Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: R2BpCZ9mrGt+/QbITeVHZJTuVWw209rPuoi+SAAGBlg=
Subject key identifier: 19:A5:A3:CE:48:A5:3F:DC:71:A8:18:CB:00:47:69:00:5A:7B:42:EB
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019D284D5714889844B1C34A59DDAE17CBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 13A7
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: g7XsAOghVZtrtPSKWrAK9qGz1AS/GMfIATdvsgOD/os=)
2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:57:14:88:98:44:b1:c3:4a:59:dd:ae:17:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=19a5a3ce48a53fdc71a818cb004769005a7b42eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:56:fc:69:20:0c:99:e8:af:9e:f7:88:e5:
2b:88:4a:12:09:e3:21:2e:d6:ae:9c:19:df:f0:56:
b9:de:84:13:71:76:ac:42:5b:73:8d:38:5c:c0:b3:
0e:68:18:33:0c:56:9b:22:c6:62:dd:fa:1b:56:75:
71:91:9b:de:bb:97:91:33:c0:8e:4c:b8:9e:60:67:
5e:95:89:15:71:de:fa:d3:fd:44:b0:c8:e2:8c:4f:
ab:89:a9:0d:a4:11:79:b0:76:52:3a:df:34:04:fc:
5d:2a:9a:91:11:3f:68:d1:e6:a7:18:92:20:5d:94:
ef:26:e5:c2:64:db:79:81:b3:13:e5:93:0a:ba:07:
22:20:3d:d4:f3:1d:3a:86:32:61:cb:63:24:d1:73:
78:0c:1b:94:e5:7c:bb:2b:9c:d5:1d:bd:55:e6:e3:
29:36:ae:2e:aa:43:ec:ed:30:dd:11:a0:2f:b7:3d:
97:e6:0d:28:50:8b:3f:75:a9:de:be:17:aa:0c:8d:
36:5c:28:2c:af:a7:62:2a:50:08:57:f1:3d:4b:c9:
a3:3a:8d:78:01:9a:36:df:13:02:7b:a2:0a:03:40:
d9:4e:91:ca:0b:f6:1b:ed:cc:1b:89:f0:67:f4:4e:
6b:6f:11:4f:cf:da:c5:fe:6e:6f:98:cf:7e:0a:63:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:A3:CE:48:A5:3F:DC:71:A8:18:CB:00:47:69:00:5A:7B:42:EB
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:54:64:4e:26:d1:48:76:9d:53:1b:e8:c1:56:5c:98:e8:
81:b6:20:69:fb:08:0a:be:98:aa:45:75:a6:60:ae:42:7f:3f:
57:a9:9e:b8:2d:88:0f:cd:dd:09:0b:10:52:53:a3:b8:07:03:
7b:09:ab:87:20:0f:02:d3:48:b2:6a:90:40:c8:9c:cf:5a:ca:
e8:0c:b3:4c:dc:72:f9:c5:07:1b:a0:b2:af:28:cf:0c:5e:3b:
76:e2:4c:85:3e:2b:94:57:b1:74:69:82:93:63:70:b8:88:26:
36:44:fc:2f:41:24:49:a8:c6:6b:4c:11:cd:ee:d7:9b:0e:79:
85:5d:cc:9d:9d:f3:39:25:f5:94:0f:8e:38:40:91:f5:34:27:
0e:fe:8c:64:68:33:67:9d:fa:92:76:59:49:7e:8d:3d:ba:43:
3f:8f:f1:6d:ce:ee:2a:49:25:8b:06:e5:6c:3b:a5:db:53:f1:
93:69:b7:fe:b1:d2:8d:9e:c6:9e:9f:0d:a2:61:ca:44:5e:37:
bb:90:1b:a9:18:62:07:5f:6e:95:1f:f6:73:ee:b9:d6:91:5f:
ba:52:6a:66:fc:10:86:2e:0e:03:8d:5f:64:df:be:0e:0d:d3:
13:95:c6:b3:d3:6c:32:01:e3:36:0c:e4:8e:ae:b3:fd:63:03:
ee:36:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:09 2026 by rpki-client