Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: TpzKbfJR0XASabaksdd16hkHzBUSgbVGHPyraYSNHMQ=
Subject key identifier: 0D:8C:3E:67:A9:7B:31:BE:05:07:EC:38:38:4D:B8:53:DE:21:89:A4
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019DCF75649A63E5648D61AD1B52BC6DAE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0E13
Signing time: Mon 27 Apr 2026 15:01:10 +0000
Manifest this update: Mon 27 Apr 2026 15:01:10 +0000
Manifest next update: Tue 28 Apr 2026 15:01:10 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: FyfIJcbuKoED6LffrCR3GAROrFeWE2ommQzSjLDgWfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:64:9a:63:e5:64:8d:61:ad:1b:52:bc:6d:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Apr 27 15:01:10 2026 GMT
Not After : Apr 28 15:01:10 2026 GMT
Subject: CN=0d8c3e67a97b31be0507ec38384db853de2189a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:cf:b3:65:85:25:a5:25:d6:11:b1:c6:69:
a1:1e:03:d4:c4:45:47:a1:03:a5:22:78:f8:7b:20:
ec:ae:3c:96:77:a1:e0:d7:21:8b:6b:09:d6:f5:a0:
12:6e:fc:9d:1f:9d:bc:ae:0e:f4:32:d2:f9:25:f7:
7c:93:aa:57:66:7b:53:01:38:8f:9c:93:64:bf:9d:
8d:e6:99:37:1a:f1:a5:90:8d:dd:96:25:f1:9e:71:
36:b4:09:0d:12:e7:d1:bd:43:51:10:ef:80:74:5e:
73:90:99:76:b0:71:5f:4f:64:fc:df:27:e9:eb:11:
9b:c3:9c:bd:3e:33:a0:7c:0f:30:d3:f5:1b:d1:a1:
72:03:55:20:0e:94:93:08:d1:ce:3d:60:f5:b6:c4:
38:06:75:89:eb:4e:25:14:9f:e5:6d:c1:15:9b:90:
d1:86:b2:49:64:d9:ed:8a:f9:20:1e:f3:4c:eb:60:
ca:48:1e:c6:e0:70:3d:5d:00:50:36:60:63:42:32:
69:2e:89:1e:28:7f:62:a6:7e:aa:94:11:0d:c1:97:
67:de:93:0b:af:14:96:70:d7:b4:c1:4a:74:f2:4b:
3e:dd:52:d3:67:17:fe:04:0a:ab:0d:66:18:73:c7:
8a:5f:af:77:6e:f0:3e:28:f1:4f:ea:60:1b:fe:b2:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8C:3E:67:A9:7B:31:BE:05:07:EC:38:38:4D:B8:53:DE:21:89:A4
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:05:ce:a1:00:c0:57:81:79:d5:e7:59:39:fa:87:5f:68:b1:
5a:9a:00:33:20:c2:83:a6:7c:7a:96:73:ea:82:42:80:70:29:
4a:72:14:f1:b9:c2:3d:e6:73:d6:a2:dc:1e:53:1a:18:5e:78:
43:82:20:7d:ed:f4:73:b8:03:05:c0:e2:90:d7:c1:87:f4:7a:
4d:ef:18:b1:19:5d:a4:00:94:89:8b:23:e3:fa:67:00:d2:81:
16:d3:a2:44:a6:95:b2:42:17:ab:65:2c:aa:21:37:5d:79:78:
3e:ca:64:f7:4a:0a:30:24:c8:1a:74:12:36:e2:26:bd:9c:79:
35:a3:d1:59:e0:f5:c2:85:b4:59:53:0e:70:60:9d:b3:8b:ed:
46:3a:f9:0d:1a:6b:44:08:18:53:db:f2:c2:36:83:fe:bc:bc:
8c:10:8d:67:d8:c7:37:b7:ef:14:d5:f7:be:42:9c:1d:ef:ed:
64:40:0a:3a:4e:d2:c8:38:43:08:44:a0:71:15:47:a1:1e:df:
ba:20:ac:70:d8:ca:4e:04:bd:bf:de:d1:45:3b:7b:66:d6:8d:
48:31:99:ce:d5:40:a6:29:be:a5:e5:b8:25:81:30:2e:d5:f5:
41:ca:7f:fc:5b:09:f9:2e:be:48:48:43:0f:18:4b:65:ca:21:
21:88:1b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdWSaY+VkjWGtG1K8ba4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjYwNDI3MTUwMTEwWhcNMjYwNDI4MTUwMTEwWjAzMTEwLwYDVQQD
EygwZDhjM2U2N2E5N2IzMWJlMDUwN2VjMzgzODRkYjg1M2RlMjE4OWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfnPs2WFJaUl1hGxxmmhHgPUxEVH
oQOlInj4eyDsrjyWd6Hg1yGLawnW9aASbvydH528rg70MtL5Jfd8k6pXZntTATiP
nJNkv52N5pk3GvGlkI3dliXxnnE2tAkNEufRvUNREO+AdF5zkJl2sHFfT2T83yfp
6xGbw5y9PjOgfA8w0/Ub0aFyA1UgDpSTCNHOPWD1tsQ4BnWJ604lFJ/lbcEVm5DR
hrJJZNntivkgHvNM62DKSB7G4HA9XQBQNmBjQjJpLokeKH9ipn6qlBENwZdn3pML
rxSWcNe0wUp08ks+3VLTZxf+BAqrDWYYc8eKX693bvA+KPFP6mAb/rIo0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2MPmepezG+BQfsODhNuFPeIYmkMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQXOoQDA
V4F51edZOfqHX2ixWpoAMyDCg6Z8epZz6oJCgHApSnIU8bnCPeZz1qLcHlMaGF54
Q4Igfe30c7gDBcDikNfBh/R6Te8YsRldpACUiYsj4/pnANKBFtOiRKaVskIXq2Us
qiE3XXl4Pspk90oKMCTIGnQSNuImvZx5NaPRWeD1woW0WVMOcGCds4vtRjr5DRpr
RAgYU9vywjaD/ry8jBCNZ9jHN7fvFNX3vkKcHe/tZEAKOk7SyDhDCESgcRVHoR7f
uiCscNjKTgS9v97RRTt7ZtaNSDGZztVApim+peW4JYEwLtX1Qcp//FsJ+S6+SEhD
DxhLZcohIYgbEg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:04 2026 by rpki-client