Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: M7bNMWa5IagSPouepDlT8FOWa8GA1pDPmNAcEwM2Dck=
Subject key identifier: A5:5F:15:8B:4C:55:67:C0:5E:C7:A0:C5:D2:4B:9C:FF:A7:FD:E3:BB
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 019D39AEF44F1181D46E001886D98D3CFE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 04AF
Signing time: Sun 29 Mar 2026 13:01:00 +0000
Manifest this update: Sun 29 Mar 2026 13:01:00 +0000
Manifest next update: Mon 30 Mar 2026 13:01:00 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: QRnA0cRnvdPKnAn3PWLGMyIa2Pufu4UjXf1j7LxVBfM=)
2: UIXAZ8txjJ28tjI6SmjoL7WxOag.roa (hash: lLU1RMXC6Ac97Z2Do9ddKzJUd44r/EFTzj2qCxh0kr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:f4:4f:11:81:d4:6e:00:18:86:d9:8d:3c:fe:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Mar 29 13:01:00 2026 GMT
Not After : Mar 30 13:01:00 2026 GMT
Subject: CN=a55f158b4c5567c05ec7a0c5d24b9cffa7fde3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:e7:c4:c6:9e:a3:f3:83:53:48:3f:cd:c0:
19:25:4f:0a:49:15:79:0d:39:69:e6:8f:a7:2b:03:
cb:c5:98:35:45:9d:0a:e5:2b:c3:68:cc:50:39:46:
23:7b:d2:fc:10:fe:88:22:f9:5a:ca:64:d8:16:e6:
a8:6c:8e:85:a5:93:02:34:34:94:af:cc:6a:3f:c6:
97:f5:e6:5d:37:79:33:4a:4b:a0:de:93:87:37:8a:
c0:61:6b:09:10:83:2b:39:d9:cd:c9:08:b1:48:4b:
a3:0c:11:64:0e:33:4d:05:91:f1:5a:39:a1:fe:7d:
74:b6:45:0d:e0:94:48:6f:98:b8:2e:8a:d3:31:54:
e8:c6:50:75:66:ed:30:d0:ad:e5:55:08:5e:e9:94:
0a:44:1f:eb:63:63:b8:0b:5e:d3:27:08:71:3a:50:
fb:3b:7a:49:26:fb:27:62:10:37:81:b4:c0:48:aa:
69:9b:10:77:7c:ca:ae:bf:fc:21:9c:6e:9b:0b:ed:
c7:2a:3d:19:7a:11:a1:07:12:02:01:50:1a:4d:27:
09:54:28:a9:d9:df:22:e3:d4:73:9e:05:73:ca:fe:
7d:c1:72:3a:31:a5:54:27:67:5c:5a:c5:fd:38:4d:
e9:2f:63:f3:df:b6:da:fb:7e:2b:af:c7:22:9e:f3:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:15:8B:4C:55:67:C0:5E:C7:A0:C5:D2:4B:9C:FF:A7:FD:E3:BB
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:82:a6:a2:63:cd:1d:ff:e3:02:62:92:62:24:b0:b3:ff:59:
38:b0:65:f9:78:43:23:51:24:d1:b9:da:96:47:83:ab:60:c7:
b1:e3:85:ef:23:88:1f:d3:95:31:5f:f2:fd:75:a8:f5:ae:ef:
d2:cf:5b:7f:5a:d3:9c:55:a1:43:94:b8:da:60:d3:24:dd:52:
b3:09:dc:bc:18:99:af:23:83:3b:60:95:25:c4:24:6c:77:24:
fc:e2:79:cb:5f:18:2e:c7:84:72:ea:df:37:3c:16:4c:4f:93:
c9:8e:43:13:a5:f8:d8:f3:42:8a:99:38:20:c6:07:4a:c6:30:
70:38:88:61:c1:c4:0f:46:ca:5c:b3:d1:af:8e:8b:7a:0f:0a:
37:0c:9f:a1:87:58:85:86:4a:e5:a5:9e:5e:c3:2a:2d:dd:29:
c7:12:f3:07:cb:51:1e:f3:12:6a:e9:4d:d4:6a:f2:5d:fc:b6:
93:5a:d9:93:25:af:f1:66:cc:cd:2d:2f:04:40:45:d7:15:a9:
96:d0:78:0a:fd:be:fc:64:67:a2:b5:e7:ec:c3:b6:96:62:14:
f9:df:91:89:b4:f5:c0:19:7a:23:7b:ec:8e:36:71:5a:95:af:
ba:87:b7:78:b5:2e:e7:87:9a:62:cc:54:35:b2:53:8f:f4:cc:
00:2e:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:29 2026 by rpki-client