Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: 3KRWFN9RpeTIJvtUGv4MY+exK2gJU2vcSTuOyh+Bg8o=
Subject key identifier: AF:6A:F6:58:50:7A:A4:59:20:58:C3:81:E1:AC:69:6C:5C:25:13:F5
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019D389BE8A9468F943D3393CDC937411F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 068B
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: wBIoiUD11BejqrWq6Slmpn+aGNPzVvun7qJiwmiK6dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e8:a9:46:8f:94:3d:33:93:cd:c9:37:41:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=af6af658507aa4592058c381e1ac696c5c2513f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:26:f0:41:50:42:a6:b5:7b:af:2e:44:ef:
a8:bc:88:5d:7a:fc:6b:55:c6:eb:0f:ad:52:a1:89:
37:58:3b:ca:25:c8:a8:4a:71:3a:e8:e9:2d:93:f8:
3c:b9:0a:cf:e1:d5:7c:bc:ef:f5:e7:ba:5c:1e:a7:
7f:61:82:5a:06:8e:73:b3:4f:ef:4a:cc:f3:1c:c4:
f5:f2:8f:c6:72:98:fd:24:e3:b7:d4:9c:22:d5:90:
82:cb:36:60:43:a7:29:86:ea:93:5e:f2:f8:8f:00:
a7:4c:f2:74:f2:b4:31:8b:29:f7:05:88:f7:3c:dc:
7c:c1:3f:8b:71:f3:41:81:93:c9:29:2e:ec:a4:94:
49:ee:8a:29:26:e9:43:c5:a1:f7:aa:b5:e0:5d:7d:
62:ff:90:7b:8d:4c:69:cc:58:a9:bd:3e:c7:06:d7:
4c:1d:9c:c7:99:40:af:ef:c2:62:aa:c4:1a:72:4f:
fd:17:4c:0b:11:8d:6a:31:26:c4:ba:51:09:b0:ff:
7c:9b:12:b5:38:80:79:93:8d:91:e4:4f:2e:4c:3a:
88:63:05:a6:5e:1e:8d:3a:88:6d:f6:cc:7b:ea:be:
04:30:14:53:b6:5d:f7:c7:7c:bd:c4:24:82:a4:3a:
fa:67:6e:35:77:cd:a3:15:b2:75:dc:e1:36:dc:13:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:F6:58:50:7A:A4:59:20:58:C3:81:E1:AC:69:6C:5C:25:13:F5
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:94:9e:6c:b8:be:95:2e:66:07:09:74:e2:1c:48:ef:5e:98:
fb:d0:9d:b9:e8:2d:bf:dc:19:d5:c9:15:d7:da:da:19:7e:fa:
3f:f1:dc:04:b5:73:4a:ef:88:83:df:3d:1a:aa:12:3e:d8:8c:
f0:27:d9:19:bb:a6:b2:35:35:08:c8:1e:36:da:19:d6:b7:2a:
03:df:26:13:05:95:3c:b8:76:d8:da:ca:48:6e:e6:13:11:4e:
c9:8c:d7:4c:3f:c7:f0:f6:88:03:07:85:60:49:7d:3b:40:06:
80:46:3e:21:0b:85:2a:2d:a0:10:13:fc:cd:f5:49:a5:d9:c8:
39:93:d9:09:3b:1e:48:96:27:d7:c3:14:47:3f:1d:95:6e:0b:
c3:4a:58:dd:f6:df:26:9b:a5:42:a8:b2:5f:59:c7:ed:f5:ac:
8b:73:fa:ba:e5:fa:68:8e:7b:b7:c5:be:16:ac:5f:94:86:de:
83:be:b2:a4:8e:47:3c:8c:8b:c4:ae:da:1d:df:22:6e:a0:a5:
f5:10:d9:f0:4a:06:e9:50:4b:56:f4:62:73:bf:05:c3:98:7d:
23:12:d9:b0:68:3f:b2:68:c6:43:a2:ab:7f:87:20:d7:83:45:
d0:ac:fd:d7:fb:03:bf:3e:71:55:76:b3:4e:bd:11:7c:3d:f5:
f3:73:b7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+ipRo+UPTOTzck3QR8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2
NTRlNTkwHhcNMjYwMzI5MDgwMDM0WhcNMjYwMzMwMDgwMDM0WjAzMTEwLwYDVQQD
EyhhZjZhZjY1ODUwN2FhNDU5MjA1OGMzODFlMWFjNjk2YzVjMjUxM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu4m8EFQQqa1e68uRO+ovIhdevxr
VcbrD61SoYk3WDvKJcioSnE66Oktk/g8uQrP4dV8vO/157pcHqd/YYJaBo5zs0/v
SszzHMT18o/Gcpj9JOO31Jwi1ZCCyzZgQ6cphuqTXvL4jwCnTPJ08rQxiyn3BYj3
PNx8wT+LcfNBgZPJKS7spJRJ7oopJulDxaH3qrXgXX1i/5B7jUxpzFipvT7HBtdM
HZzHmUCv78JiqsQack/9F0wLEY1qMSbEulEJsP98mxK1OIB5k42R5E8uTDqIYwWm
Xh6NOoht9sx76r4EMBRTtl33x3y9xCSCpDr6Z241d82jFbJ13OE23BPOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9q9lhQeqRZIFjDgeGsaWxcJRP1MB8GA1UdIwQY
MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt
NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0
LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJSebLi+
lS5mBwl04hxI716Y+9Cduegtv9wZ1ckV19raGX76P/HcBLVzSu+Ig989GqoSPtiM
8CfZGbumsjU1CMgeNtoZ1rcqA98mEwWVPLh22NrKSG7mExFOyYzXTD/H8PaIAweF
YEl9O0AGgEY+IQuFKi2gEBP8zfVJpdnIOZPZCTseSJYn18MURz8dlW4Lw0pY3fbf
JpulQqiyX1nH7fWsi3P6uuX6aI57t8W+FqxflIbeg76ypI5HPIyLxK7aHd8ibqCl
9RDZ8EoG6VBLVvRic78Fw5h9IxLZsGg/smjGQ6Krf4cg14NF0Kz91/sDvz5xVXaz
Tr0RfD3183O3NA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:54 2026 by rpki-client