Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: zmg/GXbGyNYpnU+Ey5tD/WGBxdbn7DQ+w6q9trFNU5M=
Subject key identifier: 7B:86:BF:B3:D4:C5:DB:18:F4:4A:B8:84:A2:13:4F:28:D5:35:6F:08
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01A1551C994DA0AAA9D34310013F7E821C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 1257
Signing time: Mon 19 Oct 2026 17:01:39 +0000
Manifest this update: Mon 19 Oct 2026 17:01:39 +0000
Manifest next update: Tue 20 Oct 2026 17:01:39 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: ATBBXzgzNxzktjm5tWNHEQQp0m/nqkicWSlFBspx8m8=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:1c:99:4d:a0:aa:a9:d3:43:10:01:3f:7e:82:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Oct 19 17:01:39 2026 GMT
Not After : Oct 20 17:01:39 2026 GMT
Subject: CN=7b86bfb3d4c5db18f44ab884a2134f28d5356f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:aa:1f:38:82:43:bf:c1:2b:fc:a5:d4:d5:
f0:98:fc:0a:6e:4e:dd:4d:d1:bb:f1:f2:15:f2:2a:
06:02:23:12:d3:2b:2f:ee:27:df:cf:7d:33:df:5d:
fd:52:8a:03:d5:01:12:cf:c5:c1:ec:86:7c:e0:15:
93:4a:a0:8d:fb:1e:45:95:26:16:52:22:32:c6:ce:
12:28:6f:f4:86:7a:a0:c0:76:94:90:e4:28:68:81:
05:ba:cd:37:51:07:0d:f0:c4:fe:89:6f:d8:20:6e:
a5:b2:a3:80:eb:a7:d2:bc:07:a2:af:5d:24:9b:3c:
d6:e6:8a:b2:4b:b1:35:28:60:18:6c:c1:58:5f:bc:
2b:59:ac:56:5d:76:57:6e:fd:5d:9f:d7:0d:2c:7e:
e1:38:34:24:e6:b6:0c:fb:db:f5:d9:21:90:52:5d:
52:00:b1:93:8f:aa:b7:cf:60:d2:3c:ca:14:59:12:
57:d8:ae:fc:f5:bc:03:1b:e0:b6:8c:e5:53:4d:56:
b4:50:67:98:ef:d8:7c:c1:b2:3c:ab:8f:48:6e:ff:
40:b1:76:46:9c:a4:00:42:bc:47:08:c8:07:b8:66:
03:7c:f6:6a:6f:e9:75:3c:45:c3:9b:58:08:0e:03:
28:be:34:83:21:27:0c:94:6f:9e:ab:50:7e:d5:88:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:86:BF:B3:D4:C5:DB:18:F4:4A:B8:84:A2:13:4F:28:D5:35:6F:08
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:3b:65:51:5c:a1:d0:12:9f:5e:19:9c:16:44:db:0f:0e:
93:8d:d6:32:ac:76:56:4c:2c:d1:7b:10:c8:ec:3c:0e:21:5e:
ea:ef:bd:52:2b:25:b0:49:9f:48:e5:a6:78:a6:16:a9:d0:23:
c9:70:b7:68:ef:12:3f:af:22:56:11:48:59:54:63:70:47:0f:
e5:0b:8f:95:b9:53:39:e2:e2:73:da:70:8a:04:79:0a:ff:d9:
86:f5:fd:4f:02:70:2d:05:e8:ed:ac:b0:24:39:f6:45:03:47:
4b:cd:98:b7:47:40:db:a3:5b:80:41:02:7f:e5:9f:7d:82:d4:
7a:23:e6:b8:ad:24:37:a4:d2:29:92:a0:2e:47:2f:51:9d:16:
38:f6:6d:12:e7:34:b8:38:13:04:f1:9f:ef:6c:9c:b7:fe:4d:
d1:6b:19:2c:e2:92:87:08:1c:46:e1:71:3e:49:27:0a:46:33:
5c:dc:ca:b7:a7:1e:40:7e:fd:d9:f0:d4:9d:6a:11:0c:0f:c9:
97:a0:80:7f:4d:99:2c:d3:99:70:6f:6d:db:d8:ee:6c:a9:11:
4c:6a:6e:d3:f7:8c:21:20:01:f2:59:72:89:a8:60:82:01:06:
6b:74:95:42:cb:64:78:88:06:b4:47:32:64:34:ba:70:10:c2:
39:f2:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:04:58 2026 by rpki-client