Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File: COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier: 43C/0bx8eMc+cXvIeJhcS2y7W+9M+TaIaI0IEgMCCSs=
Subject key identifier: F7:28:F2:3D:ED:BB:D9:8D:ED:93:A9:21:98:63:1B:9D:ED:C0:8A:5E
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer: /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial: 01A0016F83A7AB119A1B8FB0DB1387A8BAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number: 1947
Signing time: Fri 14 Aug 2026 18:01:20 +0000
Manifest this update: Fri 14 Aug 2026 18:01:20 +0000
Manifest next update: Sat 15 Aug 2026 18:01:20 +0000
Files and hashes: 1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: /zeSxvwXz6x0zD7xXm3dJ6Bxox7xjVZMHgA3nzLJtmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:83:a7:ab:11:9a:1b:8f:b0:db:13:87:a8:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
Validity
Not Before: Aug 14 18:01:20 2026 GMT
Not After : Aug 15 18:01:20 2026 GMT
Subject: CN=f728f23dedbbd98ded93a92198631b9dedc08a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:fc:c3:8b:29:70:15:24:d3:d3:b0:23:91:
7a:86:8b:00:d7:56:05:95:db:6e:f3:50:a8:02:d6:
5e:5c:a8:2a:51:19:39:57:b2:39:60:a3:56:ae:bf:
d0:ba:89:bc:36:81:24:e3:d0:76:a2:c1:16:3e:47:
8b:5d:f5:02:cb:98:36:00:c1:c6:55:8c:ae:87:c7:
2d:3b:2f:55:73:ec:d7:90:a6:7a:a0:b4:35:9d:83:
c0:8f:c3:28:a4:c0:9e:37:b5:34:2d:1e:39:a6:7e:
8a:83:dc:b5:51:07:e5:6b:37:f0:dc:c1:a1:51:8c:
65:39:35:f4:dd:4e:18:12:00:17:f9:10:3e:20:9a:
0f:0f:14:f6:a5:52:86:9e:40:90:6c:6f:32:c8:d7:
74:f3:a0:1e:ae:1e:6c:ea:72:21:b4:36:91:f5:fa:
b2:54:ed:3f:8f:da:14:c3:e5:f0:cd:19:03:f4:8f:
8f:c0:99:85:06:0f:ba:1b:39:ff:26:72:53:7d:45:
9f:8f:54:a1:3e:fd:41:be:c1:3e:45:fc:72:f1:97:
b5:1f:25:8c:c0:54:f3:2b:f1:5c:fc:7e:9d:59:fd:
4f:fa:7e:19:fa:ce:4a:b9:7a:85:75:41:8b:2d:0d:
fb:34:0c:8f:13:e9:f9:d1:22:a4:a6:7d:4e:b7:be:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:F2:3D:ED:BB:D9:8D:ED:93:A9:21:98:63:1B:9D:ED:C0:8A:5E
X509v3 Authority Key Identifier:
keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fd:67:1b:ce:3a:0d:e9:9b:16:77:5f:b0:73:ba:05:2c:aa:
e5:89:99:d8:68:e6:1e:22:a9:bb:c1:bc:76:f1:1a:67:7f:d9:
92:2d:2a:8e:c7:31:52:b9:9b:80:a2:6e:49:26:6b:77:42:8f:
b0:78:ac:62:65:6f:c1:5c:d6:ff:1b:28:ac:c3:1a:8c:86:da:
15:17:9c:e7:bd:5a:7c:a6:9e:79:1e:2e:1b:d4:ff:41:72:54:
16:1a:7c:d7:b0:be:7e:65:1b:60:49:92:4c:08:a4:ce:04:49:
ce:fd:f6:9c:3a:d9:44:81:f4:63:d0:cb:e3:dd:6d:fd:0e:a2:
f8:8a:6c:1a:a4:21:3e:24:62:2b:9e:cd:6d:39:91:95:7a:7c:
8c:0c:74:0b:72:d4:f0:1d:8b:f3:51:e1:5f:a7:b9:24:0a:e7:
c5:0f:60:51:21:79:2a:54:51:e2:ab:ef:15:e8:83:63:9c:60:
1b:4a:f2:6c:10:eb:fd:ab:b7:55:28:51:ae:5f:33:14:0a:49:
7e:9b:e2:93:61:78:f6:86:8e:c4:25:61:a0:ab:56:da:09:71:
35:e6:6e:fa:36:c3:68:b4:bc:9a:45:c9:5a:bc:54:3d:ea:c3:
62:89:0b:77:e3:29:dc:a5:4d:45:ab:d6:3c:71:fe:83:a9:92:
7d:b1:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:45 2026 by rpki-client