Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: l23YrV766jxqjHLPFBCsJxISni+phb7m9QfKI/jiygQ=
Subject key identifier: B5:61:30:D1:6B:23:E2:BC:C7:C4:55:B3:AF:1A:8B:44:6F:16:47:85
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 01A18C7847475810979D27B5F4DE3AF28894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1A5F
Signing time: Fri 30 Oct 2026 11:00:55 +0000
Manifest this update: Fri 30 Oct 2026 11:00:55 +0000
Manifest next update: Sat 31 Oct 2026 11:00:55 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: Pi5YB5guhHjfXA2bljqdA2bCxfyyQOUEOr9IvYqu8to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:78:47:47:58:10:97:9d:27:b5:f4:de:3a:f2:88:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Oct 30 11:00:55 2026 GMT
Not After : Oct 31 11:00:55 2026 GMT
Subject: CN=b56130d16b23e2bcc7c455b3af1a8b446f164785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:6e:b7:b6:ec:3f:54:4d:b3:fc:5a:cb:0c:
23:8f:79:1b:9d:5c:14:fe:05:1f:be:fd:b2:0e:81:
bd:51:62:a5:4b:cf:9c:74:2e:b3:80:53:e3:6a:bf:
60:a9:16:be:aa:1c:c8:ea:f5:d6:16:ec:1b:cd:43:
35:61:7c:81:f2:59:e7:8f:93:ae:3f:8d:f3:d3:66:
6c:03:e3:4b:0d:ee:7d:0d:9e:9f:85:ff:a7:58:1b:
f6:38:a8:07:2d:c2:c1:99:6a:d3:e7:7d:0b:4f:ef:
8a:73:8e:5d:5d:ef:6b:8b:b0:03:24:5e:3c:19:7f:
fd:32:01:44:61:0b:8a:bc:dc:6a:de:60:fa:99:23:
a3:3f:6c:e1:0c:68:92:d7:af:74:a3:0d:f0:b3:84:
58:67:ff:4e:b8:34:45:d4:0f:3b:ae:af:8e:8d:29:
db:1a:49:f9:6c:a6:ce:b8:36:61:1b:dd:80:66:2e:
1f:9b:71:7a:02:54:f8:b1:ef:ae:c9:9b:ea:00:52:
83:e0:aa:42:b3:18:51:79:d1:d2:b5:32:29:49:3d:
88:a8:2f:f6:90:0e:7c:db:4a:35:91:95:3d:aa:e2:
2b:c2:fc:34:f1:d6:1c:22:85:16:cf:ec:d7:60:af:
35:ad:fa:20:57:b5:0c:19:2b:29:21:ae:2e:fc:0d:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:30:D1:6B:23:E2:BC:C7:C4:55:B3:AF:1A:8B:44:6F:16:47:85
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:e1:ec:49:8d:7e:a0:47:bc:5f:23:57:0b:64:52:31:a2:
b0:d9:5d:08:91:eb:54:e1:1d:4f:f9:b5:4c:8d:70:f3:9f:ac:
79:ab:25:95:7a:39:75:c2:43:34:65:b3:b2:db:48:23:33:05:
fb:f4:a3:2b:ea:7d:f6:52:5f:d7:5d:37:f6:a0:8f:5d:6b:1e:
95:77:5f:b5:31:d8:cd:cd:a9:86:05:3a:a9:72:f5:8f:1b:dc:
eb:96:ec:12:30:a7:6e:db:e0:64:8b:76:df:6c:77:b0:7e:ad:
14:85:86:b8:6b:50:71:8e:6f:04:c6:6a:a6:d3:b2:90:e6:ff:
de:16:72:a4:30:f9:63:0e:22:d1:e0:c6:71:c5:26:bb:57:15:
2f:4a:da:15:dd:5c:e0:4f:b5:77:6d:82:9e:9f:63:db:66:9e:
0d:91:cf:f5:f6:c6:d9:b9:53:c6:7c:90:0c:90:52:34:15:a2:
1a:bf:f4:31:13:ef:17:ea:c1:13:ca:ed:78:a7:be:05:79:33:
2f:ec:6f:d3:c0:3d:51:27:e5:24:f8:63:67:66:64:8a:05:6d:
c0:1d:7c:fa:35:f4:73:9a:b8:26:81:d9:c3:2e:cf:a3:85:41:
2f:85:67:20:09:06:7c:78:27:17:65:9b:5d:1e:f6:0f:25:a0:
2c:04:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:24:33 2026 by rpki-client