Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: 4mndBbgU7IQ2cIIWlH0OBzLSV4igdM+4OviKCZ/N7cc=
Subject key identifier: 88:78:FE:42:FF:16:C0:3F:3F:FD:40:75:D2:4F:70:38:E2:FC:8E:7F
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019F197A82A6D9A336846E9D540E29DBBB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0784
Signing time: Tue 30 Jun 2026 17:01:26 +0000
Manifest this update: Tue 30 Jun 2026 17:01:26 +0000
Manifest next update: Wed 01 Jul 2026 17:01:26 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: nUMRXPcmJ7PbfbBRaT3KIDX7DIgE+HN8nLI3UNsLgEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:82:a6:d9:a3:36:84:6e:9d:54:0e:29:db:bb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Jun 30 17:01:26 2026 GMT
Not After : Jul 1 17:01:26 2026 GMT
Subject: CN=8878fe42ff16c03f3ffd4075d24f7038e2fc8e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:00:6a:59:55:48:2a:fe:d7:87:85:18:3c:
1f:eb:16:48:f4:d5:73:db:a6:4c:a5:21:6b:b0:cd:
4d:b0:dc:7b:fa:b5:aa:c0:5b:ac:b0:d8:d8:dd:b5:
ef:ee:17:b0:4f:e5:a1:0d:4b:38:3d:95:e5:55:e4:
5f:b5:cb:f1:9e:b4:cb:ec:ab:a2:b2:dc:6e:ef:4f:
55:76:d2:30:72:02:4c:28:22:01:4a:6a:91:8b:0b:
62:d0:5b:ae:42:0e:bf:e5:4f:76:36:9e:f0:86:e0:
90:51:7d:35:3a:3e:2f:37:61:ba:03:0c:e1:4d:0f:
96:0d:1f:b8:96:f5:d7:7f:59:f2:ae:ad:79:fb:96:
4f:4c:a3:f6:d0:36:63:e0:49:9c:81:90:02:18:2c:
79:30:86:74:51:45:56:08:39:78:7f:04:f9:fd:2f:
b7:a1:9d:65:04:de:86:61:20:ae:c7:93:8d:b2:f8:
aa:d1:ac:7e:a8:e5:05:22:e0:00:d3:b1:7b:ef:d9:
eb:eb:d7:9c:66:ea:a8:27:36:3a:e4:ba:de:98:01:
cb:b2:bc:63:81:1d:c8:f2:ba:f4:ff:7f:b4:a4:0a:
b8:ca:a8:9d:d3:95:8b:b7:1f:ef:d4:c1:1c:6f:72:
81:c1:5a:35:16:6e:64:14:2e:f8:a3:2a:25:52:cf:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:FE:42:FF:16:C0:3F:3F:FD:40:75:D2:4F:70:38:E2:FC:8E:7F
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:1d:cd:2b:5a:fa:5c:5a:de:58:ef:54:c9:a4:66:7f:28:
d5:77:de:7b:a0:6d:00:1c:91:b6:df:2d:8a:97:20:d9:d4:81:
f1:d5:20:37:27:7f:3c:3d:91:b6:83:ce:89:6e:36:a5:c4:80:
33:72:1c:cb:dd:8a:56:f6:29:ea:c4:92:46:e2:0b:37:d4:ff:
d4:bd:4f:1c:a6:bf:cd:75:ee:a5:0e:59:ef:72:8b:c8:d4:aa:
46:96:23:6d:0e:18:38:0f:04:d5:8f:8c:cc:29:6e:0c:21:ad:
35:55:2c:6b:56:f6:1a:9d:fe:74:2d:ea:e8:60:79:ae:2c:10:
d8:03:41:0d:50:37:f2:49:01:8d:33:ad:be:ba:50:75:9e:81:
65:95:ff:96:da:a2:3f:d1:95:74:c3:c4:02:37:47:50:6d:7e:
df:e7:0f:60:b1:41:a1:aa:1e:10:10:b2:fe:36:8f:01:74:85:
b4:b6:b1:21:4f:e3:8d:7a:56:14:3a:37:f1:a1:4c:9f:58:1e:
95:39:4e:e0:50:21:9d:9c:bc:0b:ff:6f:b5:62:bb:80:84:77:
be:d1:14:d0:cb:4b:d3:a1:b8:18:d5:f8:6e:61:e6:2d:35:49:
b1:3e:2c:18:17:23:18:7d:44:51:55:df:89:0c:76:1c:3c:be:
86:ca:fe:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZeoKm2aM2hG6dVA4p27srMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2
NTRlNTkwHhcNMjYwNjMwMTcwMTI2WhcNMjYwNzAxMTcwMTI2WjAzMTEwLwYDVQQD
Eyg4ODc4ZmU0MmZmMTZjMDNmM2ZmZDQwNzVkMjRmNzAzOGUyZmM4ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdAAallVSCr+14eFGDwf6xZI9NVz
26ZMpSFrsM1NsNx7+rWqwFussNjY3bXv7hewT+WhDUs4PZXlVeRftcvxnrTL7Kui
stxu709VdtIwcgJMKCIBSmqRiwti0FuuQg6/5U92Np7whuCQUX01Oj4vN2G6Awzh
TQ+WDR+4lvXXf1nyrq15+5ZPTKP20DZj4EmcgZACGCx5MIZ0UUVWCDl4fwT5/S+3
oZ1lBN6GYSCux5ONsviq0ax+qOUFIuAA07F779nr69ecZuqoJzY65LremAHLsrxj
gR3I8rr0/3+0pAq4yqid05WLtx/v1MEcb3KBwVo1Fm5kFC74oyolUs98qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh4/kL/FsA/P/1AddJPcDji/I5/MB8GA1UdIwQY
MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt
NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0
LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL90dzSta
+lxa3ljvVMmkZn8o1Xfee6BtAByRtt8tipcg2dSB8dUgNyd/PD2RtoPOiW42pcSA
M3Icy92KVvYp6sSSRuILN9T/1L1PHKa/zXXupQ5Z73KLyNSqRpYjbQ4YOA8E1Y+M
zCluDCGtNVUsa1b2Gp3+dC3q6GB5riwQ2ANBDVA38kkBjTOtvrpQdZ6BZZX/ltqi
P9GVdMPEAjdHUG1+3+cPYLFBoaoeEBCy/jaPAXSFtLaxIU/jjXpWFDo38aFMn1ge
lTlO4FAhnZy8C/9vtWK7gIR3vtEU0MtL06G4GNX4bmHmLTVJsT4sGBcjGH1EUVXf
iQx2HDy+hsr+Pw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:56 2026 by rpki-client