Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: IKzyCiEiUrOVXU4aENO+1M/cKrGqmeq6tVPgVVziwzM=
Subject key identifier: 0D:2D:EA:A4:EB:72:F0:1B:33:BB:43:AC:26:39:73:01:FA:5A:1A:1A
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019D0741F57D9E19995DC21A7B78E1CE66B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0BE6
Signing time: Thu 19 Mar 2026 18:00:56 +0000
Manifest this update: Thu 19 Mar 2026 18:00:56 +0000
Manifest next update: Fri 20 Mar 2026 18:00:56 +0000
Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: mybvW8sgKdcRLtDzUwIB09GGGCCItOXzNtFxiVtJIpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:41:f5:7d:9e:19:99:5d:c2:1a:7b:78:e1:ce:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Mar 19 18:00:56 2026 GMT
Not After : Mar 20 18:00:56 2026 GMT
Subject: CN=0d2deaa4eb72f01b33bb43ac26397301fa5a1a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:b8:19:79:c4:09:38:3b:08:68:ce:02:a4:
04:ef:ff:47:03:5d:fe:2b:76:0a:ed:7c:0c:64:75:
74:ce:f3:63:c3:b2:31:bf:c8:8e:07:d9:7c:1d:df:
5f:05:ee:96:9a:1f:5b:dd:c1:03:5b:72:5e:df:56:
b9:a4:24:a9:ed:90:ab:3b:7d:6e:6a:60:2e:73:c7:
60:df:d5:4b:20:c0:10:2c:61:ce:df:0f:62:55:ec:
bd:70:9f:72:a5:05:64:f8:5c:a9:5c:c6:59:4d:61:
3c:f8:3f:2e:5b:ef:4f:7c:64:89:85:af:53:6d:2a:
25:04:62:62:0f:30:16:9b:83:1b:c3:9b:7c:8d:38:
79:d0:86:a7:bb:d8:96:2a:fc:16:82:e7:0d:b3:a1:
9d:3e:fc:7c:8d:52:e0:44:45:ca:2f:a9:7f:14:8b:
1a:26:a3:e2:46:01:32:a6:49:b7:3f:fd:b7:58:d5:
c4:57:17:b5:73:2e:86:7e:ff:e2:4b:43:3d:6d:3e:
13:90:2c:59:cd:bc:00:0d:1e:67:73:f8:96:06:5f:
56:5e:97:cf:e3:8a:f2:6b:a3:68:80:18:c3:ec:85:
fe:81:05:ed:ea:54:a7:44:31:b1:75:92:a5:e2:78:
dc:48:8e:08:a2:90:43:a0:14:97:00:bd:8b:8c:7b:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:EA:A4:EB:72:F0:1B:33:BB:43:AC:26:39:73:01:FA:5A:1A:1A
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0c:e6:37:a6:27:ee:87:e8:06:78:78:a8:d2:a5:7e:7b:1d:
35:a0:d4:b4:d5:93:e7:9d:ea:ec:61:9c:7b:27:cd:f0:c0:1f:
fd:be:6a:f2:fb:0e:27:6a:e1:63:25:ab:22:94:28:de:4f:97:
04:30:ea:b2:99:71:89:8b:21:d1:ad:37:a7:9a:a2:11:f6:da:
af:7a:8e:f0:81:c9:cf:6f:84:5c:01:45:20:b0:43:79:e8:cb:
4d:fb:8e:f2:b0:ce:fb:6d:38:2b:82:be:05:85:dd:7a:24:3b:
14:09:d5:79:df:d4:aa:99:31:3f:e9:04:33:84:d5:8c:e5:fb:
22:a7:3b:30:6e:a9:fc:8c:75:2c:4b:c4:cd:86:26:3c:47:dd:
f9:72:b8:b5:51:b4:42:42:87:b3:22:b6:f1:6d:6d:2d:73:47:
a2:38:7d:78:18:ae:22:10:1b:74:05:94:46:9a:2c:b7:d9:bf:
79:e4:d1:8e:b6:90:6e:d1:27:9f:24:e5:90:f0:56:27:93:a6:
9c:ad:dc:a0:50:a3:82:9e:d5:94:40:25:2b:85:f8:41:d5:1c:
39:b5:32:5e:e6:a1:5e:f4:4b:e9:9a:93:a2:72:b0:26:e7:a1:
ed:e5:f5:50:a5:57:4a:fc:ae:48:d6:a9:68:38:7a:4b:ea:3e:
d4:45:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 03:12:58 2026 by rpki-client