Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: WhYrGPQYwW6m6M21gS3m8RnL9d2UdzLSoveh5EBsoA8=
Subject key identifier: 86:0F:BC:16:7E:8C:86:15:E5:2F:07:CA:9D:ED:AA:89:68:F1:0D:1F
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 019D28BBDC057FBD84768A1496A695A1C2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: 0407
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: 9SiC8VvClFm5oj7EJB2aqFxam8E.roa (hash: jYfwOhgINxcVe6MhAnfE2LDgSX4sxkrgBuij/Vrgx3w=)
2: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: Xw0+UExRX7PBHHhl/pg+671GOY+sy1UrYOQL4mBLu7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:dc:05:7f:bd:84:76:8a:14:96:a6:95:a1:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=860fbc167e8c8615e52f07ca9dedaa8968f10d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:55:be:96:f7:25:14:f8:a5:20:d1:3a:17:
a2:47:cd:3d:8b:ad:7a:5d:f7:fb:d6:c8:e1:ac:9a:
b3:67:5b:19:fb:28:0f:ea:df:10:cb:a2:66:ba:4a:
12:42:45:2e:ce:8a:4f:be:9c:eb:da:67:40:9a:f5:
82:dd:02:27:83:0b:fd:fd:ce:0f:a1:6b:05:85:62:
14:74:1f:96:e6:f0:be:c3:0c:2f:ec:c2:16:56:72:
33:83:c4:e2:56:33:67:5a:ad:28:dd:10:1e:9c:2a:
88:33:9f:e2:92:cb:d3:a7:c9:d5:3c:a8:1a:c6:0e:
ae:2a:35:80:df:64:c9:85:4f:53:5b:6c:65:d9:ad:
39:e9:0c:2a:0b:c3:48:df:1a:01:28:ff:eb:22:5d:
cd:fd:37:e9:05:51:4a:94:62:f1:aa:e2:38:fe:e6:
03:12:df:95:f8:5b:56:23:8b:c2:d1:ab:60:14:7d:
2d:a0:87:1b:70:81:26:aa:6c:d9:e5:cb:49:64:1b:
08:55:34:50:dd:ed:64:ba:04:59:c6:1e:22:d5:a8:
15:bc:10:d9:db:65:ec:83:14:e5:0e:c5:ae:14:04:
af:42:0e:61:e5:6c:b9:79:eb:de:77:2e:4d:d1:31:
cc:00:07:4e:27:6a:11:83:d3:e4:e5:dd:04:31:d0:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:BC:16:7E:8C:86:15:E5:2F:07:CA:9D:ED:AA:89:68:F1:0D:1F
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:86:29:13:5c:25:64:75:5d:3e:e6:28:78:55:57:b6:c4:
c4:86:6f:87:73:52:04:2b:43:1f:6f:bb:ce:46:81:f1:6e:ff:
ce:ae:58:e3:b8:5a:9e:f8:b5:c4:e6:39:fd:c3:2a:a7:53:70:
4b:85:55:29:54:1d:4c:68:64:9e:bc:5f:c5:b6:04:d5:0c:99:
6f:7f:b8:d3:95:37:ae:bf:5f:31:e9:d9:9c:b6:d7:76:16:c1:
d4:a5:3a:ea:1f:6d:63:17:61:73:3c:14:50:7f:ba:62:ea:84:
9a:22:2a:e4:ab:ab:f1:3d:73:8f:8b:c9:bb:33:5b:21:cc:5e:
7f:5a:aa:c6:3a:7f:0b:40:dc:b9:35:52:a9:3c:fa:67:2a:af:
92:41:5f:5a:11:fb:ea:b4:3b:1f:76:25:29:9a:59:16:bc:f0:
05:70:ce:63:45:b3:2c:e9:57:d8:53:94:85:61:c8:0a:9f:7e:
a8:51:03:6b:9f:4a:32:3c:dc:3b:06:7b:f7:7f:eb:c8:ee:e9:
1e:ac:d2:a6:80:db:ff:7b:0f:27:67:28:f5:b0:97:0b:50:e0:
4f:b8:5a:65:38:b2:0f:7c:71:8d:8d:76:be:33:a5:33:00:39:
8a:03:73:82:8e:3b:41:7b:61:29:cb:b6:ac:ef:4c:c6:71:3e:
6e:24:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:13 2026 by rpki-client