Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: ycLdOzRdwXVOl7XbgwMOE9INvZZBfCzPA5fLT9sdsNY=
Subject key identifier: 06:A4:99:03:6D:C5:40:8E:20:B4:CC:A1:C0:7B:8A:7A:6B:75:2E:51
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019D389BA5711CC3F64BCC3176AEA9B45F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 1036
Signing time: Sun 29 Mar 2026 08:00:17 +0000
Manifest this update: Sun 29 Mar 2026 08:00:17 +0000
Manifest next update: Mon 30 Mar 2026 08:00:17 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: dj9Jn5RIgVT9Z8pI5gTOaPC77XrXByR8/zLSA+F0SR0=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a5:71:1c:c3:f6:4b:cc:31:76:ae:a9:b4:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Mar 29 08:00:17 2026 GMT
Not After : Mar 30 08:00:17 2026 GMT
Subject: CN=06a499036dc5408e20b4cca1c07b8a7a6b752e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:8f:0a:9d:9f:64:a4:61:ec:78:ab:ee:77:
c7:68:b1:b9:0c:7e:1d:48:24:4e:ba:e4:82:30:fe:
bc:b6:82:32:c0:47:87:63:7c:7b:4f:30:20:47:f0:
00:9c:eb:07:bd:2f:65:2a:34:d4:57:16:b5:7d:38:
47:cc:4a:4a:a0:dc:3d:eb:bd:90:d8:bd:6a:45:11:
00:64:25:b9:fb:04:0c:26:be:a7:3b:c9:ce:6e:44:
8b:e8:e6:b2:02:4d:5f:83:23:50:2d:e7:4b:40:8e:
b5:61:6d:ab:56:0f:bd:97:95:6a:7e:2b:1d:df:9e:
6c:94:2f:21:4d:9a:d5:89:d6:08:9e:a5:b9:b5:5a:
55:ce:21:04:32:12:19:1a:ce:03:90:eb:90:a8:54:
3c:4d:31:f1:fc:cc:89:52:d4:95:c6:55:17:fc:2b:
b4:f8:43:2d:d7:0a:8b:f2:27:fc:af:f5:53:44:9c:
5e:f2:fc:23:76:9b:b7:bf:16:d1:44:72:87:98:a3:
03:3a:82:3a:10:2f:21:93:46:c1:01:91:56:e6:37:
5c:c9:25:8e:5e:07:65:6e:17:47:2b:ee:9e:7a:db:
47:26:27:cd:cb:03:db:fb:cf:e3:95:58:92:51:bd:
ce:25:58:dd:e5:5a:04:35:52:f1:bd:c7:54:03:82:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:99:03:6D:C5:40:8E:20:B4:CC:A1:C0:7B:8A:7A:6B:75:2E:51
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:21:d7:ef:bb:49:20:89:95:ef:f4:94:d2:2b:da:fc:a3:
bc:46:b9:fa:e0:2b:7d:eb:a2:fb:33:6a:07:61:55:72:49:6d:
16:fa:d7:fa:e0:7f:75:66:50:b6:4c:3e:a4:04:76:3a:81:17:
56:ce:10:79:b6:c9:2b:6e:fd:f8:af:eb:12:6b:f8:5a:8d:d3:
11:c8:52:8c:53:85:34:d7:6d:9c:f7:a8:47:1b:1b:cd:c8:ed:
32:97:d4:1c:9d:7a:e3:d3:62:10:02:8f:a9:75:17:72:71:73:
36:aa:07:14:1d:0f:fc:33:bd:33:13:81:b8:dc:90:30:b4:3e:
b6:59:5d:96:16:f2:15:0c:dc:a0:cc:7f:1a:5b:81:06:5c:27:
9b:e8:c6:d2:e9:6a:8d:92:17:de:43:09:b7:06:0f:88:fc:bb:
85:c3:30:be:78:20:16:9f:36:6a:6d:03:c4:40:f8:dc:23:e3:
87:1e:fb:1e:a1:b6:cf:33:9f:2c:77:67:91:46:c8:c3:b8:25:
5e:b0:13:a5:eb:a3:90:d7:b8:58:b8:34:00:f1:f4:e5:d4:c7:
4e:1a:01:20:e0:12:b2:3e:29:60:ca:79:bc:29:68:48:c6:91:
f4:0a:14:0f:3a:a0:e9:de:1a:71:a6:1d:8f:bb:53:5c:a1:48:
f9:c2:e5:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6VxHMP2S8wxdq6ptF8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3
NjEyMGMwHhcNMjYwMzI5MDgwMDE3WhcNMjYwMzMwMDgwMDE3WjAzMTEwLwYDVQQD
EygwNmE0OTkwMzZkYzU0MDhlMjBiNGNjYTFjMDdiOGE3YTZiNzUyZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PmPCp2fZKRh7Hir7nfHaLG5DH4d
SCROuuSCMP68toIywEeHY3x7TzAgR/AAnOsHvS9lKjTUVxa1fThHzEpKoNw9672Q
2L1qRREAZCW5+wQMJr6nO8nObkSL6OayAk1fgyNQLedLQI61YW2rVg+9l5Vqfisd
355slC8hTZrVidYInqW5tVpVziEEMhIZGs4DkOuQqFQ8TTHx/MyJUtSVxlUX/Cu0
+EMt1wqL8if8r/VTRJxe8vwjdpu3vxbRRHKHmKMDOoI6EC8hk0bBAZFW5jdcySWO
XgdlbhdHK+6eettHJifNywPb+8/jlViSUb3OJVjd5VoENVLxvcdUA4KiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAakmQNtxUCOILTMocB7inprdS5RMB8GA1UdIwQY
MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt
ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm
LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2Yh1++7
SSCJle/0lNIr2vyjvEa5+uArfeui+zNqB2FVckltFvrX+uB/dWZQtkw+pAR2OoEX
Vs4QebbJK279+K/rEmv4Wo3TEchSjFOFNNdtnPeoRxsbzcjtMpfUHJ1649NiEAKP
qXUXcnFzNqoHFB0P/DO9MxOBuNyQMLQ+tlldlhbyFQzcoMx/GluBBlwnm+jG0ulq
jZIX3kMJtwYPiPy7hcMwvnggFp82am0DxED43CPjhx77HqG2zzOfLHdnkUbIw7gl
XrATpeujkNe4WLg0APH05dTHThoBIOASsj4pYMp5vCloSMaR9AoUDzqg6d4acaYd
j7tTXKFI+cLllg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:25 2026 by rpki-client