Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: 6mkouKa51Qvc+RzTAb6Z9li1a5zebzlTlt5Zm71SZIY=
Subject key identifier: BF:D6:39:67:3C:B7:E8:31:28:49:7D:A3:1E:53:15:63:11:3F:4A:F1
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019EB87D0062448583DAA46E5F33AF5D25FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0ED6
Signing time: Thu 11 Jun 2026 21:01:00 +0000
Manifest this update: Thu 11 Jun 2026 21:01:00 +0000
Manifest next update: Fri 12 Jun 2026 21:01:00 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: t2pXAfYavvf36LbUSgl+5wn0pa6XmFOVNYyLGcAW+Y0=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:00:62:44:85:83:da:a4:6e:5f:33:af:5d:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jun 11 21:01:00 2026 GMT
Not After : Jun 12 21:01:00 2026 GMT
Subject: CN=bfd639673cb7e83128497da31e531563113f4af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:bb:ab:04:00:0f:ae:58:ea:82:21:d4:9b:
ab:12:3b:e2:94:6d:20:e2:4c:90:8c:7c:70:a4:0b:
5b:8c:5c:8d:a2:52:d0:94:5d:c1:d5:0b:45:11:0d:
59:2f:0d:31:42:49:de:89:2e:cd:d8:a5:26:61:9a:
e6:8c:71:04:51:b2:95:57:7f:08:11:e2:57:04:35:
90:eb:b8:b2:8e:5c:f4:86:bd:1b:a0:c1:6d:2e:a5:
59:62:3c:a9:8c:b8:16:80:70:fa:a0:65:62:fb:af:
ef:12:67:fc:a4:e9:b1:73:1c:a2:24:b2:aa:96:b2:
59:cc:0c:34:d1:10:10:b4:77:27:38:9f:40:c5:d0:
d5:77:59:3c:e5:64:7e:23:70:e6:aa:87:d5:9e:16:
37:3c:41:b6:6f:6b:b6:dc:a1:b0:dd:ab:a4:05:ea:
a4:db:04:09:46:a8:e5:1b:7e:21:6d:5d:7b:75:80:
90:52:c1:35:55:77:11:89:e0:27:03:1e:e2:1c:ec:
13:3c:2c:65:f0:a2:c6:1f:f4:2e:c7:9e:da:4b:72:
7f:41:a0:25:1a:65:91:e3:0d:78:be:f9:7c:08:b2:
0f:61:ce:93:c7:03:57:93:6c:44:74:33:d5:07:7f:
04:09:b0:84:69:2f:20:c2:09:20:61:2a:30:6a:ac:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:39:67:3C:B7:E8:31:28:49:7D:A3:1E:53:15:63:11:3F:4A:F1
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:08:7d:6f:b9:4c:c4:9b:a7:5d:76:96:dd:4b:44:74:bf:
6a:06:ac:1e:f0:58:58:a3:a0:8d:a7:9d:45:64:71:47:f9:9f:
31:d3:44:7d:04:37:9f:53:76:8a:a7:0c:4d:bf:42:fb:b4:d0:
7f:f8:7b:6d:96:ed:e0:65:d5:e0:24:51:7a:58:1c:1a:2b:09:
18:15:03:73:25:de:62:ef:69:ba:f5:69:60:6e:58:23:e0:e1:
5c:0a:f1:55:c7:f4:db:c7:4b:cb:0c:4a:f6:d2:09:be:4e:67:
96:48:0d:47:5f:2d:f1:f1:21:79:6a:e9:a2:aa:01:97:65:6d:
87:7f:f8:b6:38:80:c7:78:9f:d5:c2:4e:67:35:bd:13:1a:59:
04:6d:7e:25:bd:1e:0a:45:1e:f7:9a:c4:14:78:af:9a:56:b9:
d2:02:ae:6c:6a:3e:60:64:d0:c9:29:8a:8d:57:ff:bb:76:60:
a0:6d:28:ac:ed:72:5c:f5:b5:d5:29:ff:bb:ca:e7:6c:5e:f0:
83:78:4b:56:ed:4c:b7:d0:da:5b:9f:23:e4:32:5a:39:d2:0a:
d9:92:8d:a0:8f:92:7f:a5:da:23:21:c8:37:51:17:18:5e:fe:
dc:d8:96:0d:12:69:8a:26:e5:c0:64:d0:db:5c:8c:fa:8b:3c:
94:2c:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:39 2026 by rpki-client