Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: UsyKX370jqlQbHwJEmrE/eYJ9DK6N3JIM+ysmowowe4=
Subject key identifier: 64:B2:70:9A:9E:11:5C:51:A6:1D:FD:AA:7C:FA:19:A5:10:3A:4D:F2
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019DCE63807A8D173D23AC851C6C6A9A238C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 13FD
Signing time: Mon 27 Apr 2026 10:02:00 +0000
Manifest this update: Mon 27 Apr 2026 10:02:00 +0000
Manifest next update: Tue 28 Apr 2026 10:02:00 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: ypSEzbZu7z8+tQmn1AIwMaz1qvpmmcfK5K4j2NZjiP8=)
2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:80:7a:8d:17:3d:23:ac:85:1c:6c:6a:9a:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Apr 27 10:02:00 2026 GMT
Not After : Apr 28 10:02:00 2026 GMT
Subject: CN=64b2709a9e115c51a61dfdaa7cfa19a5103a4df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:5a:11:6e:25:0a:28:b5:11:3f:8f:17:c3:
49:2a:d4:85:e6:2b:99:86:7c:e2:f3:bf:a1:c3:39:
9e:d0:47:86:1f:2e:9d:46:54:ad:75:71:fa:4a:5b:
86:68:c2:08:3a:9f:8f:a3:4b:bd:cd:31:c9:97:66:
2c:01:f1:1b:d5:7f:53:9e:90:20:82:3c:05:dd:c9:
9f:db:81:00:3c:de:cd:d9:a8:21:5c:49:b3:e7:9c:
a4:eb:3e:cb:35:dc:26:74:19:c9:62:65:e1:ee:38:
2a:52:5b:4c:1c:0c:de:a6:d7:90:d1:cb:8e:6d:da:
cc:0f:d7:69:57:da:5c:8f:3d:a3:1b:77:06:5a:2b:
2b:68:6a:a7:2e:e4:a3:94:f2:51:6a:30:ff:d3:a5:
1b:47:68:ea:ff:75:bc:a6:87:a2:eb:29:05:a4:94:
aa:70:ba:4b:88:31:f8:66:62:af:26:d0:d6:2e:8f:
af:54:33:b7:dc:ec:53:e6:eb:d4:77:f3:c9:f7:51:
4d:45:b0:e1:3f:5e:50:e6:db:c7:4a:36:5c:eb:a5:
a3:11:62:bf:f8:16:7f:5f:96:25:99:1e:96:8d:62:
3d:99:da:ba:9b:d4:61:f0:4e:8f:5f:e7:0d:e5:54:
d2:14:2a:39:db:25:4c:59:86:63:fd:17:84:32:30:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:70:9A:9E:11:5C:51:A6:1D:FD:AA:7C:FA:19:A5:10:3A:4D:F2
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:01:2e:14:d2:49:d3:ba:dd:07:e8:f3:42:38:ef:6f:95:
b4:02:f3:61:e6:5e:f7:36:6b:f2:5d:b4:26:3f:aa:10:eb:3d:
17:41:df:34:55:75:cb:3c:61:d4:34:e4:11:98:0c:78:75:24:
52:ed:cf:5c:8a:89:86:8d:39:cd:46:ad:5a:ad:8c:a5:dd:f1:
47:3c:04:13:14:aa:0b:5d:6b:19:11:b8:13:cc:c5:fe:4e:a6:
52:86:aa:5d:83:8d:a2:05:de:c2:48:af:63:f5:6e:2b:43:9f:
28:74:7e:d4:08:3e:78:ac:eb:e7:06:b2:0a:3b:be:ab:28:61:
89:89:1e:61:be:d5:ff:46:44:c0:a2:89:4e:ad:1a:ea:5f:72:
0f:71:00:4b:40:78:62:ec:2c:f7:bc:22:06:36:2b:9c:ab:2e:
50:69:ae:a3:36:df:24:2a:2c:ed:cf:e3:ad:c8:50:26:33:1a:
32:48:4f:7d:d3:00:8f:d5:4d:3a:eb:9e:23:90:40:bd:1f:a9:
ae:77:a0:0c:04:5f:3c:08:c0:04:e9:75:ba:3e:43:88:87:16:
bb:25:d2:cd:55:8a:dc:e6:a6:76:a6:ee:7c:8a:ad:4c:eb:af:
3c:70:e8:58:c1:33:07:8b:f0:ca:49:64:12:d5:45:10:e3:67:
cc:4e:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:40:51 2026 by rpki-client