Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: gcQkMs3IS+AGmJ8pHheP0mpT04lK9EnipAJa5Vz+Xe4=
Subject key identifier: E8:89:FE:3F:30:ED:26:AF:5F:BE:47:22:7C:8E:0D:43:6C:F1:18:95
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019FA1F1EDEFACD3F2204B76F2C840E8F655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 05:00:14 +0000
Manifest this update: Mon 27 Jul 2026 05:00:14 +0000
Manifest next update: Tue 28 Jul 2026 05:00:14 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: Hilfioh/fd1ECGxH73JnVpY0Y3T9M0bXGh7InlytU5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f1:ed:ef:ac:d3:f2:20:4b:76:f2:c8:40:e8:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Jul 27 05:00:14 2026 GMT
Not After : Jul 28 05:00:14 2026 GMT
Subject: CN=e889fe3f30ed26af5fbe47227c8e0d436cf11895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:72:f8:9f:c6:e3:8f:57:43:45:72:41:05:
45:c9:32:a4:0e:e2:50:74:cc:80:fa:cc:30:05:c1:
d0:ab:39:6e:85:24:3a:87:6b:d6:1e:33:4e:be:6b:
6a:fc:b8:61:7a:0d:31:7b:81:fa:75:1c:48:30:a9:
2a:63:a0:f9:64:d9:d4:76:ad:80:4f:42:cc:21:2b:
1a:13:f5:f1:9a:55:c8:35:8f:9d:be:8f:93:06:b3:
18:52:27:ec:fb:b5:46:6f:96:74:96:82:82:01:f6:
bd:67:97:f1:a4:8b:f5:4c:d1:6a:28:99:55:3c:be:
82:0b:f5:d0:18:63:1a:46:5a:e1:f0:3c:08:5f:91:
5d:6b:89:08:d7:73:14:af:fb:69:42:4c:95:13:01:
c1:ad:9a:c8:2b:02:b4:8a:2f:b5:5f:ee:02:ad:35:
b4:4b:5a:d3:0e:8c:be:1c:c3:f0:96:19:06:a7:7a:
d0:53:a6:4b:32:06:25:36:22:9f:b9:27:d6:dd:48:
c1:3f:2c:f8:42:ac:c0:de:f8:84:b6:f5:36:bd:9f:
7e:aa:6e:84:a6:2a:d9:82:8d:05:fb:7c:9e:b0:01:
1b:a1:b3:e0:91:6b:99:c9:2c:67:41:61:fb:93:f2:
c5:e9:e1:80:51:be:08:b5:73:62:9b:da:49:6b:ea:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:FE:3F:30:ED:26:AF:5F:BE:47:22:7C:8E:0D:43:6C:F1:18:95
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:f0:dd:e7:f7:ef:9a:c2:84:b8:7f:9b:08:0a:48:1f:42:
43:39:09:eb:1e:dd:9e:c6:b9:a7:b4:bf:ed:b6:60:b8:6e:44:
ba:48:bc:47:d7:b4:98:33:e8:6a:ac:bd:bf:8b:c9:3a:41:4d:
1d:bb:79:75:3a:90:8c:6e:24:2b:3b:f8:9b:16:2e:20:bf:c5:
8f:7b:ff:72:41:b0:41:0e:6e:53:b4:b6:6c:52:7d:99:8a:21:
80:ae:c5:c8:33:4e:1d:5d:e0:bf:c2:07:e3:e7:1d:12:27:58:
a5:7c:47:cf:1b:fd:2b:a1:44:d2:bd:5b:18:5b:38:c2:62:83:
3d:2c:4c:d4:36:ad:1d:0d:c8:b7:c4:bd:6c:0c:92:6f:9d:4b:
6e:90:c9:3a:7f:83:62:cd:bb:da:02:60:a6:38:d0:86:46:9b:
c7:1b:db:ce:b4:aa:54:b9:b6:da:ea:f8:c0:ce:f8:59:87:57:
a9:8d:22:ef:c1:ac:74:39:cd:12:4a:f6:8e:d6:75:57:ed:51:
f8:e7:aa:9a:f0:4b:30:3d:3b:f3:e5:03:6b:88:b9:e0:52:45:
ba:af:7f:31:dc:c1:0e:09:1e:69:f8:fb:15:f1:e0:67:cf:1d:
0a:2f:d5:8d:2c:92:96:c7:dc:fe:11:81:fd:a8:73:be:8d:71:
58:ee:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:33 2026 by rpki-client