Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: S8AsP2+vfylc3bn00wLABaAjNLH8CgTohRqGR7pHo6I=
Subject key identifier: 37:8C:88:0C:C9:F9:BA:22:85:08:5E:1A:39:4C:46:23:F2:E3:60:9B
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 019F90C7BDB73C92927BD4B6F3A8A124976B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: 0546
Signing time: Thu 23 Jul 2026 21:00:37 +0000
Manifest this update: Thu 23 Jul 2026 21:00:37 +0000
Manifest next update: Fri 24 Jul 2026 21:00:37 +0000
Files and hashes: 1: 9SiC8VvClFm5oj7EJB2aqFxam8E.roa (hash: jYfwOhgINxcVe6MhAnfE2LDgSX4sxkrgBuij/Vrgx3w=)
2: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: lXYEk1ZZuPKab83EFQdsmKWyHMVXoO1/DGpGnwRHYcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:bd:b7:3c:92:92:7b:d4:b6:f3:a8:a1:24:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Jul 23 21:00:37 2026 GMT
Not After : Jul 24 21:00:37 2026 GMT
Subject: CN=378c880cc9f9ba2285085e1a394c4623f2e3609b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:4c:ff:67:14:56:6d:8a:3b:0e:ca:f5:6b:
5f:70:bb:1f:d3:64:7e:4a:a3:e3:1b:54:73:35:f3:
56:f2:ca:71:0b:0d:d2:e6:27:63:c0:13:77:3a:67:
42:64:12:60:ae:07:b1:0e:79:4c:f6:ab:29:ff:40:
00:43:5e:85:07:e7:65:7a:9d:0a:5d:c8:6e:31:ff:
71:1c:ff:09:b9:f2:48:4b:8f:4e:eb:e0:5e:a2:1c:
c1:99:44:bd:ca:47:97:e6:4a:95:fd:43:25:3b:96:
11:a3:34:3d:07:93:ae:f9:1d:2a:37:c1:ed:cd:14:
31:be:b1:f3:4a:b9:3f:e8:c7:66:16:d1:64:c2:11:
a0:10:75:7a:6b:31:4e:ba:f6:c5:4e:4e:8c:23:41:
58:06:dd:ba:45:af:b5:62:53:97:c3:3d:37:cc:e8:
ce:58:1f:fb:c0:de:bf:af:e0:15:ba:ed:66:7c:8a:
84:cf:1c:28:33:88:e7:51:e8:3d:fc:79:59:ed:29:
bf:12:28:7e:74:d5:82:90:cc:b0:ad:49:1a:22:44:
13:ca:8d:92:41:86:90:f2:0c:6c:1e:71:a4:6d:82:
c6:f8:8a:65:1f:2a:08:de:8f:ac:f4:ed:e6:18:9b:
f4:c7:9e:05:95:29:05:55:ac:bc:72:3c:01:b5:d2:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:88:0C:C9:F9:BA:22:85:08:5E:1A:39:4C:46:23:F2:E3:60:9B
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:6c:99:6d:cd:5f:96:e3:b7:1e:39:5b:bd:2b:13:f7:39:
47:30:f3:41:45:5d:66:98:57:8a:24:02:91:61:87:3f:b6:67:
68:8c:ab:1b:6f:42:99:98:4f:d7:eb:23:ec:65:1a:bf:98:e8:
b0:18:82:49:63:48:20:e4:0b:2f:c1:68:30:85:27:ca:ea:90:
78:ce:25:51:ca:2d:86:fb:4b:e8:22:58:0f:c7:72:5e:00:a5:
62:ba:fa:82:78:dc:93:e1:4c:8a:e3:b1:76:66:2e:a2:9b:4d:
dc:28:b2:e0:f8:49:a1:25:ed:0b:71:74:7e:5e:b9:22:b3:22:
aa:32:5d:93:fb:3e:23:47:17:c4:77:d6:9b:be:30:5a:20:ea:
52:33:55:5b:00:97:48:03:cb:34:6b:c4:0a:c1:92:b9:bf:7f:
54:c6:cd:6e:7d:cd:ee:95:f3:8c:1a:d5:ac:e6:58:5d:31:2d:
66:e8:39:13:4a:e3:60:9a:bb:75:0c:4a:14:b2:fb:8e:6e:b8:
52:2e:90:b3:a8:75:88:87:0d:02:22:af:fb:5b:88:db:66:ae:
56:78:0b:f6:aa:3e:f6:c2:31:5c:09:17:d6:1e:16:fb:07:23:
33:03:5d:b4:3b:df:a5:38:8e:57:d4:07:92:24:71:3b:f0:ce:
4f:ac:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:42 2026 by rpki-client