:57:02:0b:1e:cc:e2:4a:4e:fd:f3:0a:
24:72:c6:b6:bd:68:6e:3c:e5:02:a5:98:6e:aa:a3:f4:5e:1e:
30:39:e6:60:fa:db:43:6b:38:b9:72:a6:6d:d7:ce:fb:65:8a:
40:f7:c7:3c:fc:60:08:fc:5a:91:4f:80:04:89:76:3c:7c:f8:
c0:b1:dd:d1:71:d3:db:a2:b7:cc:2a:54:b4:c5:b4:32:fe:5f:
45:fd:fa:3b:95:00:f9:b6:50:7d:85:4a:01:dd:32:37:12:bb:
7e:57:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:56 2026 by rpki-client