Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: 9dpieKSZ9yleN9Q0/8LXXsYGJwtoWBQHj5aWu/1OnbQ=
Subject key identifier: 3C:82:47:75:37:08:C7:63:FF:9A:B8:16:BA:1C:31:F1:86:5E:27:CA
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019CE4ECB6FDB0715D8C9308BC9B7257BDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 02:00:44 +0000
Manifest this update: Fri 13 Mar 2026 02:00:44 +0000
Manifest next update: Sat 14 Mar 2026 02:00:44 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: jYX04iUbCocej1BIII+fjf74O/mqhF2iVhUqwtQIysQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:b6:fd:b0:71:5d:8c:93:08:bc:9b:72:57:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Mar 13 02:00:44 2026 GMT
Not After : Mar 14 02:00:44 2026 GMT
Subject: CN=3c8247753708c763ff9ab816ba1c31f1865e27ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:39:ba:63:1c:7d:49:2e:18:65:58:cb:93:
4a:62:c7:95:3f:ac:d0:93:25:7d:8b:bb:6c:11:8c:
f9:7a:fe:64:c5:d4:f9:21:97:ca:33:08:9b:e9:4f:
5b:81:b3:02:5e:0b:da:ef:74:52:df:37:90:4e:e0:
d9:26:2c:4b:0d:00:b9:87:b8:50:0a:12:84:35:df:
fb:37:67:23:2e:2f:4e:1a:ba:a3:99:76:6c:de:c4:
f9:13:a0:1e:2a:91:e5:47:c5:3f:67:cb:52:54:08:
eb:40:c1:9d:7b:2e:19:9f:2c:6d:7d:62:fd:b3:c1:
bc:a8:5d:0c:1c:a5:05:76:37:73:02:b8:e3:b6:26:
cf:17:db:fd:20:0b:b9:0f:d3:95:0f:88:08:b1:e8:
35:b5:bb:f2:cf:d1:2b:0f:6e:da:28:07:b1:1a:39:
90:1b:e2:db:7f:d9:e4:7e:c3:f6:21:8c:d7:2c:13:
b2:3e:d8:34:3e:f8:1d:96:bc:fe:2f:bb:48:be:49:
fd:b1:92:d3:cc:ce:85:e2:e5:ae:2d:1c:04:bc:57:
ce:7f:61:6f:18:df:c3:03:2d:04:3a:ac:0c:8b:ed:
e0:ee:1e:e1:c3:f7:ab:6a:75:a9:5a:53:11:a3:cd:
13:d6:83:bb:cb:cd:35:35:2f:4c:ec:da:b2:4c:a9:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:47:75:37:08:C7:63:FF:9A:B8:16:BA:1C:31:F1:86:5E:27:CA
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2e:ef:a2:78:05:8e:d8:22:76:c0:bd:ff:27:c9:56:d4:4d:
7c:f2:f8:f1:1d:2f:cc:32:da:06:d7:6d:1a:aa:12:49:7c:33:
02:b4:72:52:bb:1b:d6:3d:62:cd:79:b6:67:b6:84:ec:fe:ff:
94:e1:e9:75:30:ea:17:2f:f4:43:0c:87:66:63:10:48:4a:7e:
9d:2b:2b:b4:2c:eb:6f:0d:d7:8b:88:13:ed:80:77:65:25:bd:
61:51:64:77:41:9e:8c:d6:7e:b9:71:24:d2:10:e5:4d:d6:81:
6c:41:9b:2c:68:be:30:42:f3:4f:72:0e:a4:5e:bc:7a:31:77:
59:cb:cb:59:1e:42:cb:50:64:00:59:dc:12:b9:bd:38:6b:8d:
64:cc:c1:fd:56:c5:9d:88:84:14:b3:d8:21:9c:27:3c:82:7d:
e3:13:62:1f:97:77:59:54:6c:07:24:d4:56:78:e8:44:2f:89:
2c:97:86:df:96:7e:62:56:b4:31:0c:dd:29:63:51:35:a5:21:
f6:39:12:f6:cb:46:b9:39:68:f8:8b:0b:ca:64:8b:58:7f:50:
b0:18:6e:1b:56:0e:71:ad:61:2e:77:0c:61:eb:eb:20:3e:45:
5e:22:ae:bb:79:60:72:fd:10:0e:d8:f5:66:67:24:4d:99:1e:
3d:4e:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:27 2026 by rpki-client