Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: GbtLHHjeGuhmQ5/nOQHusMGsayYTyuXWEmQBHoafLuc=
Subject key identifier: 5C:20:BA:D2:9C:D3:E7:B0:0A:BD:0D:88:9B:87:BC:E6:A1:2E:84:71
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019D992AFC595BD87DDE5B461ADFCC6FCCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 06BD
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: gFWrxXc56PETLGaQHgdumH/7UPvUdVGszTjzDSAxakY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fc:59:5b:d8:7d:de:5b:46:1a:df:cc:6f:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=5c20bad29cd3e7b00abd0d889b87bce6a12e8471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:ba:a1:59:ba:1a:a5:3b:65:e2:93:a8:6c:
c5:cd:64:29:15:a8:56:85:f1:c5:d3:39:06:92:94:
a4:67:be:4e:f1:8c:c5:82:9d:01:5f:70:ab:5b:ad:
ea:a4:17:ce:4d:13:71:75:8e:5a:c9:f2:5a:e6:4f:
50:0c:05:80:82:ac:3a:f3:08:0f:f6:ec:bc:b2:cb:
86:1f:e4:c0:01:eb:8e:b3:73:8d:27:88:ab:0b:ed:
2f:a0:97:3d:ff:b3:4c:07:31:ed:e8:da:c5:fe:1c:
d5:90:1d:fb:56:a0:7b:13:a5:f2:77:21:29:a2:4d:
f4:05:35:6a:69:ea:97:b9:4c:3d:3c:e4:0b:36:d0:
5c:83:33:5a:cd:bf:a5:11:93:dc:d6:7a:1e:3c:e8:
61:08:92:d1:76:fb:cd:1f:8a:64:28:e1:31:f7:5c:
38:64:e7:74:82:62:be:3f:3b:22:9e:b9:20:b6:69:
10:e7:42:21:4d:12:b3:94:47:b8:f6:26:11:4a:bd:
3b:7a:52:19:a7:74:82:18:bd:06:ac:92:36:1a:44:
e4:42:7a:d9:eb:2f:b3:84:10:d6:25:8d:93:cc:c0:
d3:b1:a4:d4:83:fc:62:02:4d:0b:95:bd:e1:0f:e4:
34:2a:29:d2:ac:54:08:9a:3e:0e:c8:e8:d1:99:7f:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:BA:D2:9C:D3:E7:B0:0A:BD:0D:88:9B:87:BC:E6:A1:2E:84:71
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:d1:0b:42:a6:6f:d1:f3:8f:9d:d4:e5:2e:7a:c9:3a:9c:
6e:7f:59:9f:a1:9a:8d:ca:60:31:a1:c0:37:d9:a4:44:8a:7e:
cd:cb:8b:50:5a:e6:c2:1a:40:43:51:57:d7:6a:f8:41:db:3a:
c3:a7:0d:dc:63:f8:96:5b:4f:da:c2:29:fd:90:6a:e7:14:4d:
79:0f:78:87:6b:38:1e:ea:ef:69:7b:86:b7:aa:71:74:63:52:
9b:7a:76:d1:41:f7:fc:9f:df:51:06:f2:bf:ef:45:c8:a4:cd:
ef:1c:46:95:ec:76:83:e6:94:16:0d:fd:85:e3:01:55:8b:82:
5d:8e:3e:b2:2c:0b:b1:f5:ab:68:aa:6f:83:fd:b9:91:37:f2:
bf:67:2f:ed:47:2a:68:72:0d:fe:4d:34:06:3b:98:59:65:82:
07:2d:18:92:e9:47:7e:7b:2b:f0:53:aa:29:32:f8:34:87:26:
90:ac:fb:92:24:27:88:cf:93:9a:07:8e:66:f0:cb:3f:d8:1d:
22:b1:9a:a2:12:94:1a:f2:a4:0f:96:09:d9:b2:11:38:b0:95:
1e:96:84:83:6a:c3:f9:54:ff:af:f3:24:10:08:94:24:da:85:
0b:a3:bf:4b:d4:b8:7a:b7:fd:b6:52:e9:97:38:be:b5:95:33:
9d:3f:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:52 2026 by rpki-client