Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: rKTzRVhQmtBClvtdcHjH8gKFi9eSytV5WUl8ByWJ8to=
Subject key identifier: 03:E9:43:44:0B:CD:4A:F3:73:38:8C:1D:17:E0:BC:CD:CC:03:24:97
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019CE523C54B590B33EE6C6D4C520CE4DAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0DE4
Signing time: Fri 13 Mar 2026 03:00:52 +0000
Manifest this update: Fri 13 Mar 2026 03:00:52 +0000
Manifest next update: Sat 14 Mar 2026 03:00:52 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: xmJ8b71ObDxzwMhO8SYTC3LZVD9lbJL5Ht1ZUyitW4Q=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:c5:4b:59:0b:33:ee:6c:6d:4c:52:0c:e4:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Mar 13 03:00:52 2026 GMT
Not After : Mar 14 03:00:52 2026 GMT
Subject: CN=03e943440bcd4af373388c1d17e0bccdcc032497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:8c:46:ae:1b:e8:12:fd:05:a6:31:95:12:
01:f2:1f:cc:52:fc:d8:25:95:00:0a:2a:27:d6:11:
80:14:dc:c7:75:8a:c3:6d:18:a3:7b:db:f5:1b:22:
c3:fc:b2:87:5b:21:a8:91:94:2c:f7:e0:ea:0f:e1:
d6:f2:f3:45:17:98:03:51:5a:85:26:7f:5c:03:d8:
ba:42:48:85:61:d3:67:c7:e8:8d:c9:ff:32:ff:e6:
32:22:21:9a:6d:0e:db:4c:88:cb:5c:37:a7:87:f8:
ba:a3:52:e9:83:a2:79:ff:e7:82:09:86:f6:fa:c4:
da:ac:17:e0:d7:ca:8a:7d:80:57:97:62:74:95:07:
b7:95:8e:ef:ea:2b:09:cf:f0:9e:d2:b9:64:65:78:
78:4f:58:2d:f0:09:59:da:b6:1b:5a:70:42:bf:32:
8d:32:a2:86:e8:dc:17:e9:5e:33:ab:ca:be:bf:ae:
75:34:ff:62:90:46:29:89:4d:11:bd:1a:ed:d4:43:
82:f9:88:7a:3b:fd:5f:1c:7e:86:c8:69:e6:03:c1:
53:50:f7:2e:47:1c:55:01:48:74:f0:1d:95:fc:9e:
fb:24:71:d4:5f:a5:de:84:c2:6e:78:ac:83:c1:c9:
a2:f0:fd:93:6a:46:41:db:08:5f:81:34:c8:d5:d3:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:43:44:0B:CD:4A:F3:73:38:8C:1D:17:E0:BC:CD:CC:03:24:97
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1f:41:02:29:a5:14:0a:51:24:64:90:6d:45:26:36:0f:ac:
c7:6c:33:09:46:43:e1:e2:fd:35:e8:b1:ab:c4:f1:7a:f6:4c:
8f:28:01:49:2c:4f:20:52:2c:39:1c:84:f1:8b:cf:3a:ea:50:
7a:91:1b:33:d8:a8:8e:87:bc:7a:1e:26:33:5b:7b:ea:0d:4e:
f5:f1:5b:84:8a:d8:95:8b:5f:fc:63:bb:6a:64:b4:52:65:76:
1a:e1:7b:5b:26:c5:b5:a9:d4:ef:c7:d7:9f:76:39:be:61:44:
59:57:5d:41:4b:74:a4:90:a6:b0:83:2f:a3:b9:c6:df:39:17:
81:91:18:02:c1:00:05:26:9c:66:57:91:83:47:7e:96:6b:69:
e1:dc:16:2e:8e:b5:b3:2d:f0:83:f0:d6:76:2c:02:7a:0a:5b:
20:cb:09:04:35:d8:6e:c5:c2:ec:05:4d:f8:1f:12:80:66:db:
2a:ba:92:6a:6c:1c:d2:da:3a:51:85:2d:2a:05:90:93:ee:e6:
8f:78:94:73:94:53:b9:9f:a7:4c:b7:21:dd:e2:fa:4a:73:50:
b6:b3:ff:a5:07:ae:69:59:04:76:6c:8c:b0:76:d2:26:77:8f:
5c:a5:ed:2b:67:db:b5:65:52:1c:2b:d6:77:71:f0:e0:f9:43:
e9:a6:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:47 2026 by rpki-client