Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: d1IX4E57m90NCj8beBR6zIScwnRtHFN8QZ16WBJuoE4=
Subject key identifier: 21:94:D1:28:12:2D:7A:63:41:F5:A2:83:BB:79:9A:9F:90:A6:0D:F9
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 01A14B73ADDC4FD20BFCD7AD606538697439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 08A7
Signing time: Sat 17 Oct 2026 20:00:34 +0000
Manifest this update: Sat 17 Oct 2026 20:00:34 +0000
Manifest next update: Sun 18 Oct 2026 20:00:34 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: QcaVN/456FyWoo5VN7y8JspTvbBp9CWR1kWqeUDxAC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:73:ad:dc:4f:d2:0b:fc:d7:ad:60:65:38:69:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Oct 17 20:00:34 2026 GMT
Not After : Oct 18 20:00:34 2026 GMT
Subject: CN=2194d128122d7a6341f5a283bb799a9f90a60df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:3d:9d:f1:6d:b4:62:f9:4b:dd:f2:19:0a:
cf:b1:3c:76:33:dd:27:ec:6e:c8:24:1e:17:b4:74:
01:94:f5:38:81:1d:ce:fa:44:56:ec:fd:ed:ea:96:
39:db:9f:1d:ab:b3:94:b7:e5:f1:1f:17:01:54:28:
2c:99:b3:cf:6d:cf:84:88:1a:68:a2:89:57:fe:74:
6d:63:72:64:d3:7e:96:f5:d1:6d:c9:9f:76:43:c2:
36:d5:62:f7:a7:82:b2:be:27:88:37:29:96:25:93:
15:cf:77:fc:ad:ff:58:c2:5b:08:33:6e:cb:4f:fa:
67:3f:8d:24:65:b9:ee:9f:5d:c4:db:19:3b:05:bb:
72:a5:81:d2:6d:d8:db:2b:e7:77:47:2e:08:7d:da:
f5:a1:fd:e5:b4:ac:bf:ad:95:87:a6:fb:bf:42:db:
da:07:19:64:49:48:54:4b:53:7e:a2:d6:7a:03:5b:
e4:d9:19:24:47:7c:88:ae:c3:c4:d1:0c:85:16:66:
42:21:46:72:70:0e:5c:e8:e0:34:b6:1b:e3:69:af:
f9:09:df:58:82:65:5e:12:b5:7e:54:25:36:c3:ae:
50:53:6a:93:a2:4a:77:75:f3:0a:99:d3:d6:75:e8:
f2:a3:3d:4f:7e:be:bc:aa:0b:74:c0:22:a0:79:59:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:D1:28:12:2D:7A:63:41:F5:A2:83:BB:79:9A:9F:90:A6:0D:F9
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:9d:3a:48:a9:09:ab:ef:0d:a1:a9:1c:e9:39:f2:66:c2:
24:ae:7f:69:65:6c:18:2c:19:1d:cf:54:31:87:dd:c6:c6:77:
5b:5c:87:58:88:a9:3c:c1:7c:ed:19:42:b1:a5:67:60:f6:10:
d2:31:f1:e1:f5:de:45:33:c6:12:18:8f:34:ab:48:f1:a7:86:
e5:09:01:89:76:e6:68:b7:2e:11:23:7b:4e:8b:b1:55:dd:5b:
7d:c4:22:96:bf:42:6b:73:8c:68:a3:df:7a:f1:91:52:c0:73:
d8:65:1a:a8:07:e5:03:62:75:29:03:1a:b3:53:a1:66:01:18:
34:9a:53:27:8b:c4:e9:85:62:8d:0d:d9:60:5b:66:12:02:3c:
1e:04:34:f3:f7:7b:b2:5c:e3:71:d7:49:a9:5f:2a:eb:04:40:
11:1f:ed:76:40:22:e8:50:a4:66:3d:00:37:5f:6c:34:7b:99:
8c:13:b0:53:d5:77:ea:7c:97:8f:cd:77:7f:68:45:bb:70:8a:
9c:d2:aa:89:16:ae:c7:87:67:ff:9b:99:eb:24:1e:a5:6e:e8:
da:97:a7:6b:6f:6e:f0:c0:51:88:25:10:42:5e:45:2a:72:ad:
8f:b6:1f:33:18:34:8c:3e:74:ea:66:dd:ea:1e:9a:f6:a2:8c:
72:b1:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:09:11 2026 by rpki-client