Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: Mh1q5SGHmY6fywggvATEK66tiTxSoPEB512+ISyAyhE=
Subject key identifier: A9:86:84:AC:A7:F6:B7:45:8D:03:13:68:80:4D:27:8F:ED:07:FF:1D
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019EB92111F62FBE31198DFA074DAAEA3AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0E8C
Signing time: Fri 12 Jun 2026 00:00:12 +0000
Manifest this update: Fri 12 Jun 2026 00:00:12 +0000
Manifest next update: Sat 13 Jun 2026 00:00:12 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: iM0eEsbe4U925CAbble8qd0vDAbK3n8WZpBo+u/KXnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:11:f6:2f:be:31:19:8d:fa:07:4d:aa:ea:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jun 12 00:00:12 2026 GMT
Not After : Jun 13 00:00:12 2026 GMT
Subject: CN=a98684aca7f6b7458d031368804d278fed07ff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:ba:e7:bb:68:90:60:1f:60:39:98:ab:f8:
0e:1f:89:0f:c3:99:07:fd:cc:85:98:ec:bc:b1:43:
02:82:bf:8c:64:68:93:41:e6:9a:aa:0a:3f:bb:a0:
18:b3:da:57:1c:2f:ef:d4:fa:6c:9f:96:d5:cf:07:
50:25:e8:6a:3e:42:c8:ad:f9:7f:b6:ba:c5:2e:1d:
0e:57:08:91:5b:fc:55:a9:86:57:92:5e:35:59:e7:
a2:e2:ae:64:d3:00:d6:02:b2:fa:d3:c4:41:5a:77:
0f:0c:1d:4e:49:b6:a5:97:3a:05:78:94:73:aa:52:
9f:59:89:45:14:3f:76:ab:0f:7b:60:38:ee:19:3e:
a2:7c:69:30:3f:10:39:b3:6c:68:25:76:6d:e6:9a:
60:2d:b7:c0:d7:81:22:90:46:a7:ef:1a:e5:bc:d8:
d8:ee:de:da:21:2d:53:e0:3c:1d:7a:4b:e4:eb:0c:
f1:0a:1b:12:83:4f:47:66:ee:7a:24:6f:ec:f6:31:
91:a0:6e:d4:f9:55:d1:1e:47:55:3c:91:1f:f0:38:
e0:bd:08:6b:96:d9:aa:cf:ae:94:67:22:16:b0:4f:
c9:b3:cf:ac:47:4b:4a:7d:b5:82:b2:2f:3d:ea:ec:
d9:a6:67:59:68:9c:3a:5a:da:af:f7:ed:0d:6b:e9:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:84:AC:A7:F6:B7:45:8D:03:13:68:80:4D:27:8F:ED:07:FF:1D
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:77:01:9e:a8:3e:47:54:d0:60:6f:bc:30:64:9b:0b:04:
9c:dc:aa:39:8e:90:1f:31:64:b2:35:80:e2:d4:a7:7d:90:05:
c1:c5:72:ce:93:cf:52:dc:7a:5d:98:37:e7:58:f2:e0:e4:d3:
a9:d7:69:11:fe:36:c3:ab:fc:92:f7:ee:2b:b7:50:a2:77:82:
43:4c:4c:cb:f7:18:18:3d:b3:a6:d9:37:92:08:97:c1:0d:94:
84:5d:fe:36:ef:15:48:bc:72:ad:b6:03:63:74:54:d7:9f:33:
fb:99:45:6f:83:88:ba:19:ac:6d:a7:a7:26:0e:17:a0:68:bd:
d5:95:19:79:d9:01:49:84:14:4c:a0:7e:cd:51:fe:0e:67:1a:
9e:ff:5d:69:5b:5d:f4:c0:91:52:65:f3:f5:95:21:db:f3:97:
a3:7f:3c:fa:e9:c9:c9:46:04:cb:a6:6b:82:66:fd:cd:bc:6e:
2c:b4:26:70:82:00:ae:d2:7f:a4:74:56:f8:ab:8e:5d:27:18:
7e:6f:6e:85:b3:07:c2:81:aa:ac:ad:35:e7:dc:58:20:b6:15:
83:2e:e8:a0:32:42:82:c0:8c:2c:7f:6d:51:f2:4a:61:31:52:
23:c6:d0:8c:71:03:6d:b7:c2:85:d7:af:5b:0e:ec:2c:97:91:
f2:89:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:32 2026 by rpki-client