Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: r7wj4f4J6ziBEB/HG3u0Aik+bCyMDzSPqyGgNcnKuqw=
Subject key identifier: F2:CB:5E:B1:3F:65:E9:36:A7:C0:56:81:28:B7:35:1A:4D:9C:4B:EB
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019CAD9031C9D70B8384658D2706AC4BAE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0643
Signing time: Mon 02 Mar 2026 08:00:34 +0000
Manifest this update: Mon 02 Mar 2026 08:00:34 +0000
Manifest next update: Tue 03 Mar 2026 08:00:34 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: EITwmDmenKpZMJy1E/5VRr3zTGEEOMeauSB6LFpFpIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:31:c9:d7:0b:83:84:65:8d:27:06:ac:4b:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Mar 2 08:00:34 2026 GMT
Not After : Mar 3 08:00:34 2026 GMT
Subject: CN=f2cb5eb13f65e936a7c0568128b7351a4d9c4beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:82:e3:0b:dc:98:4a:b9:0c:8b:77:8d:8a:
b4:dc:00:bf:70:40:86:50:92:78:6a:fe:0f:ba:d7:
48:b4:2f:dd:54:0d:2d:d5:b3:ca:bc:18:a7:25:32:
31:b7:5f:d6:b5:94:76:1f:43:7f:3c:e7:4f:8b:23:
ae:2f:f1:42:96:fe:fe:44:1c:5e:86:07:08:d8:ce:
2d:e0:68:8a:3d:e4:57:a0:30:ff:95:f3:38:e8:ea:
2e:5e:ca:80:45:59:88:d8:54:2c:73:78:aa:7e:2c:
89:99:01:db:94:ef:15:4b:56:d5:a6:cf:17:49:75:
9a:69:00:22:91:76:81:69:ab:57:4c:2f:3f:aa:0b:
b2:eb:df:97:b7:4f:d1:a1:fb:2b:0a:2d:0a:b4:45:
1a:1d:a9:ab:35:91:0a:e2:1b:93:88:63:b5:31:ec:
2b:47:f2:05:32:bc:22:4d:bd:df:44:de:bf:67:11:
12:95:c4:90:e4:d0:59:44:e3:87:c9:95:0e:75:ca:
af:f2:49:98:e9:92:33:fd:56:dd:38:60:e4:4a:71:
b9:bd:0b:d3:98:37:a1:cd:32:2d:44:e8:ea:47:f6:
1e:cd:c2:2d:75:02:36:4e:38:bf:70:02:54:df:be:
89:b7:34:7c:b0:6e:ca:5e:5d:19:7f:45:54:b9:98:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:5E:B1:3F:65:E9:36:A7:C0:56:81:28:B7:35:1A:4D:9C:4B:EB
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:19:db:55:86:3b:23:8b:10:f6:bb:2c:3a:5d:82:66:18:
cf:38:9b:ca:41:b2:08:3b:4e:07:ab:62:ad:33:19:0d:9c:7a:
da:7b:b3:6d:b1:70:9d:8a:2a:0c:05:bf:c7:e9:38:72:60:72:
85:3a:bf:f9:3b:97:98:98:c9:15:08:d8:6f:54:76:45:a7:13:
c3:d0:d7:d8:c6:08:b0:de:c3:c8:79:85:8c:81:9d:17:99:da:
d2:d2:0b:60:02:31:69:0c:c8:df:ae:85:2c:d5:4e:10:a1:b6:
17:79:fb:df:7b:cf:32:ed:7b:6a:13:1c:49:40:ab:c8:cc:d7:
b1:8d:7d:18:4f:f3:fa:ec:1a:23:cc:4d:e2:59:53:94:75:ca:
1a:24:f8:8b:80:11:b5:53:47:54:6e:da:25:60:1a:6c:81:2a:
9b:08:ed:8e:00:1b:f2:b2:cf:c8:83:00:9c:ea:49:fe:f6:c6:
95:b6:d2:cb:62:a7:26:bd:66:4d:3c:34:1c:26:43:69:9c:e3:
0d:93:5f:22:45:4b:b9:12:62:81:c2:94:83:16:18:79:ff:f3:
b6:e9:93:3e:25:00:d8:bb:6d:26:52:d4:5b:69:da:18:8b:50:
11:19:e8:e8:a6:f6:18:c4:28:7c:fb:83:43:9e:f8:66:f1:2a:
00:58:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:57 2026 by rpki-client