Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: arqbF0srlnqc5BJ2BMMk7E2ErzsanazSFMsIX7Vsmb0=
Subject key identifier: 95:9B:85:14:48:D3:FB:5F:9D:52:26:35:13:B6:53:DB:B5:F2:DE:2B
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019FCDEFD73754741CA11F003D50887DB0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1713
Signing time: Tue 04 Aug 2026 18:01:14 +0000
Manifest this update: Tue 04 Aug 2026 18:01:14 +0000
Manifest next update: Wed 05 Aug 2026 18:01:14 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: yYUdE6lji1NZrARClgvlr30MRgGlk62bIzgGwstcq3U=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:ef:d7:37:54:74:1c:a1:1f:00:3d:50:88:7d:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Aug 4 18:01:14 2026 GMT
Not After : Aug 5 18:01:14 2026 GMT
Subject: CN=959b851448d3fb5f9d52263513b653dbb5f2de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:fa:ed:b3:36:c5:60:84:35:bf:58:20:38:
eb:56:fe:fe:16:c5:e0:9d:ef:dd:21:8d:27:26:1f:
2b:36:10:c3:3a:93:6f:2a:24:40:bc:46:75:fa:ff:
87:10:a9:c3:cb:d3:5a:9f:36:db:e8:4b:ed:6b:fb:
3b:56:6c:1d:e1:7e:56:b7:a5:ce:32:7d:68:22:d0:
e8:f8:cb:5a:e5:bd:89:ca:56:cc:b9:a6:0e:9f:32:
ae:63:79:e6:32:17:50:56:66:4d:32:7e:cc:fe:46:
38:af:49:8d:ee:fd:bd:86:26:2e:f5:ad:1b:df:98:
05:87:79:4f:03:05:fc:9f:d1:4a:7a:cb:99:bf:d2:
2d:43:94:7d:6e:1d:31:f5:e4:4d:2c:12:2f:e6:f1:
42:da:a4:a6:7d:4a:66:96:b4:33:b8:1e:71:bf:26:
21:20:19:e6:ac:3f:ba:17:ab:3a:02:62:0f:2e:ad:
d0:77:1e:7a:b8:2b:00:d9:65:8e:6b:08:ea:c5:98:
e7:98:1d:c3:3f:66:52:c6:a0:f1:c8:50:1d:53:c3:
2c:62:9a:9b:e2:2f:39:0d:ca:12:2c:e9:d3:57:e5:
22:6d:bc:7c:2e:33:61:cb:fc:12:1e:ab:f6:3e:1c:
27:32:88:82:b0:87:78:4b:0c:f7:91:41:83:67:11:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:85:14:48:D3:FB:5F:9D:52:26:35:13:B6:53:DB:B5:F2:DE:2B
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:ab:20:3e:fd:06:6a:20:8b:8c:6b:19:5a:20:f3:a1:12:
73:31:04:38:b1:6c:62:e7:c1:f9:fe:3b:4d:23:d0:49:b3:e0:
b2:19:23:ca:ac:0a:ae:b2:5f:7b:72:fc:73:cb:35:21:e2:0a:
c8:02:77:82:97:cb:a9:92:26:ba:6c:3a:94:05:7b:ce:fa:7e:
85:9a:bb:fc:1f:2e:23:9f:e4:d9:17:bc:40:6f:d8:35:2f:c5:
af:f0:c6:99:60:37:0e:e6:b5:53:40:c6:6b:22:f6:4f:13:28:
f2:d0:be:31:19:c6:55:8d:fc:67:88:32:fa:39:f5:23:ed:a3:
17:62:de:5a:52:55:68:56:8f:f7:b2:cc:95:74:7b:1d:c6:33:
f1:e1:0c:88:03:b8:e4:2b:18:ed:7c:6e:68:5c:b9:fe:3a:45:
e4:ee:15:fb:a8:fb:7f:37:0c:97:5d:fd:7f:72:85:b1:1d:fd:
70:44:67:8c:eb:2b:62:b3:42:77:b9:be:4a:21:16:b8:e1:d4:
b4:b1:1b:0a:f7:f8:6d:9d:cd:21:45:2d:a2:ea:bf:66:67:15:
02:21:70:7b:6e:4e:67:6e:5a:d9:14:98:62:07:71:8f:92:ea:
ad:44:8a:b4:5d:60:1e:d5:68:3e:37:2c:e8:c8:8f:71:88:2b:
43:ad:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:53:03 2026 by rpki-client