Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: MBPl/iL6CSfpA9iikkVgVtQZOoj1HgHG9ZJ4+QEFP7U=
Subject key identifier: 85:2F:97:0D:64:1C:42:F4:11:A5:20:C9:B5:33:83:42:22:93:72:93
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01A17F2AD98EB23494EF78465E3AF597753C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 1046
Signing time: Tue 27 Oct 2026 21:01:16 +0000
Manifest this update: Tue 27 Oct 2026 21:01:16 +0000
Manifest next update: Wed 28 Oct 2026 21:01:16 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: j2ItETOkllarcMCtIeS0E5VUmekABBnzPZB5+CVQodE=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:d9:8e:b2:34:94:ef:78:46:5e:3a:f5:97:75:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Oct 27 21:01:16 2026 GMT
Not After : Oct 28 21:01:16 2026 GMT
Subject: CN=852f970d641c42f411a520c9b533834222937293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:0b:3d:c2:87:6a:a0:a9:eb:52:9c:f5:b9:
f6:00:2d:78:a6:3e:dc:af:1c:9b:6d:22:69:36:12:
8b:5c:42:d6:c1:b0:70:99:a3:54:4c:2f:d7:35:03:
af:fc:5f:bc:ac:ce:04:63:90:e1:06:87:00:a9:c2:
3e:14:49:0f:26:ff:ee:36:9d:4e:23:83:ab:dc:c2:
46:6c:53:d7:aa:d1:8c:a3:36:09:3e:47:5a:47:2b:
82:f2:02:ca:fc:f5:29:4b:ae:f9:41:09:67:c6:88:
ad:b7:9f:b0:df:16:76:30:46:b5:a1:21:53:4e:dc:
ee:65:a7:b0:d7:5a:b9:05:0e:be:21:be:32:7d:30:
46:94:67:79:20:c6:89:b8:9d:ad:41:40:96:66:db:
b5:d8:f7:84:c3:ac:13:98:dc:4a:86:8c:36:4e:31:
da:ff:9a:79:0d:cd:78:b2:d9:2e:b6:59:f8:81:11:
2c:99:cf:1c:67:35:8b:b3:db:47:36:49:94:e3:e4:
e6:38:d3:5d:9d:05:b6:7d:e8:82:68:5f:cb:19:1a:
32:07:f7:b2:b4:ab:de:f3:d8:44:0a:0f:6b:24:26:
11:6d:62:03:58:b0:d8:19:2b:0a:32:98:a8:b6:74:
9e:bb:f2:e3:19:03:80:02:7b:77:09:0e:8e:db:78:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:97:0D:64:1C:42:F4:11:A5:20:C9:B5:33:83:42:22:93:72:93
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:32:32:13:de:97:ec:5a:dd:e0:b4:c7:e0:75:49:42:21:e4:
1f:b5:d5:5c:a1:a3:b7:50:88:06:54:f9:c6:76:03:90:40:ee:
f7:8c:d3:5e:65:fa:45:bb:d0:11:6e:c1:75:2f:2f:f4:3f:f1:
4a:a6:48:48:28:d1:d8:f0:5b:e9:fd:6b:36:8d:a8:64:52:68:
74:ea:b1:ad:9d:1d:2d:2e:46:f1:d3:c8:ee:6a:ec:97:72:5b:
f4:00:8d:b4:fd:74:83:ac:20:61:38:63:da:c5:78:80:17:93:
b9:ef:54:bd:3b:c9:3e:02:94:36:62:96:75:6f:63:41:de:89:
d5:a7:50:09:b5:63:bb:74:ce:62:43:e5:4c:7c:c2:ef:cc:5b:
ba:be:30:78:42:ce:7a:fa:d1:d4:e5:2a:29:a8:df:3c:08:3a:
45:b3:45:06:eb:4e:99:33:c4:dc:3a:28:2c:63:02:91:f7:82:
90:5d:6a:13:8f:30:ad:b2:f1:94:93:9b:d4:81:36:71:68:0b:
4c:96:a5:9b:c3:88:e3:65:77:14:70:09:b3:7d:e3:f2:f1:21:
15:38:91:be:38:ad:0c:38:63:7d:df:82:64:2d:f9:04:38:68:
6b:1f:8f:b7:37:bf:7d:d8:59:94:4a:f1:1a:30:cb:08:31:25:
e0:57:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:55 2026 by rpki-client