Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: bwzsrI/Kc1cpWngM/0tPEu2Lymzgk0iI0ePMTYYvI0g=
Subject key identifier: 12:C0:FF:01:EA:F1:D8:63:7A:84:17:94:A3:33:18:EF:33:BE:49:31
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019DD653B84462738FF5213BEEB1AFA94D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1873
Signing time: Tue 28 Apr 2026 23:01:44 +0000
Manifest this update: Tue 28 Apr 2026 23:01:44 +0000
Manifest next update: Wed 29 Apr 2026 23:01:44 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: DPYdOrPxXbejsrOusts2z3dZLeQZNyH4DMQlHiDxXsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:53:b8:44:62:73:8f:f5:21:3b:ee:b1:af:a9:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Apr 28 23:01:44 2026 GMT
Not After : Apr 29 23:01:44 2026 GMT
Subject: CN=12c0ff01eaf1d8637a841794a33318ef33be4931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:e3:80:e7:a4:1f:a9:a6:f5:89:47:be:e3:
4e:a5:fb:a8:b0:21:6b:70:e3:0e:16:cb:0e:91:13:
18:e4:b8:7d:c4:90:7c:f7:27:65:8a:5c:d3:4b:ff:
30:cb:a0:89:d2:b0:7e:f1:31:0c:b8:ed:be:72:65:
90:e2:a2:d9:d0:25:25:bf:c9:a6:a0:94:7c:4a:88:
6c:1a:cd:37:6f:96:8a:4a:0e:bf:f5:e9:51:3e:0b:
2a:35:44:60:38:4c:d0:66:e0:d3:44:44:2e:0c:70:
ef:88:8a:4d:29:75:7c:3f:2c:72:e6:66:1e:e8:de:
40:9f:d4:10:5f:9a:c9:7f:e3:96:9e:a1:39:35:ea:
9e:86:df:12:e3:39:8a:21:30:8d:1f:03:a8:25:92:
dc:d0:fb:68:88:84:9d:4b:ff:94:8c:fe:a8:c6:6c:
d6:84:19:e2:91:3c:88:f9:f5:d1:68:1f:44:d9:93:
de:17:5c:b5:c2:0d:44:fb:eb:cf:48:6c:20:2e:00:
08:a3:e8:40:7d:ff:4b:68:37:b4:d9:8c:30:97:12:
e2:bc:4b:df:42:4f:08:85:c8:85:50:07:6c:93:2a:
5b:25:c3:0f:ed:15:5a:ba:74:27:b1:69:35:24:be:
fe:6d:24:3e:dd:4d:7e:b6:31:80:b7:2c:9d:34:d1:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:FF:01:EA:F1:D8:63:7A:84:17:94:A3:33:18:EF:33:BE:49:31
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:41:fc:9e:d1:71:7d:51:5d:8e:9d:40:05:69:c5:09:21:ad:
af:cc:ac:1e:05:c0:b4:61:7b:63:c1:a3:e6:b5:4a:e8:56:e0:
4a:e9:95:c1:b6:14:0b:5b:99:a8:32:dd:f4:49:16:a9:28:28:
0d:39:42:60:96:11:f1:9d:5b:f5:51:26:80:5b:d2:ea:9e:9f:
3f:58:8a:8a:fd:33:aa:fa:d8:7f:40:82:dc:80:9a:90:f6:00:
f8:58:29:34:12:c8:a3:1f:39:29:c8:cd:ee:9a:82:e2:da:1e:
e9:79:68:26:28:2a:fe:43:af:e6:c9:a8:c3:6d:8e:c6:89:91:
af:6f:92:6c:e9:5f:34:dc:56:17:55:60:79:a3:e3:ef:4b:93:
2f:d4:40:4d:35:b1:6b:f4:20:26:c0:d3:4d:58:60:bf:54:3b:
aa:c0:9d:e6:c3:3e:7c:36:16:60:87:48:e1:c3:f2:3c:bc:23:
e3:1b:01:47:38:05:63:4f:59:c3:88:85:84:ec:60:59:83:e2:
96:84:19:62:5b:7c:46:39:8b:d2:a2:25:65:e9:a2:69:47:8a:
19:80:f8:13:df:87:c6:b8:25:f5:d3:2c:74:8d:7e:a9:14:3b:
c1:0a:d3:96:45:b4:b4:31:31:cd:45:81:99:e8:92:2d:c6:c8:
1b:23:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 07:31:20 2026 by rpki-client