Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: NXMKI/e3MP0IcmzqyFkdEPcbCXkl3CvTXUo+qskjjeA=
Subject key identifier: 49:3A:6E:75:28:71:92:22:78:04:B8:5E:FA:17:18:AD:CD:D1:6A:9A
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019E1D909217518E22D8804B44E0B1BB4127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 1426
Signing time: Tue 12 May 2026 19:01:14 +0000
Manifest this update: Tue 12 May 2026 19:01:14 +0000
Manifest next update: Wed 13 May 2026 19:01:14 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: qbJ9oK5afGtxtxSFEVdf/8GCGhuEPttNArKHf0WWmpg=)
2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:92:17:51:8e:22:d8:80:4b:44:e0:b1:bb:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: May 12 19:01:14 2026 GMT
Not After : May 13 19:01:14 2026 GMT
Subject: CN=493a6e75287192227804b85efa1718adcdd16a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:6d:9e:5e:37:3f:16:39:cd:77:70:35:af:
33:81:24:9f:57:01:93:b1:d0:90:19:72:ed:bd:28:
68:5b:c4:b2:6e:73:31:35:bf:a7:44:37:f0:53:34:
82:da:0a:2e:fb:58:6d:dd:79:ef:b4:d7:fc:dc:c3:
d5:1c:f1:d4:8f:d6:de:c9:a3:ea:1c:32:7e:f8:0c:
04:b1:1d:fb:d0:38:57:5f:46:18:03:e5:c2:d4:e8:
93:f1:57:25:bb:6c:8a:26:8c:77:84:f3:76:f0:37:
6c:65:e2:2f:16:3a:a4:ce:70:32:51:b7:00:e5:bc:
30:6b:e0:7a:81:30:2f:a5:d7:84:af:3a:e3:df:2c:
bd:05:cc:9a:c0:18:16:6b:e0:c0:ab:0b:72:b3:75:
f8:e6:b0:a3:fd:cf:12:ae:ad:39:97:36:85:65:f0:
ab:d5:75:7b:8c:86:cf:86:f9:49:1a:1b:45:44:e1:
36:69:5e:24:95:11:c9:b7:24:14:25:e4:bb:22:5a:
35:94:06:59:8a:b3:6d:eb:e7:9c:cb:f8:46:62:82:
fd:af:71:17:99:15:81:35:13:78:f9:95:3e:26:9e:
52:bd:08:5c:a1:9f:52:87:d3:45:ac:de:9c:87:8a:
3f:02:79:aa:32:ca:d8:37:46:d2:d0:c3:09:ff:7f:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:6E:75:28:71:92:22:78:04:B8:5E:FA:17:18:AD:CD:D1:6A:9A
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:92:8d:9a:2c:23:30:3e:9d:29:f8:ce:59:e3:c6:2b:75:e6:
b9:d0:3a:1c:eb:6e:f4:29:69:d7:1f:4d:bd:97:93:3c:18:19:
a4:eb:3d:a6:3c:1c:f0:60:7e:59:b7:c9:08:0d:2a:d6:63:f1:
17:23:04:db:f5:28:45:36:49:b9:28:a3:94:ec:15:1a:9e:97:
3c:73:c8:ce:b1:43:8f:ba:4d:0c:04:39:bf:e0:92:96:47:1d:
c4:80:a0:d6:de:dd:c1:5e:85:fa:f4:c6:61:40:22:4e:4a:f6:
96:f3:1b:29:20:39:a9:55:74:e5:a7:28:d4:71:f9:48:70:2c:
d4:6b:ca:35:c6:95:10:9f:30:41:49:03:a5:43:82:63:da:f9:
78:75:8a:5e:14:a8:01:2d:9b:1c:1f:b0:82:a5:12:9d:cd:9e:
64:07:e6:63:32:5d:c8:33:42:0b:1a:3b:bc:ee:89:39:14:52:
df:5c:07:3f:97:92:c0:d4:1c:94:16:fd:14:66:04:81:8e:f1:
0c:0f:d2:9a:3e:e2:a4:96:6e:8a:7a:0f:bc:b7:23:3d:26:0f:
58:27:8f:28:20:6f:27:7d:8e:5e:0c:ee:b0:c6:61:d5:eb:69:
13:47:eb:a4:63:20:d9:d8:bf:fd:88:82:86:10:9e:7a:43:91:
10:80:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:14 2026 by rpki-client