Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: uRI+Jc0W/AH15mRD+D9P0vwB/zG8PZH3RAoOWsl61EU=
Subject key identifier: C3:EA:BE:92:43:09:36:4D:2F:F0:34:AF:3E:0A:3D:A8:48:A5:2E:62
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 01A089B1094319326FC4ADD68C65480C4CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 05:01:15 +0000
Manifest this update: Thu 10 Sep 2026 05:01:15 +0000
Manifest next update: Fri 11 Sep 2026 05:01:15 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: 8UoheIMMaBMoaA4vTjufoQwtRuFCwH0hFr9wCqu5myk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:09:43:19:32:6f:c4:ad:d6:8c:65:48:0c:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Sep 10 05:01:15 2026 GMT
Not After : Sep 11 05:01:15 2026 GMT
Subject: CN=c3eabe924309364d2ff034af3e0a3da848a52e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:ff:f0:2a:b9:b5:f6:d4:aa:68:10:50:6b:
cb:cd:51:e4:cd:62:14:42:4b:51:f0:88:a3:13:94:
bc:87:4f:c0:75:9a:ce:29:cb:44:81:85:f1:e7:15:
5e:96:57:1c:ec:54:50:ae:00:5e:a0:e2:82:1d:82:
0f:8b:70:ce:6b:17:8f:80:98:9e:ea:a9:7d:19:3d:
2d:02:b2:44:d3:cf:f9:a1:18:f9:3e:02:32:34:7a:
c6:48:aa:94:c1:50:a8:83:31:01:7a:74:32:2e:5c:
16:7d:e7:26:e5:81:9a:a4:19:af:cb:4f:2d:44:ae:
83:87:e7:88:33:cf:0d:ae:ed:e4:90:4c:df:83:aa:
47:ff:0b:6f:14:39:8a:d4:e5:96:79:89:2e:a6:c3:
24:ec:c3:86:da:50:0e:10:30:11:27:76:61:f3:60:
45:24:38:dd:2d:07:eb:80:ce:93:a4:ef:ff:5d:12:
1f:4d:a0:c3:fa:24:9d:6b:66:fc:d7:60:3c:55:c5:
b6:8f:32:fd:79:5e:01:c3:8d:79:f8:0c:14:50:9b:
76:42:b8:9a:b5:9b:5c:7e:cf:7f:4c:08:1e:56:5a:
1c:2c:d3:e0:1e:44:a4:24:57:f8:9b:52:ef:9d:b3:
d8:5a:59:2f:5d:49:a4:3f:1f:bf:2f:fe:6f:32:a7:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:BE:92:43:09:36:4D:2F:F0:34:AF:3E:0A:3D:A8:48:A5:2E:62
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:f2:10:03:c4:48:b3:f7:6c:1c:7c:97:d9:bf:ab:b8:d2:
d9:5f:1a:77:36:d7:09:00:c0:49:33:2e:14:22:55:75:fe:53:
88:d3:c6:28:e5:e0:82:fa:8d:dc:18:37:0c:e8:70:53:bc:d5:
6e:e9:12:ba:46:56:53:af:cf:c3:13:ae:62:59:f5:5a:db:88:
76:93:50:6d:f2:45:dd:bb:79:f5:9d:ba:f8:45:57:28:00:3a:
38:11:1f:d3:c9:86:c1:48:36:16:24:e8:85:48:f9:bb:44:83:
53:57:cd:e6:db:26:b3:44:21:85:0f:5b:6f:02:e0:35:d9:ef:
d6:9f:0b:44:64:d0:fc:d0:db:6c:6d:47:05:86:cf:3b:9a:f1:
ba:a1:da:fe:0b:12:a2:01:6b:0b:6b:07:00:53:f9:28:59:25:
a6:53:3d:fb:c5:64:bc:37:e6:8a:06:eb:3c:7c:ed:73:8e:51:
b4:13:aa:2e:38:a8:d4:90:ac:48:e2:ac:01:f2:e3:de:69:45:
1c:fe:ed:3a:6f:09:42:8a:1f:73:cf:15:a1:ad:a1:1a:60:52:
7c:8d:08:33:76:ec:f9:cf:1e:f8:75:cf:60:1c:11:5f:60:fa:
cd:86:9e:62:d1:d2:d0:2b:02:a7:76:db:8e:dd:05:41:86:d6:
c4:ab:72:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsQlDGTJvxK3WjGVIDEzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5
YzVhMWMwHhcNMjYwOTEwMDUwMTE1WhcNMjYwOTExMDUwMTE1WjAzMTEwLwYDVQQD
EyhjM2VhYmU5MjQzMDkzNjRkMmZmMDM0YWYzZTBhM2RhODQ4YTUyZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BP/8Cq5tfbUqmgQUGvLzVHkzWIU
QktR8IijE5S8h0/AdZrOKctEgYXx5xVellcc7FRQrgBeoOKCHYIPi3DOaxePgJie
6ql9GT0tArJE08/5oRj5PgIyNHrGSKqUwVCogzEBenQyLlwWfecm5YGapBmvy08t
RK6Dh+eIM88Nru3kkEzfg6pH/wtvFDmK1OWWeYkupsMk7MOG2lAOEDARJ3Zh82BF
JDjdLQfrgM6TpO//XRIfTaDD+iSda2b812A8VcW2jzL9eV4Bw415+AwUUJt2Qria
tZtcfs9/TAgeVlocLNPgHkSkJFf4m1LvnbPYWlkvXUmkPx+/L/5vMqcL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPqvpJDCTZNL/A0rz4KPahIpS5iMB8GA1UdIwQY
MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt
ZGMzYjYzMmU5ZTJiLzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi
LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkM7yEAPE
SLP3bBx8l9m/q7jS2V8adzbXCQDASTMuFCJVdf5TiNPGKOXggvqN3Bg3DOhwU7zV
bukSukZWU6/PwxOuYln1WtuIdpNQbfJF3bt59Z26+EVXKAA6OBEf08mGwUg2FiTo
hUj5u0SDU1fN5tsms0QhhQ9bbwLgNdnv1p8LRGTQ/NDbbG1HBYbPO5rxuqHa/gsS
ogFrC2sHAFP5KFklplM9+8VkvDfmigbrPHztc45RtBOqLjio1JCsSOKsAfLj3mlF
HP7tOm8JQoofc88Voa2hGmBSfI0IM3bs+c8e+HXPYBwRX2D6zYaeYtHS0CsCp3bb
jt0FQYbWxKty+A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:50 2026 by rpki-client