
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: LgEny/9HDIlZQfUEEGCM3uXvBtLbKdIljQPgRH5mEZY=
Subject key identifier: 71:D6:E8:E2:1C:5A:D1:7E:12:B5:59:A9:C5:1F:99:5D:48:6A:05:1B
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01A0B79BE9043C645FCA2ED1D5953A4D17ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 178C
Signing time: Sat 19 Sep 2026 03:00:43 +0000
Manifest this update: Sat 19 Sep 2026 03:00:43 +0000
Manifest next update: Sun 20 Sep 2026 03:00:43 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: I4Li92Ug/2vWetTVE3ilZ4Hp1WEHxrNiWyI79cqmP/4=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:9b:e9:04:3c:64:5f:ca:2e:d1:d5:95:3a:4d:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Sep 19 03:00:43 2026 GMT
Not After : Sep 20 03:00:43 2026 GMT
Subject: CN=71d6e8e21c5ad17e12b559a9c51f995d486a051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:df:bc:68:ed:17:33:bb:a3:8d:45:dd:a7:
72:52:bf:5a:cc:bf:c9:e1:05:b5:e4:76:f8:12:b3:
b8:b8:64:a7:d3:50:4b:46:43:d7:97:76:e1:56:c4:
de:2e:64:e2:2d:d9:17:39:40:31:1e:34:7c:ac:3c:
ef:9a:d7:f3:1d:0a:5e:ea:47:35:9a:c8:08:9f:71:
6e:45:a1:df:2f:16:d9:a9:7b:14:5a:cb:13:3a:c9:
f6:28:93:41:e9:68:4e:47:30:62:ea:c9:ff:cc:e3:
a0:c3:0c:7a:79:15:af:43:b1:e6:63:85:b0:44:22:
7a:3f:a6:ad:28:e3:da:33:4b:fe:75:14:a8:c1:5d:
c1:d2:bd:6f:e4:86:11:31:1e:0d:2f:97:45:da:79:
83:fa:d8:73:15:cc:47:94:79:1b:62:f9:ae:d9:3b:
cb:69:8a:d6:e6:c8:36:0a:b4:f3:ea:92:b6:da:50:
77:a8:3a:75:e5:03:59:09:a2:65:c3:10:37:ad:f2:
ed:c7:9d:43:44:31:b2:26:a4:4a:d4:c1:53:af:9d:
db:c2:5e:96:0d:aa:d2:ce:fc:e0:b9:be:34:f5:96:
dd:08:a6:b9:58:dd:c6:9b:df:4b:98:6c:30:08:28:
54:91:c4:5e:bc:7f:e1:69:3c:48:ab:dd:ce:76:e1:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:E8:E2:1C:5A:D1:7E:12:B5:59:A9:C5:1F:99:5D:48:6A:05:1B
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:ea:de:d0:16:33:eb:ad:fd:0a:13:fc:0c:ff:0e:51:2e:
16:97:8d:07:fb:dc:ba:94:cb:ef:eb:8e:5b:f1:0f:b0:ed:b6:
82:56:6b:fa:4f:31:9d:5e:97:3c:80:24:82:19:d5:28:7b:0f:
25:0e:9f:af:a5:53:05:46:57:c5:31:fa:23:e3:4f:a7:b5:46:
90:a6:74:da:72:af:52:5a:29:40:69:0d:54:58:bb:00:ad:99:
87:6d:90:1b:f3:18:b8:c6:a4:6c:be:15:77:1b:cf:b4:cd:57:
68:29:74:e1:a2:c0:56:07:4e:38:c4:ad:b4:4d:49:c5:e9:37:
2e:cb:e8:79:fd:b1:67:b6:9b:20:99:76:da:4d:76:7b:1f:b4:
be:59:e7:a6:4e:38:5a:dc:a2:cf:29:c5:df:8a:1d:a1:a1:dd:
5d:46:ff:be:99:c8:ce:f5:94:73:82:3c:ac:0b:71:e6:f3:b0:
1a:00:1d:60:70:c0:00:6c:c0:c7:a0:44:84:64:e3:ec:9e:b0:
14:9a:b2:9a:e3:75:7b:e3:8c:a2:f0:83:6a:bf:0d:69:fd:83:
fc:7e:7a:6a:9d:ee:28:0f:2e:75:7d:6c:a6:4d:59:d7:97:7e:
e6:d4:dd:d1:11:f9:c7:e2:4d:5e:59:6f:16:3b:6e:73:05:0d:
1c:22:0b:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC3m+kEPGRfyi7R1ZU6TRftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODRlNDczYWE1NjRlYjUxYTdlN2ViOGIxOGYxNGFjMGNi
YzJjOWMwHhcNMjYwOTE5MDMwMDQzWhcNMjYwOTIwMDMwMDQzWjAzMTEwLwYDVQQD
Eyg3MWQ2ZThlMjFjNWFkMTdlMTJiNTU5YTljNTFmOTk1ZDQ4NmEwNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbvfvGjtFzO7o41F3adyUr9azL/J
4QW15Hb4ErO4uGSn01BLRkPXl3bhVsTeLmTiLdkXOUAxHjR8rDzvmtfzHQpe6kc1
msgIn3FuRaHfLxbZqXsUWssTOsn2KJNB6WhORzBi6sn/zOOgwwx6eRWvQ7HmY4Ww
RCJ6P6atKOPaM0v+dRSowV3B0r1v5IYRMR4NL5dF2nmD+thzFcxHlHkbYvmu2TvL
aYrW5sg2CrTz6pK22lB3qDp15QNZCaJlwxA3rfLtx51DRDGyJqRK1MFTr53bwl6W
DarSzvzgub409ZbdCKa5WN3Gm99LmGwwCChUkcRevH/haTxIq93OduFYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHW6OIcWtF+ErVZqcUfmV1IagUbMB8GA1UdIwQY
MBaAFAqE5HOqVk61Gn5+uLGPFKwMvCycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgt
NTQ2MjhkZmNiYTRjLzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZDAyNDUtNzg1NS00MDMxLTk2NDgtNTQ2MjhkZmNiYTRj
LzEvQ29Ua2M2cFdUclVhZm42NHNZOFVyQXk4TEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwbq3tAW
M+ut/QoT/Az/DlEuFpeNB/vcupTL7+uOW/EPsO22glZr+k8xnV6XPIAkghnVKHsP
JQ6fr6VTBUZXxTH6I+NPp7VGkKZ02nKvUlopQGkNVFi7AK2Zh22QG/MYuMakbL4V
dxvPtM1XaCl04aLAVgdOOMSttE1Jxek3Lsvoef2xZ7abIJl22k12ex+0vlnnpk44
WtyizynF34odoaHdXUb/vpnIzvWUc4I8rAtx5vOwGgAdYHDAAGzAx6BEhGTj7J6w
FJqymuN1e+OMovCDar8Naf2D/H56ap3uKA8udX1spk1Z15d+5tTd0RH5x+JNXllv
FjtucwUNHCILPg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 13:33:09 2026 by rpki-client