Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: 0DFlIfTZ3qZFd6ta/jO9sK1QQivp0AFdolec7mi0+9k=
Subject key identifier: 6B:A1:F6:45:72:32:41:57:B9:E0:B8:5F:40:5E:97:10:C0:75:9E:55
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01A08BD63F6F072C43FE675D353C58B13758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0FC8
Signing time: Thu 10 Sep 2026 15:01:08 +0000
Manifest this update: Thu 10 Sep 2026 15:01:08 +0000
Manifest next update: Fri 11 Sep 2026 15:01:08 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: kYyhLowPhlJH+6XWsTIxP+1rRnu+O7yPM9tBsFFS66M=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:3f:6f:07:2c:43:fe:67:5d:35:3c:58:b1:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Sep 10 15:01:08 2026 GMT
Not After : Sep 11 15:01:08 2026 GMT
Subject: CN=6ba1f64572324157b9e0b85f405e9710c0759e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:04:10:6f:c6:7f:d8:ff:d0:96:95:7c:00:
4b:75:3b:fe:22:1c:bd:57:b8:b0:cd:7f:d4:68:2f:
dc:54:9e:f3:d4:04:a4:5a:bc:2e:fe:49:4d:92:30:
08:03:42:fc:64:8d:fd:6e:ec:12:f9:a5:75:b9:38:
88:83:85:d0:0d:55:1e:74:3e:ca:a5:55:99:03:2d:
37:4f:c0:ba:59:1b:ed:48:9e:7a:91:e1:11:b0:70:
76:98:e0:72:7f:20:2a:12:e1:53:c4:a4:4b:a4:7c:
1c:06:b3:bc:18:d4:5a:e1:04:f1:61:39:e4:36:6e:
d4:72:89:76:1d:be:48:8b:4c:d9:c0:99:12:f6:4b:
c6:ea:3e:52:65:1c:ee:9b:18:bf:1d:f8:65:32:93:
ed:08:ba:73:83:a8:3f:d4:e7:d2:0b:d3:d9:b6:86:
cb:69:ae:99:90:96:ef:47:96:dc:c8:c1:d8:6c:86:
79:22:44:19:ce:4d:72:79:59:4d:2b:56:6a:c5:4b:
8b:53:ee:f5:d2:57:d5:72:ba:a9:77:ed:e9:bd:c4:
f6:04:61:4e:f2:43:da:c7:b4:d9:f9:0c:2c:09:ca:
0d:90:d4:e6:67:3f:5c:48:d5:0a:e2:a7:d1:20:d2:
0f:57:fa:d6:1c:92:52:4f:62:3b:fb:87:06:f9:5c:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:F6:45:72:32:41:57:B9:E0:B8:5F:40:5E:97:10:C0:75:9E:55
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:14:fd:27:b5:cd:ab:89:28:46:93:f6:64:2a:34:49:89:6b:
92:04:f3:46:75:75:b4:fc:aa:a8:5f:26:e4:ac:1f:67:f2:27:
5f:0e:b4:f8:95:08:12:6b:fd:53:d7:7f:05:ff:5b:b4:77:18:
b9:c0:eb:84:a2:62:da:1b:b0:bd:ee:8b:f6:2f:0c:3a:a5:5c:
0a:68:dd:83:f4:48:6e:17:fb:95:9f:80:73:65:20:f0:98:70:
54:32:39:96:a1:95:68:b4:dd:75:6d:a5:f8:c6:2e:92:ab:80:
9d:3e:5f:be:aa:49:c3:d1:d0:2c:c4:b2:b7:b5:2e:ac:04:59:
da:57:cf:79:10:f9:b2:9e:5c:46:f3:18:68:78:b1:c0:b9:f9:
4c:07:45:ff:95:5b:db:6b:c5:75:51:45:9d:53:52:59:2b:b9:
fa:ec:42:f9:d4:e6:fb:ad:60:43:9e:e9:1d:3c:ea:e0:c0:51:
ca:f8:4d:57:38:79:a5:23:1c:c7:cc:3a:a8:9b:2a:be:07:c3:
d2:87:56:49:26:18:f1:8a:a2:64:d0:e6:74:9c:90:33:cc:84:
b3:b7:b2:79:11:73:f0:c8:07:da:2e:8c:1e:40:37:d9:bd:b5:
6a:bf:53:d7:ee:b7:32:42:e6:9a:60:d1:46:dc:88:8e:5b:20:
7c:30:ea:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1j9vByxD/mddNTxYsTdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxY2ExYTcwNmFiY2ZiZTFiODU4NjUyMzhkODQzNWVlMzNl
NzU4MjAwHhcNMjYwOTEwMTUwMTA4WhcNMjYwOTExMTUwMTA4WjAzMTEwLwYDVQQD
Eyg2YmExZjY0NTcyMzI0MTU3YjllMGI4NWY0MDVlOTcxMGMwNzU5ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKQEEG/Gf9j/0JaVfABLdTv+Ihy9
V7iwzX/UaC/cVJ7z1ASkWrwu/klNkjAIA0L8ZI39buwS+aV1uTiIg4XQDVUedD7K
pVWZAy03T8C6WRvtSJ56keERsHB2mOByfyAqEuFTxKRLpHwcBrO8GNRa4QTxYTnk
Nm7Ucol2Hb5Ii0zZwJkS9kvG6j5SZRzumxi/HfhlMpPtCLpzg6g/1OfSC9PZtobL
aa6ZkJbvR5bcyMHYbIZ5IkQZzk1yeVlNK1ZqxUuLU+710lfVcrqpd+3pvcT2BGFO
8kPax7TZ+QwsCcoNkNTmZz9cSNUK4qfRINIPV/rWHJJST2I7+4cG+VygCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuh9kVyMkFXueC4X0BelxDAdZ5VMB8GA1UdIwQY
MBaAFNHKGnBqvPvhuFhlI42ENe4z51ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzIt
ZThmN2ZkM2E0MDc4LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jZjc5YTMtZjNjYy00ZDVhLTk2NzItZThmN2ZkM2E0MDc4
LzEvMGNvYWNHcTgtLUc0V0dVampZUTE3alBuV0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxT9J7XN
q4koRpP2ZCo0SYlrkgTzRnV1tPyqqF8m5KwfZ/InXw60+JUIEmv9U9d/Bf9btHcY
ucDrhKJi2huwve6L9i8MOqVcCmjdg/RIbhf7lZ+Ac2Ug8JhwVDI5lqGVaLTddW2l
+MYukquAnT5fvqpJw9HQLMSyt7UurARZ2lfPeRD5sp5cRvMYaHixwLn5TAdF/5Vb
22vFdVFFnVNSWSu5+uxC+dTm+61gQ57pHTzq4MBRyvhNVzh5pSMcx8w6qJsqvgfD
0odWSSYY8YqiZNDmdJyQM8yEs7eyeRFz8MgH2i6MHkA32b21ar9T1+63MkLmmmDR
RtyIjlsgfDDq9Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:42 2026 by rpki-client