Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: CEPQ77SDnaYlaXZ9yVVvADVcVdGEfJyuTaa7GREZQvI=
Subject key identifier: 2E:D4:A4:00:4C:57:AE:F7:AE:7F:C0:64:49:02:1D:33:E2:92:BB:4C
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019F11C04CF793E9AA65949CC9F1959C899A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 112B
Signing time: Mon 29 Jun 2026 05:00:42 +0000
Manifest this update: Mon 29 Jun 2026 05:00:42 +0000
Manifest next update: Tue 30 Jun 2026 05:00:42 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: 1ANqySZUJcMfF1NXHalsTKOx3Z3H9MYUbUjIegdNePQ=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:4c:f7:93:e9:aa:65:94:9c:c9:f1:95:9c:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Jun 29 05:00:42 2026 GMT
Not After : Jun 30 05:00:42 2026 GMT
Subject: CN=2ed4a4004c57aef7ae7fc06449021d33e292bb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:3f:f2:fb:69:41:cd:d8:e5:3d:1d:db:0d:
21:c3:f7:c5:1d:fc:73:dd:64:af:fa:24:00:23:84:
bc:94:af:c0:0d:da:be:da:97:66:c7:1b:17:35:5f:
48:44:87:7d:4e:c0:f9:8a:ea:53:38:66:67:5b:aa:
50:9e:7f:9c:a8:af:0d:1b:da:60:e0:02:7d:2e:0b:
83:04:9c:4a:08:93:66:63:b1:3d:b2:86:cb:cb:c2:
a3:bd:41:40:6f:c0:95:51:b3:3c:2e:3a:ca:d0:71:
9f:77:51:16:7e:ab:4b:a0:23:e3:7a:e4:32:bc:d3:
53:cb:c6:37:6b:f1:4f:8f:89:b0:0f:7d:a4:d7:55:
b4:53:08:59:fc:8c:a0:85:c6:e6:c0:eb:47:ff:3e:
8a:22:af:27:c8:b0:e0:8a:b2:d1:a5:af:dc:8d:54:
71:42:35:dd:e3:6e:94:ed:e7:f9:32:a5:f1:17:b1:
73:bf:a7:97:d9:87:7a:eb:63:71:74:7b:61:62:78:
27:a3:e3:1f:af:11:e5:66:14:56:f5:f4:8f:3b:c7:
93:ab:5d:5a:f4:4a:bc:af:27:25:fd:03:01:40:5c:
a6:b1:1c:6c:ae:bd:53:d5:f8:51:2d:1f:a4:e5:4c:
f7:e4:d0:90:82:4b:4e:a4:c3:c2:4d:58:d6:8c:16:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:A4:00:4C:57:AE:F7:AE:7F:C0:64:49:02:1D:33:E2:92:BB:4C
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:b6:43:8a:e1:94:c1:86:3c:20:53:ac:eb:f0:4c:70:18:
ce:a1:db:ad:ad:b2:c7:54:40:d5:18:1d:61:54:e3:9a:c2:d0:
e5:e4:c7:4d:ae:f8:b8:eb:27:07:c8:da:28:3e:ff:5a:0a:5c:
29:ab:74:86:ce:50:8c:77:b0:55:8f:f4:7c:5c:0f:31:0f:a4:
4e:d7:07:1f:f2:b3:67:86:dd:4b:c2:7f:dd:14:12:14:db:ba:
61:15:7f:d3:75:b0:3c:96:4d:1c:a1:44:03:94:e7:3c:be:6f:
e7:0f:bd:4a:c1:cb:3d:99:db:ea:23:53:48:2c:53:ca:77:d4:
e8:d9:ba:c3:4c:65:ca:4f:aa:74:38:0d:12:60:23:d9:78:b8:
49:c5:56:77:37:06:62:50:a1:d5:f5:9b:9d:70:f7:03:fc:8a:
d7:f7:4e:5d:25:86:ce:b5:c2:46:13:77:e9:c5:2b:22:67:66:
b4:49:6d:5f:8a:f4:58:bc:26:47:bc:67:1b:a3:00:4b:84:48:
9f:1c:b2:b3:bd:08:73:b5:69:6b:16:bb:36:26:f1:b4:78:14:
cd:af:4e:95:6d:6b:f4:e0:67:88:99:54:0e:a6:55:de:05:89:
98:71:38:83:5f:59:ad:79:48:1d:c8:97:07:0d:38:a9:7d:bb:
42:cb:17:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwEz3k+mqZZScyfGVnImaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjYwNjI5MDUwMDQyWhcNMjYwNjMwMDUwMDQyWjAzMTEwLwYDVQQD
EygyZWQ0YTQwMDRjNTdhZWY3YWU3ZmMwNjQ0OTAyMWQzM2UyOTJiYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjac/8vtpQc3Y5T0d2w0hw/fFHfxz
3WSv+iQAI4S8lK/ADdq+2pdmxxsXNV9IRId9TsD5iupTOGZnW6pQnn+cqK8NG9pg
4AJ9LguDBJxKCJNmY7E9sobLy8KjvUFAb8CVUbM8LjrK0HGfd1EWfqtLoCPjeuQy
vNNTy8Y3a/FPj4mwD32k11W0UwhZ/IyghcbmwOtH/z6KIq8nyLDgirLRpa/cjVRx
QjXd426U7ef5MqXxF7Fzv6eX2Yd662NxdHthYngno+MfrxHlZhRW9fSPO8eTq11a
9Eq8rycl/QMBQFymsRxsrr1T1fhRLR+k5Uz35NCQgktOpMPCTVjWjBbeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7UpABMV673rn/AZEkCHTPikrtMMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHi2Q4rh
lMGGPCBTrOvwTHAYzqHbra2yx1RA1RgdYVTjmsLQ5eTHTa74uOsnB8jaKD7/Wgpc
Kat0hs5QjHewVY/0fFwPMQ+kTtcHH/KzZ4bdS8J/3RQSFNu6YRV/03WwPJZNHKFE
A5TnPL5v5w+9SsHLPZnb6iNTSCxTynfU6Nm6w0xlyk+qdDgNEmAj2Xi4ScVWdzcG
YlCh1fWbnXD3A/yK1/dOXSWGzrXCRhN36cUrImdmtEltX4r0WLwmR7xnG6MAS4RI
nxyys70Ic7Vpaxa7NibxtHgUza9OlW1r9OBniJlUDqZV3gWJmHE4g19ZrXlIHciX
Bw04qX27QssXJg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:42:39 2026 by rpki-client