Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: FuX2l6N4ufMWof6hXv9a9nyLDCs1ZwGgj58Z58WB6DQ=
Subject key identifier: 71:06:F4:4F:81:D6:A3:07:CF:F2:82:FC:54:AD:93:BA:56:67:47:A6
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019E30A993E3CB22A40D15A8D3887F9F7EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 163D
Signing time: Sat 16 May 2026 12:01:20 +0000
Manifest this update: Sat 16 May 2026 12:01:20 +0000
Manifest next update: Sun 17 May 2026 12:01:20 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: 1ryHzdkYVewdPGHzjOAjGRQrTZEKi0x6D/IaXIJ7VG4=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:93:e3:cb:22:a4:0d:15:a8:d3:88:7f:9f:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: May 16 12:01:20 2026 GMT
Not After : May 17 12:01:20 2026 GMT
Subject: CN=7106f44f81d6a307cff282fc54ad93ba566747a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:e6:4c:e2:50:0e:53:51:6b:5d:6f:14:19:
77:83:05:d7:77:26:bd:b1:56:54:cf:83:3f:0b:ef:
f9:a0:6b:86:02:75:79:09:24:83:96:35:cf:0a:2c:
fd:f7:38:37:6b:b1:02:e4:ee:b5:b9:02:5e:54:be:
76:ed:53:f0:92:77:96:af:4e:df:2a:9d:6f:c4:e6:
61:b6:ea:36:13:cc:1e:77:82:68:b6:80:76:dd:d9:
c2:da:7b:9f:a4:df:3a:36:ab:8a:1d:67:98:5f:a9:
c8:3a:e4:cf:24:0a:45:c8:2a:0f:7b:32:61:17:a7:
72:85:9c:1e:2a:73:7b:c7:56:02:95:81:fe:00:c6:
95:f6:00:f4:d3:c8:30:0a:cf:01:1a:5d:2a:00:d1:
c4:de:d9:d4:ee:3c:4a:ae:bf:9a:2a:97:be:3d:64:
6e:a6:42:c9:03:51:02:95:25:ce:41:00:fc:c8:58:
98:57:be:e7:2e:54:7c:1b:0d:06:7a:03:e0:c0:8b:
bf:ec:98:1b:8d:f2:59:a9:8a:b0:5a:f3:c4:09:4c:
f9:1b:f8:57:e7:67:03:2a:99:b2:08:49:a2:22:14:
7b:ec:81:3d:7a:bb:85:77:94:87:d2:90:73:35:87:
03:79:cc:a8:5d:0c:cc:47:fd:c9:c4:9b:0b:42:e5:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:06:F4:4F:81:D6:A3:07:CF:F2:82:FC:54:AD:93:BA:56:67:47:A6
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:5e:e2:b8:a7:4d:cc:74:4d:59:65:5e:95:07:df:09:8a:
b1:82:5c:89:91:44:d8:85:ab:a1:0d:f7:bf:a3:5b:51:cb:df:
ac:1a:c5:0d:3d:07:38:b8:78:6b:b3:87:74:74:a7:21:ab:1f:
e1:b2:e1:96:fc:ef:77:76:73:5f:0e:2b:6b:14:10:a8:78:28:
e0:ee:76:9a:96:97:0a:c0:12:91:7b:02:f1:86:44:c7:14:a2:
3e:1b:4a:1f:8e:53:86:46:ff:cb:85:29:46:76:90:16:52:4a:
1d:91:f5:cf:05:93:f4:b2:fc:6e:5c:77:7c:43:21:6e:81:99:
02:90:32:d3:f6:99:b6:b9:6c:34:0d:9e:09:42:e3:b7:5c:a3:
a9:e0:c1:3e:6b:0c:a5:32:f2:bd:29:30:98:cd:a6:d8:2c:1b:
dd:8e:68:d0:4f:22:5a:b7:d1:53:a9:18:01:9c:0c:d8:e6:f5:
e3:58:46:05:c9:3b:89:0a:ad:b5:e9:5c:65:23:24:d3:14:91:
5a:b1:90:53:10:7f:ba:c4:79:0d:19:8a:26:ac:7a:32:ac:11:
c7:e3:79:ba:df:38:53:38:6c:2a:be:59:89:aa:18:af:86:90:
f7:5d:60:c3:4d:03:6d:cd:e0:52:4b:fa:56:3f:91:99:e8:ca:
62:60:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:42 2026 by rpki-client