Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: U+d2loCqg9P2SDFLt9BDun9VyDd9kJ8kT+nKEGjvqeA=
Subject key identifier: 49:BA:8D:8F:F4:21:93:91:D7:F0:AA:C3:D3:BF:1F:2F:55:B6:65:23
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019D28BB58256D7A8BC893877C1621DCFD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0E07
Signing time: Thu 26 Mar 2026 06:00:59 +0000
Manifest this update: Thu 26 Mar 2026 06:00:59 +0000
Manifest next update: Fri 27 Mar 2026 06:00:59 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: ahasfmEDFgHWJABgGnrUCOhB1Dm6WDPNdhpGLrBFFBI=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:58:25:6d:7a:8b:c8:93:87:7c:16:21:dc:fd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Mar 26 06:00:59 2026 GMT
Not After : Mar 27 06:00:59 2026 GMT
Subject: CN=49ba8d8ff4219391d7f0aac3d3bf1f2f55b66523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:bb:07:47:c8:9f:8d:a2:95:04:dc:52:5a:
00:7a:be:5c:70:ec:95:1e:dd:7b:3f:c4:ef:25:fa:
dd:33:9e:a0:f9:ed:f3:3a:88:10:cb:2e:a0:d8:d8:
65:6a:36:fc:3f:a6:0e:e5:8b:98:77:92:f9:2d:7a:
9a:fd:5e:aa:a4:ea:c3:83:e1:ed:fc:0c:55:4d:d1:
fe:ce:14:66:5d:17:a4:0b:e1:84:e1:61:3f:78:5f:
d4:e4:77:d6:2e:7b:4a:f3:a8:61:f5:43:77:35:df:
53:bb:24:3f:e4:71:de:93:9b:a6:ea:e1:d0:dc:9d:
0f:1b:35:9f:ef:5c:f5:17:00:08:8a:fb:e7:e2:37:
72:6a:f0:7e:d0:d5:76:67:b7:7f:c3:e1:c5:6c:d3:
d8:67:2b:82:ca:53:b0:52:5a:db:82:28:cf:fa:9e:
f2:66:4a:28:60:d7:aa:83:32:b4:38:27:4a:6e:de:
af:15:e9:8d:15:e5:19:4d:42:02:0a:4e:40:c6:58:
38:97:2e:54:c2:16:5d:86:9a:6c:c2:9b:ce:de:b1:
38:63:62:e9:66:e4:80:dc:16:2b:9e:e5:d2:94:71:
a3:b6:b2:33:3f:3b:fc:8a:2f:0b:6c:47:16:61:a0:
56:5c:bd:99:24:7e:ae:24:62:e3:3d:4a:69:fe:d7:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:8D:8F:F4:21:93:91:D7:F0:AA:C3:D3:BF:1F:2F:55:B6:65:23
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:ad:ea:60:1f:39:5e:7b:d8:90:f9:7f:6d:78:10:cb:76:
68:79:15:e0:13:61:26:c2:af:d5:6d:95:d3:77:f1:84:90:4c:
e7:d6:8e:50:e2:d2:8a:7b:b5:0d:84:1f:23:1e:0f:cc:fd:79:
57:f0:3b:62:9a:80:81:bf:fb:3c:74:a6:95:61:b0:da:3e:5d:
fd:df:41:0e:4f:01:01:9f:56:78:2e:41:ec:3c:22:4e:57:61:
46:45:c6:f1:3c:1b:90:b8:2a:f1:3e:56:7a:ed:89:3f:fc:ae:
32:92:59:43:b0:94:a0:77:63:25:9c:ee:ed:6c:d2:b9:14:f5:
d3:7c:0e:ac:a2:9c:5b:68:5c:1f:72:f1:e1:b8:51:a9:75:02:
be:80:e6:eb:33:67:e0:db:02:9f:aa:1d:73:75:8f:6d:02:81:
2d:e6:49:76:03:f9:6f:65:25:b8:31:a7:b8:92:70:55:95:e1:
a0:7c:1b:f3:c8:d4:1b:57:6f:a8:b5:c2:2e:a5:a5:0e:39:cb:
3c:75:41:b0:96:24:29:3a:31:5e:29:92:66:d9:6a:da:13:8b:
2f:4f:5b:40:57:f9:bb:96:79:e0:53:10:18:cf:22:b1:33:a8:
53:df:db:95:4a:32:e4:e9:69:ba:4c:f7:17:d1:d1:dc:97:e9:
a5:64:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:35 2026 by rpki-client