Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: 9R/nSUOrGuM244D6IFynDvngz87ZOapHfzFOUMq0TIQ=
Subject key identifier: 7F:3B:53:0B:B3:A0:BB:CE:66:04:5A:F4:FA:46:4A:EB:EB:2B:35:B5
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019F90C79D23AE1E72B8CF7265CD9DE8FA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0F46
Signing time: Thu 23 Jul 2026 21:00:28 +0000
Manifest this update: Thu 23 Jul 2026 21:00:28 +0000
Manifest next update: Fri 24 Jul 2026 21:00:28 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: G9eDubJczMM+pTzlDokbqCd7cvQcLNeDgGPlga0KiuU=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9d:23:ae:1e:72:b8:cf:72:65:cd:9d:e8:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jul 23 21:00:28 2026 GMT
Not After : Jul 24 21:00:28 2026 GMT
Subject: CN=7f3b530bb3a0bbce66045af4fa464aebeb2b35b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:7a:01:f5:d8:46:f6:98:ef:15:5e:a4:52:
9b:8c:fc:54:0c:00:1d:dd:07:b5:2a:34:05:cf:fa:
b3:90:3a:a8:de:76:8a:50:2e:68:e7:db:23:8f:09:
60:aa:9c:f8:4a:cf:42:6e:41:c7:ef:29:5c:c0:30:
d8:e1:bb:f4:74:7e:e0:56:87:e8:d5:a2:e5:f1:bf:
05:97:ff:4f:73:f0:f8:ed:e9:79:4b:4e:93:10:30:
70:3c:e8:2e:d3:25:15:59:9b:3f:26:65:79:9e:54:
33:3a:e6:15:d9:27:44:3c:83:6e:42:cd:eb:4f:96:
7a:8f:0a:b5:89:76:5b:ea:d3:be:ed:e3:4a:43:d4:
c6:fc:31:d2:b2:72:7b:b5:1a:9a:01:07:69:24:03:
72:2e:01:da:99:a3:11:b2:92:0a:72:39:15:53:d6:
08:f5:7f:26:4d:ca:88:7d:8d:56:e0:27:83:20:3c:
f8:aa:eb:a9:7a:b5:43:56:9d:26:e9:9a:cd:2a:98:
ce:86:4b:00:58:19:8b:5f:37:76:1e:75:a9:c1:f0:
22:b5:0a:d4:49:73:9a:88:5f:b1:6e:28:22:10:d0:
c7:ec:85:e3:02:45:bb:7f:4f:3d:c7:83:ab:76:5c:
53:e3:b1:92:d3:3e:13:98:a5:92:21:32:26:e5:7b:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:53:0B:B3:A0:BB:CE:66:04:5A:F4:FA:46:4A:EB:EB:2B:35:B5
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:64:f8:23:d4:71:7e:21:6b:f2:4f:38:46:4e:c2:01:8d:
46:14:dc:22:92:cc:1a:e4:bf:99:a7:dd:e9:11:93:67:d9:78:
38:68:fc:d1:f5:5d:19:d9:59:d9:52:62:3c:44:4c:64:f3:14:
01:d9:b9:d7:d2:08:53:77:cf:40:ac:08:75:9e:2c:8f:b8:a8:
4a:e6:3b:04:6a:e8:62:23:db:b4:b3:38:b1:e1:cc:b3:1e:91:
68:57:7c:75:71:fd:bb:48:65:e1:e2:8a:97:3b:b1:36:ce:41:
ce:1a:d9:53:f2:3e:f9:10:6d:49:5c:55:dd:f6:01:88:0a:eb:
74:e9:e8:e4:44:74:f1:f8:7d:6c:17:cb:57:d6:5a:84:93:01:
ea:9c:f0:1b:fc:2e:56:25:7f:3a:50:79:99:02:07:96:0f:bb:
b1:12:d8:e4:85:5b:d5:6f:69:b0:40:4a:2a:cc:7c:48:18:be:
27:91:c6:cb:e7:d3:7f:b7:7f:6b:d0:70:12:8d:ce:bc:b7:9d:
8b:5d:dd:27:74:bd:db:4a:85:34:87:bd:e8:4a:50:f0:8e:fb:
09:a5:6f:8f:ad:a7:28:c2:13:21:97:5d:5a:c3:a0:87:2f:c7:
0e:13:d9:37:95:a4:b9:6c:c7:1b:35:85:fe:a9:64:31:af:64:
c6:0d:62:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:08 2026 by rpki-client