Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: oPPoiZbZQ9YkLZSH8ohvvlSosNn8QmHKhYjNgc7Ooi0=
Subject key identifier: A9:02:3C:58:1D:6D:ED:34:D6:E5:80:AA:74:DF:BD:92:A7:1E:6D:D5
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 019DA7F9ACDA61EF4B079CA0FA8993E06A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 05CF
Signing time: Sun 19 Apr 2026 23:00:50 +0000
Manifest this update: Sun 19 Apr 2026 23:00:50 +0000
Manifest next update: Mon 20 Apr 2026 23:00:50 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: 9JGa73I7vJSuKpttu2AVrMuQTkNPf1SDyvGCYGf5rRI=)
2: KUjkZ8QU9wVEQTMwvaNEDbxlxDU.roa (hash: SSnpC+LDbpJEWW7Dz9SA6laQ6jwgy6aN8IlIVc7fue0=)
3: aXRWeaKRfz8xctBkOcAjTiqqUyc.roa (hash: 1GTiSvFGIEqbWdGzrD6YYk/YH+B3NyH6shZKFsYxvxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:f9:ac:da:61:ef:4b:07:9c:a0:fa:89:93:e0:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Apr 19 23:00:50 2026 GMT
Not After : Apr 20 23:00:50 2026 GMT
Subject: CN=a9023c581d6ded34d6e580aa74dfbd92a71e6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:01:9a:e3:03:6a:07:21:0e:f7:31:32:88:
8e:2d:f8:ee:07:52:9f:b9:fb:5c:39:f2:94:a9:cb:
00:de:64:cd:b8:20:cb:0e:27:73:aa:aa:b9:cf:5c:
ba:ae:55:90:2c:53:7a:a7:41:0b:b9:8a:06:e4:4c:
91:27:8e:a9:eb:c0:50:ac:0b:a0:95:8b:73:e0:f4:
47:46:69:4f:e8:73:e9:87:0c:56:6f:5e:fe:07:dd:
1d:05:14:ea:fa:a4:8c:e4:fe:3f:7e:69:d6:68:ca:
39:52:6e:ad:9a:de:c7:ae:4c:b2:4c:e4:0f:16:ba:
ae:a9:e9:3f:df:b1:89:c0:0a:34:a4:e6:00:26:ae:
c2:6e:86:01:35:2b:e0:d0:d5:c3:ff:c6:20:00:e0:
8d:4a:89:47:b3:ea:b0:cc:29:f5:06:23:eb:37:31:
08:71:ce:41:95:22:e6:f4:86:d3:e6:b7:7f:45:ea:
2d:45:df:eb:64:7d:e4:7b:cd:26:9d:3c:44:0d:f4:
27:36:8f:13:2d:74:a3:75:85:90:22:73:7e:95:11:
45:53:6c:6f:1a:89:e0:d8:43:f2:82:66:be:46:ed:
50:ab:ee:c1:ff:63:76:91:98:49:ff:81:d1:3a:6e:
23:42:68:31:ba:ef:63:64:7a:91:c5:53:94:a7:52:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:3C:58:1D:6D:ED:34:D6:E5:80:AA:74:DF:BD:92:A7:1E:6D:D5
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2f:af:cf:5f:5d:7d:28:35:fd:94:8e:45:c5:91:d8:95:5b:
79:06:7b:db:60:49:80:30:45:b6:29:b6:ee:52:4a:f5:18:a2:
d5:c0:fa:f6:05:9d:63:ad:3d:6a:6e:cd:e1:f1:84:6b:e9:ae:
93:ff:20:f8:10:c1:d5:e2:88:54:9e:81:96:b8:77:2e:89:b4:
63:ab:3c:64:96:b9:ac:78:03:2f:26:93:22:a3:2c:47:cc:10:
d0:f0:c5:73:c0:d8:b2:95:78:12:3f:99:09:0a:91:c4:57:7d:
c4:03:a7:37:a6:e9:4d:aa:9d:d4:96:63:30:0e:2b:dc:ab:96:
df:58:a5:f9:04:87:bb:53:ea:18:70:1d:9f:8f:7c:63:a9:6c:
2b:24:cd:2e:54:ca:ed:7a:ad:12:72:04:01:0e:f4:f1:d0:19:
3d:e6:31:76:f6:ef:3f:12:3d:77:d2:fe:ae:62:2a:9b:e6:8b:
e8:3b:de:4f:a9:66:47:ff:1e:6e:31:4f:2e:ea:b0:02:31:9a:
53:c3:2d:d7:e2:eb:a5:f5:0c:8b:64:cb:a7:61:c3:47:39:db:
c8:8a:52:8d:1b:e7:11:f1:d2:9c:5c:d5:c9:e3:f7:1e:86:9c:
91:93:c8:cb:c2:17:8d:85:f3:b9:76:c0:9e:a1:18:f9:a4:8f:
88:ec:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:28:21 2026 by rpki-client