Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: ebkOOupvzUKXGLJxTxje+9eqXQcduAetrUSC0M7yuhY=
Subject key identifier: FA:6F:F7:0D:C4:8E:94:45:9E:5F:73:56:76:B3:FB:FB:EA:3E:CC:FF
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 019D2AA9B9EA1161BEEEF346AF26D227207E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 06C1
Signing time: Thu 26 Mar 2026 15:00:59 +0000
Manifest this update: Thu 26 Mar 2026 15:00:59 +0000
Manifest next update: Fri 27 Mar 2026 15:00:59 +0000
Files and hashes: 1: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: v1O3YNGmTiSn6F7O8LLFbXGc6SD7Pp7Qv5wzIMqefcY=)
2: mvCe3f9mkn2mitGHtGGloSB3nS8.roa (hash: 0bqyMFhS31D4KUaalrXamAweNa9OOdMZFGOzpiIcELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b9:ea:11:61:be:ee:f3:46:af:26:d2:27:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Mar 26 15:00:59 2026 GMT
Not After : Mar 27 15:00:59 2026 GMT
Subject: CN=fa6ff70dc48e94459e5f735676b3fbfbea3eccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:5b:26:6b:7b:3c:ae:2e:b5:68:a9:1c:2e:
81:2a:90:cb:fe:e7:d5:19:7b:45:7d:45:73:68:36:
a9:48:1c:c5:82:48:4d:7f:b3:66:88:d5:6e:fa:bc:
2e:8f:1f:98:33:ba:07:14:19:d0:f5:04:79:f1:db:
f5:46:8d:50:64:8e:26:29:7a:2e:09:3d:83:41:b5:
9a:ed:cd:a6:6e:ba:4b:7d:5c:89:2e:bc:2c:8e:12:
68:e4:e3:10:84:23:08:64:93:cb:13:ed:33:22:37:
e3:5f:e1:f7:7a:f8:1c:ad:ef:ad:cd:19:2b:c8:ee:
0d:85:f2:96:d2:d0:ed:08:63:1b:0e:88:75:89:5f:
e7:5e:5a:06:6e:34:07:5f:c8:2e:92:9e:32:30:e7:
28:f2:cd:1a:40:9b:8f:58:e8:70:04:25:89:e7:db:
d4:38:24:fa:8d:ab:9d:80:73:58:4f:01:a2:7f:e0:
15:df:5b:cd:53:a6:92:17:6b:03:52:0e:02:f2:83:
28:b9:49:c9:94:79:27:eb:e6:9d:1f:e0:6b:34:40:
f7:f1:8b:e0:01:28:7c:cd:e4:2f:df:8d:80:a4:51:
1d:55:1f:2d:3b:01:fb:b2:73:d0:05:5d:6a:36:f6:
f2:b6:ef:07:f3:a7:3e:2a:4a:92:41:ac:b8:af:fa:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:F7:0D:C4:8E:94:45:9E:5F:73:56:76:B3:FB:FB:EA:3E:CC:FF
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:a0:6e:99:2f:65:53:2f:93:30:d8:f9:5d:ec:ad:05:f1:
9e:e0:4e:b3:22:38:8b:81:7d:cb:8e:61:e6:60:b8:20:60:29:
1e:ce:5c:9d:45:05:a3:81:d7:ab:f6:8a:86:bc:46:49:71:5a:
88:6d:5b:97:65:e8:33:9e:c8:7e:47:cd:c9:32:bc:4d:0f:9b:
c2:6e:0f:44:ef:55:4d:cd:6c:ae:08:d3:10:8d:05:62:5d:b1:
8e:c0:0d:26:65:f9:b8:23:3d:9b:2b:aa:09:76:10:32:78:a5:
63:a1:8d:8f:ab:e3:8c:af:d7:47:ca:f2:1e:60:f0:3a:54:81:
53:28:46:54:21:49:95:0f:12:bf:fe:f9:70:ac:ce:9b:4e:38:
59:96:ad:0f:5e:a9:74:e2:b5:6a:52:4c:8d:e8:ad:85:c4:66:
f1:bc:34:ad:49:81:85:90:5b:24:3a:03:ac:7f:ff:29:c2:49:
4a:90:5d:20:e9:4a:16:c1:e9:ff:63:1c:ca:54:89:47:cb:aa:
bf:5a:f1:5a:65:08:a0:99:de:89:8f:44:95:44:d5:04:92:e2:
ad:42:86:5d:57:5e:23:c6:a8:fa:5b:17:56:b2:37:d6:d7:1b:
e5:a4:03:77:4a:2b:51:bb:be:df:0c:b3:84:6a:41:b6:14:a6:
72:82:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:10 2026 by rpki-client