Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File: _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier: usQ0DJdfhuZAclyow6AuCCJeOvs1ffNJ0F3bxOnxvZA=
Subject key identifier: B7:2A:CF:C8:40:AF:C8:74:C6:09:7A:FF:0D:7F:D0:EF:CE:D7:77:5F
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer: /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial: 019D382E658F70D4760D0EBBF665F82F75EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number: 06C8
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: KdUachvJU8LsdsrtjjIFgDxILQ08sJLw3XfUQDOFRUs=)
2: mvCe3f9mkn2mitGHtGGloSB3nS8.roa (hash: 0bqyMFhS31D4KUaalrXamAweNa9OOdMZFGOzpiIcELU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:65:8f:70:d4:76:0d:0e:bb:f6:65:f8:2f:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=b72acfc840afc874c6097aff0d7fd0efced7775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:8b:2b:e6:a0:ac:6e:bb:6f:96:0d:d7:11:
b0:44:c5:9b:1f:a9:2a:11:da:fa:3f:4c:c1:c5:2d:
ff:2a:2f:9a:b0:a1:be:78:59:88:04:41:3f:5b:fb:
fe:45:ba:b8:5c:37:60:7a:4b:ad:69:22:dc:84:5e:
71:17:fa:f1:b2:0d:75:a5:24:0e:7a:98:72:6b:61:
64:b2:b7:03:c4:b3:01:45:ed:f8:c7:49:4f:15:97:
db:1a:c7:9e:12:4b:99:b3:af:f6:57:d0:41:bd:2b:
84:cd:17:eb:52:2d:31:8f:d7:b7:17:fb:68:ec:af:
69:0e:aa:f5:7e:b6:3e:c3:f3:dc:18:df:90:d9:e6:
6d:fa:bf:70:8d:ec:32:a7:32:a4:21:ab:4a:aa:0e:
55:89:56:42:6f:20:b4:b7:1b:24:8e:61:76:ef:aa:
bb:1f:32:1a:60:6c:79:eb:4c:e1:01:30:b3:e3:d1:
ad:3b:d3:85:48:b0:82:bd:0f:60:39:c2:7e:67:f1:
c0:b3:a5:1b:20:ed:27:e4:e9:ea:7f:9c:bb:b3:cc:
a3:f0:f2:e4:2c:f5:21:83:2d:a6:ff:c4:24:14:8c:
07:bb:1a:9a:b2:ef:4b:92:ef:a3:73:49:69:57:ab:
f6:5f:7a:6b:85:59:43:28:24:52:a0:d2:17:0a:18:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:CF:C8:40:AF:C8:74:C6:09:7A:FF:0D:7F:D0:EF:CE:D7:77:5F
X509v3 Authority Key Identifier:
keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:1a:dc:9c:85:1d:21:47:4b:00:a0:43:aa:37:34:1f:f9:
28:7d:9f:2a:81:1f:ab:40:fb:ac:c0:7b:d4:7d:7b:a7:9a:06:
73:7e:58:f9:0d:19:ef:64:28:65:0f:7b:6a:53:24:be:75:90:
70:05:f9:d7:06:6f:10:ab:d3:15:96:fc:18:3e:98:25:d9:c7:
2f:fb:12:01:09:17:07:4b:bd:73:13:cc:94:27:9a:f6:f2:eb:
f2:bf:60:c2:2a:70:20:5b:81:93:46:8d:f1:1b:b6:51:0a:ea:
65:c4:fb:cf:bf:ee:ac:26:86:ae:d9:0e:f9:ed:2b:cc:0e:b8:
e3:13:8f:c9:a3:ea:3b:8d:75:75:e1:e1:2e:f8:02:f9:eb:eb:
7e:37:88:09:4f:f2:07:54:9f:8c:35:d7:33:3e:f9:c0:6d:e4:
d2:c6:ec:d9:df:2b:5e:e6:be:37:ed:a1:36:1b:60:45:d8:d4:
25:4b:61:c3:da:1d:c1:b0:dc:c2:17:3c:84:29:9a:67:d0:12:
c4:5c:c1:4a:73:ee:65:a4:a4:f9:18:eb:fd:8b:3b:21:04:52:
8c:63:7b:e2:9e:52:ae:f0:e0:c8:84:14:7c:23:da:a2:2c:71:
d9:6f:7f:65:dd:4f:45:d0:a8:97:19:f4:b4:03:81:46:9a:6c:
41:11:b6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:04 2026 by rpki-client