Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: E7x22DS1cITGbRBTshQh6GrRduMidqM8XjX1WhcQgC0=
Subject key identifier: 4C:D3:D7:D6:5C:41:D6:51:9F:EE:19:F6:3F:D3:4A:E1:FF:A6:2B:40
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019D37895F0264F7F47607917926BDD374CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 15BC
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: EB1YQdIGU0cd/brhqlm/HMALjP53RcMbRDkfqyRO78g=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5f:02:64:f7:f4:76:07:91:79:26:bd:d3:74:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=4cd3d7d65c41d6519fee19f63fd34ae1ffa62b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:b7:6b:bd:ca:95:d4:2c:80:c1:31:e8:0c:
98:b4:d8:52:9c:dc:bb:d4:4c:ca:ce:ed:71:80:98:
3e:41:41:3b:88:0c:f3:87:e2:fd:59:18:3e:2c:6d:
27:f9:2c:2d:f3:44:0b:44:7f:6a:6a:f5:f5:88:03:
cc:dc:02:27:6f:47:2f:3c:5c:ff:bb:fc:b6:9d:7d:
df:1b:15:38:17:f6:0e:5e:ab:95:cf:aa:d8:b6:60:
28:06:df:e7:7a:d9:be:02:c7:58:14:24:97:e5:e7:
07:43:82:26:7c:d6:03:33:e1:d4:17:35:ab:48:81:
dd:3b:78:14:57:17:b7:9c:c1:a0:7c:85:1a:ff:0f:
f8:17:47:a9:82:2f:e5:71:ba:d9:6b:96:c9:01:77:
30:ba:a1:63:a8:70:10:38:27:2e:21:fa:55:2c:9d:
16:e7:a1:7b:a4:e6:cf:29:99:bf:56:0a:a0:85:17:
54:c5:ff:11:f6:94:1a:79:85:33:10:ee:7c:7f:a2:
e5:c1:48:5d:5d:21:43:e3:6a:85:10:8b:93:03:3f:
c8:2e:f5:6d:b6:d1:49:f9:c0:f5:90:17:b6:8f:a7:
1d:98:aa:8a:d5:3d:42:a8:96:58:f0:73:23:0d:10:
f2:fb:de:a7:15:c0:df:87:d1:ed:24:69:bc:93:1f:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:D7:D6:5C:41:D6:51:9F:EE:19:F6:3F:D3:4A:E1:FF:A6:2B:40
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d5:93:67:10:df:56:55:c3:df:f8:1a:84:36:fa:f6:83:02:
57:ef:e5:ef:61:65:65:2b:ec:cd:37:2e:1c:4a:cd:1a:f0:07:
92:da:4f:73:02:6a:18:60:8a:ae:d8:5a:68:73:d3:b4:f7:17:
dd:e1:ab:e6:e9:7e:23:11:3e:07:30:2b:d2:07:0b:9c:6a:6b:
99:d7:e4:7d:6c:9e:60:6a:53:95:f3:d7:43:4a:60:45:1e:7f:
c0:04:7b:2c:4a:f5:bb:a6:bb:df:dc:19:4f:5d:60:22:c4:61:
74:e7:e5:29:1d:4e:07:1e:93:e3:59:61:07:9c:8f:40:9c:8c:
74:ef:74:62:3d:c2:75:80:ae:fd:89:2b:7f:a6:38:4e:8f:17:
b6:12:e7:ba:ba:92:cc:ee:cb:c0:c6:d4:4e:34:07:9a:6a:92:
50:75:12:ad:98:8e:b1:88:2a:a2:e1:94:04:31:32:df:f7:39:
d3:44:a9:67:40:69:59:19:77:35:f4:23:6e:9c:a7:46:dd:4b:
6b:e9:94:c7:94:2d:bb:a4:85:ce:e8:38:be:1d:31:a7:1a:6c:
f4:c4:4b:80:fb:a9:c3:3a:93:62:79:60:da:c5:4d:13:5f:3d:
51:62:08:52:71:c5:a0:fb:55:10:1f:d9:a8:9f:05:ed:f7:38:
7a:dc:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:13 2026 by rpki-client