Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: ll5Gmk5i4E8wNZlLVf2m8B3QxRAkN/IhJ61mpZZRHGA=
Subject key identifier: 99:34:55:3E:49:E0:FD:0D:11:3A:6B:58:17:21:0D:3F:69:2B:4A:D1
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019E2FCD596753AB3C264524BF0E7019EDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 070B
Signing time: Sat 16 May 2026 08:00:47 +0000
Manifest this update: Sat 16 May 2026 08:00:47 +0000
Manifest next update: Sun 17 May 2026 08:00:47 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: WwjuvO197yVKEHREUZyg+nSysD7g+x6+CM12KljZ930=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:59:67:53:ab:3c:26:45:24:bf:0e:70:19:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: May 16 08:00:47 2026 GMT
Not After : May 17 08:00:47 2026 GMT
Subject: CN=9934553e49e0fd0d113a6b5817210d3f692b4ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:07:7b:66:62:4c:24:28:77:74:0b:ea:2b:
45:1f:da:16:bf:c6:c6:03:ea:c3:31:6f:7c:58:29:
e1:9d:20:35:48:42:fa:1a:60:53:58:97:29:ac:d7:
bf:7a:61:dc:01:22:21:22:56:0b:94:6f:ed:c1:9a:
45:18:72:57:32:e2:14:ee:13:ab:f5:e5:be:0b:ee:
78:5e:a7:50:94:e2:8d:24:6c:80:2b:da:8f:b8:82:
f9:5d:e4:8e:80:c1:93:4c:15:c2:3a:1d:75:f8:35:
6f:78:d3:8f:0e:21:73:ba:0b:fa:65:5c:d5:01:e7:
38:9f:ad:6b:17:85:2e:04:8c:53:6a:4f:30:67:e5:
12:a4:a2:be:a7:19:eb:c9:b9:06:8f:bb:b8:c2:18:
4c:be:06:eb:60:9d:f1:c6:29:99:bc:70:06:98:d4:
29:3a:9e:97:a4:55:2e:a8:41:52:b4:49:59:a6:a1:
24:89:61:c8:5d:ae:a4:d9:5e:8d:42:6f:e3:14:f0:
2f:a9:79:10:77:be:db:8b:09:c4:c5:e1:79:e6:16:
0d:14:c1:69:36:09:b6:f9:b8:00:34:d2:dc:9c:aa:
87:5d:d4:f1:0c:04:f3:13:5a:a4:06:9c:33:9e:5c:
b4:ba:e8:51:01:2d:5f:57:1e:71:70:fc:2b:ef:d7:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:55:3E:49:E0:FD:0D:11:3A:6B:58:17:21:0D:3F:69:2B:4A:D1
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2c:5e:0a:a5:dd:43:95:f5:1c:87:31:7e:be:2e:dd:8c:e9:
44:2b:8c:db:35:73:f0:7f:ec:e4:a6:c7:09:96:36:9a:64:46:
95:65:14:45:55:ac:60:03:12:5e:e1:30:96:b1:ca:0b:9d:2a:
1c:64:86:5e:22:1b:93:f2:ba:fb:c3:63:51:29:01:e8:24:eb:
6c:a8:5b:17:6d:8e:66:be:58:ab:79:ec:f5:5d:c5:55:36:b4:
1b:da:6b:a9:3e:2e:b1:87:8c:5e:63:13:20:df:91:fa:e6:92:
ba:61:e0:94:02:fe:64:5f:8e:74:d1:34:99:e0:be:48:7b:1e:
1e:01:26:73:6f:c8:cd:ac:e5:5b:0a:46:d3:a8:cd:19:46:73:
97:2e:81:12:90:40:ac:d5:81:38:8b:c7:37:3e:06:e4:6f:16:
89:da:8c:4d:77:85:0e:04:b3:a8:c3:22:fb:7a:67:6a:05:73:
15:aa:87:5f:b4:a5:d0:da:d1:c1:30:11:11:92:f9:cf:a6:47:
37:17:a9:68:42:53:9c:4f:5e:77:c4:47:03:3a:23:99:9d:a3:
28:74:1e:80:9c:db:9a:79:73:29:14:a1:c6:26:50:69:da:14:
9e:8a:da:98:94:19:54:2f:f5:c3:23:6f:84:2d:9c:95:92:94:
92:05:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:00 2026 by rpki-client