Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: /DGepDZchmKok3s2htvFYOxDCWs5jCDhdHdt9Iza9OU=
Subject key identifier: 88:F2:AA:BA:BA:DE:59:06:CB:2D:B1:3B:2E:A6:FF:4C:94:5D:E9:B9
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019FA229951439209BFA639665626AA884BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0F4F
Signing time: Mon 27 Jul 2026 06:01:01 +0000
Manifest this update: Mon 27 Jul 2026 06:01:01 +0000
Manifest next update: Tue 28 Jul 2026 06:01:01 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: u3CAtdsQp/kON2cSuNPCDAiFwa1zXaHdDPUZ6UvRZwY=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:95:14:39:20:9b:fa:63:96:65:62:6a:a8:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jul 27 06:01:01 2026 GMT
Not After : Jul 28 06:01:01 2026 GMT
Subject: CN=88f2aababade5906cb2db13b2ea6ff4c945de9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:87:37:93:48:ea:ec:89:90:b7:0e:49:55:
bd:de:61:30:9a:3f:62:31:98:cd:46:c7:16:ae:16:
cf:37:3a:71:eb:81:4c:04:79:d1:64:2d:cf:66:28:
59:f0:21:0b:5b:05:00:d2:de:21:02:f1:9a:45:a4:
69:31:7f:e8:b8:15:4d:9b:58:45:58:42:e7:d6:43:
83:af:af:cd:ce:d5:25:6f:4d:65:3d:dd:dd:5a:a2:
79:6c:e5:8e:76:71:e4:d8:a2:c1:b9:7b:6d:71:12:
42:70:05:a8:b5:a6:5d:40:86:e5:43:02:02:90:6d:
7c:ab:6f:e2:5d:9b:a5:f0:02:a5:34:62:78:12:0b:
a2:d4:cd:f0:a0:bf:d3:b3:2a:f5:f3:a5:fe:d4:38:
9b:3f:bc:27:a8:0a:74:ca:33:4e:3e:53:67:12:c1:
50:1a:d2:05:2d:15:80:f1:c9:47:1a:37:a2:f2:e3:
9c:5c:20:48:d3:a9:02:f4:3f:2b:9a:be:fd:40:a0:
01:51:cd:8c:f3:83:77:f1:01:6a:d7:0e:47:2c:8d:
f1:47:c8:60:32:a5:9d:03:28:a8:09:ff:11:74:42:
50:08:87:83:34:8f:69:e7:d5:a4:f4:32:59:20:d8:
18:c7:c6:a4:a4:66:3e:14:45:f1:b8:4c:ba:cd:46:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F2:AA:BA:BA:DE:59:06:CB:2D:B1:3B:2E:A6:FF:4C:94:5D:E9:B9
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3f:07:db:a1:ea:27:f1:98:ec:de:f8:9c:01:ea:f0:59:3a:
37:80:99:4c:3c:fb:66:74:a7:b6:2c:39:bb:6a:6b:26:14:4b:
6e:8c:76:c3:d3:5a:40:53:bd:6c:5e:61:7a:0c:69:32:26:05:
bc:b5:55:1c:55:7c:bc:50:05:c9:a4:19:e3:d9:5b:a7:91:04:
63:6a:a0:8c:d3:7b:34:cc:94:53:53:c1:48:d1:80:91:f5:ac:
83:9e:26:c8:e1:de:08:c8:a0:9a:32:3f:39:a7:7d:51:89:ff:
25:21:57:20:d6:7e:aa:9d:75:e4:3a:d1:26:be:8f:54:71:44:
52:ce:60:c8:6c:37:d9:fa:c1:db:cb:be:5c:52:76:52:97:a8:
36:db:8d:c9:c1:e5:ab:bf:fc:2a:9c:9f:73:59:b5:86:36:84:
63:a8:3a:d3:9f:f2:a5:1f:05:e4:19:7b:7e:bc:6a:e2:9a:37:
25:a0:48:f5:cd:09:38:2d:eb:fc:f8:bd:ae:02:0a:08:3f:ed:
2a:05:30:a8:5a:5c:8b:ce:78:c7:b4:ce:53:3c:f6:06:c2:94:
ea:0d:a5:a9:ec:12:af:30:a0:3f:24:a1:49:50:39:bf:21:6d:
ad:ac:d3:38:76:3e:5a:3f:af:6a:51:a7:80:2e:b2:63:c1:22:
06:83:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:01:39 2026 by rpki-client