Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
File: CO0aVoa6aCicbP5MfDbgN63hHso.mft (raw, json)
Hash identifier: 44dW2ggwI1iHKOagiN4uUchwue6SMZwx6N+7nyVPrsg=
Subject key identifier: 84:28:D8:C3:85:AB:81:C6:20:F4:66:76:A6:96:6A:5F:CA:BD:45:4D
Authority key identifier: 08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
Certificate issuer: /CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Certificate serial: 01A0D15BDC22F3A93B9FDAE03D28C47231A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
Manifest number: 05EC
Signing time: Thu 24 Sep 2026 03:00:53 +0000
Manifest this update: Thu 24 Sep 2026 03:00:53 +0000
Manifest next update: Fri 25 Sep 2026 03:00:53 +0000
Files and hashes: 1: 9SiC8VvClFm5oj7EJB2aqFxam8E.roa (hash: jYfwOhgINxcVe6MhAnfE2LDgSX4sxkrgBuij/Vrgx3w=)
2: CO0aVoa6aCicbP5MfDbgN63hHso.crl (hash: +WYEpmcka+VZ0Uo0//EOARygw+NP5M6uIkK5lHGMbGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:dc:22:f3:a9:3b:9f:da:e0:3d:28:c4:72:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ed1a5686ba68289c6cfe4c7c36e037ade11eca
Validity
Not Before: Sep 24 03:00:53 2026 GMT
Not After : Sep 25 03:00:53 2026 GMT
Subject: CN=8428d8c385ab81c620f46676a6966a5fcabd454d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:c3:ce:7d:f2:13:0e:39:c8:92:d7:c6:9d:
9a:83:db:b6:a2:fd:e1:e5:8d:44:7c:02:16:ab:e3:
9c:ee:ff:74:b2:00:69:05:48:13:40:ba:50:6c:4e:
8d:b5:95:91:a6:86:1c:0e:60:b7:dc:a3:18:00:69:
8c:bd:a3:1f:ab:8a:ed:d9:9e:f7:3d:7c:ef:ac:38:
cd:df:2c:dd:c1:88:e2:f1:35:ca:88:5e:aa:00:75:
7d:21:96:03:96:1f:5b:10:87:94:f9:92:ad:82:bd:
15:06:49:38:73:67:43:b7:5e:4d:33:a1:63:55:71:
7c:27:af:a8:4f:74:78:1b:a2:25:f1:34:7a:77:f5:
d5:f8:22:cb:6c:68:2d:14:fc:54:91:96:30:71:f4:
d2:03:47:2d:71:a1:88:45:bb:68:38:f0:2b:4f:27:
a9:0a:ae:1b:27:b0:b3:16:e1:6a:63:44:3a:d6:38:
3a:28:53:9b:b5:c6:7e:52:0a:9a:5f:8d:d4:9e:b8:
76:9d:a9:8c:86:55:82:ba:c9:e8:b7:59:06:41:49:
c7:12:51:6d:d9:50:db:a4:e5:27:9b:7e:25:4f:20:
74:cd:6e:d4:d7:3c:95:23:77:66:7b:fe:15:e0:68:
42:f4:15:45:ef:e9:56:70:2d:bf:65:eb:af:91:cb:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:D8:C3:85:AB:81:C6:20:F4:66:76:A6:96:6A:5F:CA:BD:45:4D
X509v3 Authority Key Identifier:
keyid:08:ED:1A:56:86:BA:68:28:9C:6C:FE:4C:7C:36:E0:37:AD:E1:1E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CO0aVoa6aCicbP5MfDbgN63hHso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fcb773-1f5b-4421-b1d4-90ab79e7ee23/1/CO0aVoa6aCicbP5MfDbgN63hHso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:19:3d:02:33:e6:01:35:fc:fa:9a:28:57:af:24:3f:31:
bd:9f:71:ef:9f:5a:6c:56:81:14:15:3f:1c:45:78:88:6e:92:
e9:23:a6:89:4c:23:82:4d:1c:9a:60:77:a4:cf:8b:40:4c:3a:
ca:9f:d3:79:a5:b4:8a:05:eb:04:a4:0e:c5:ba:7f:11:62:57:
a8:16:03:2c:00:11:c7:df:30:0e:75:de:4c:29:38:4c:b3:88:
92:f3:53:aa:64:34:2d:89:56:ea:ff:9f:7a:ce:e2:5d:3e:14:
9d:02:1f:8e:32:cb:b0:a2:9e:99:41:12:a4:98:f2:5b:a2:12:
46:00:d6:29:77:29:ef:c4:a3:18:62:be:6a:78:46:48:46:55:
d5:07:bc:87:c2:04:80:14:08:67:fe:66:67:f9:45:34:74:6d:
9d:fb:8e:7a:f5:6e:5d:dc:de:a7:f9:65:c9:f6:06:a2:d5:77:
b9:2f:3a:8d:78:ef:fc:d2:08:b9:d8:e9:f9:82:07:f6:b5:58:
d9:cd:fa:e1:93:96:36:4c:5d:4c:87:73:64:38:98:28:e5:10:
18:c6:55:42:d8:bf:24:7c:a4:e8:f8:99:04:a7:f1:e6:94:e5:
a7:b9:b7:29:d4:db:89:e4:4f:0f:00:3a:aa:eb:85:70:88:55:
cb:8f:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:00:42 2026 by rpki-client