Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
File: Co6T8ZYb68EACcsmXAuvNHAqPas.mft (raw, json)
Hash identifier: wixvCOfJAKTTOKJmO2O1VUSbRQE3T97kWtyyb/M3yT0=
Subject key identifier: 55:21:B0:AF:27:5C:D2:84:95:68:7E:81:3A:35:96:78:10:67:D8:AF
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 019FA1F234733B4180BF217ADBD50FDA11A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
Manifest number: 06D5
Signing time: Mon 27 Jul 2026 05:00:32 +0000
Manifest this update: Mon 27 Jul 2026 05:00:32 +0000
Manifest next update: Tue 28 Jul 2026 05:00:32 +0000
Files and hashes: 1: Co6T8ZYb68EACcsmXAuvNHAqPas.crl (hash: +jZTIZ47zMRU3W1r+IYEgncn22XyOGEebHgY1z1TED8=)
2: KUjkZ8QU9wVEQTMwvaNEDbxlxDU.roa (hash: SSnpC+LDbpJEWW7Dz9SA6laQ6jwgy6aN8IlIVc7fue0=)
3: aXRWeaKRfz8xctBkOcAjTiqqUyc.roa (hash: 1GTiSvFGIEqbWdGzrD6YYk/YH+B3NyH6shZKFsYxvxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:34:73:3b:41:80:bf:21:7a:db:d5:0f:da:11:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jul 27 05:00:32 2026 GMT
Not After : Jul 28 05:00:32 2026 GMT
Subject: CN=5521b0af275cd28495687e813a3596781067d8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:b3:d0:c0:e7:2b:13:d1:9d:f7:1d:4a:0a:
64:5b:94:85:07:b5:4b:23:6c:40:a1:cb:2d:87:ab:
b4:68:53:71:b8:9b:93:4b:ca:d9:a5:d3:86:53:d7:
c6:0c:46:57:8e:4e:16:b3:38:4c:91:f5:e0:35:92:
fa:7f:66:e4:ea:7c:67:c1:c2:88:23:4d:50:a7:1c:
83:45:98:a2:ab:32:ba:c0:d5:48:6e:68:25:0c:24:
e8:01:91:69:52:7d:e4:cb:58:bd:f4:08:c3:96:1b:
48:e8:c1:60:4a:96:35:31:89:b0:56:a8:b2:3f:e6:
06:12:3d:d4:d7:df:71:c6:bd:43:77:8b:95:ba:9d:
0b:3e:7a:61:29:19:09:49:b9:8c:8a:88:c6:f7:57:
aa:7e:90:4c:f4:8a:55:bf:36:d3:01:85:45:24:d5:
dd:f4:f5:53:83:34:7a:cd:5c:a5:81:96:68:a3:9b:
46:99:a6:38:2e:a3:74:7f:f0:43:a9:a6:1d:b5:47:
1e:40:3a:9b:77:7f:99:9a:b7:b5:b5:cd:25:4c:d2:
ec:20:61:bf:18:1e:e1:d7:70:68:fd:bb:b9:c9:73:
8b:7a:bf:7c:6b:c3:24:81:d7:47:e9:77:0d:d4:49:
97:c4:16:cd:12:3c:cc:c4:15:06:30:ca:34:d2:15:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:21:B0:AF:27:5C:D2:84:95:68:7E:81:3A:35:96:78:10:67:D8:AF
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:6a:77:80:fc:ea:3d:d8:84:8c:50:43:cb:81:51:ed:9d:
c0:2d:f7:20:11:50:63:3f:6e:24:6d:83:39:68:7f:50:87:80:
36:b9:69:f6:ad:fd:61:dc:d6:06:97:9c:ee:5f:07:f4:40:43:
6d:8d:bc:84:7f:ca:b4:29:05:52:b4:da:f4:16:b9:63:b9:fb:
7b:95:5c:f0:c6:dd:a9:da:0b:26:f9:6c:5c:25:f9:b9:48:75:
1f:d4:48:17:12:2f:31:49:d0:01:f3:6a:8d:6a:5f:2c:9a:e8:
4e:76:10:50:4d:9a:20:30:ff:a0:14:e9:3d:11:2a:ad:63:9f:
f3:9f:2e:00:31:11:6c:1b:a4:a5:dd:04:66:07:3c:79:08:76:
d6:f8:a2:b0:68:1a:a3:47:25:3a:96:80:69:e5:ac:46:c4:69:
6a:b6:73:d1:d4:3c:da:ce:84:f3:04:10:d8:1c:68:4a:9d:40:
43:84:3e:79:7e:40:bf:0c:ad:52:4f:f4:f2:94:51:3e:2c:d4:
32:c6:7c:01:57:db:0e:46:16:ee:92:ea:da:ae:ef:f0:7d:15:
9f:37:f4:c8:20:8e:b0:8e:5b:3a:c3:cc:2e:c0:bb:c8:2f:35:
55:68:39:8d:cd:49:0a:70:f1:93:2a:14:8b:79:7a:31:9f:33:
8c:c8:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:24 2026 by rpki-client