Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: YY1BisddnL4OegGDCy2N/KSIy5S8lIXpUqNEjt6eYAs=
Subject key identifier: AC:C8:C8:7C:2A:45:57:BD:DC:58:ED:FC:C6:16:14:54:58:6F:6C:CD
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 019FAA50F3F381C9CD86FB1E5E1BC21C322C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 07CF
Signing time: Tue 28 Jul 2026 20:00:59 +0000
Manifest this update: Tue 28 Jul 2026 20:00:59 +0000
Manifest next update: Wed 29 Jul 2026 20:00:59 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: eSxUPrOsFpG/9A1K3NPxnJShzTSqNWedDMev1+d8ewA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f3:f3:81:c9:cd:86:fb:1e:5e:1b:c2:1c:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Jul 28 20:00:59 2026 GMT
Not After : Jul 29 20:00:59 2026 GMT
Subject: CN=acc8c87c2a4557bddc58edfcc6161454586f6ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:c9:31:82:14:92:e1:89:e8:f4:e6:5e:e4:
63:47:55:53:ec:4e:4f:76:43:0b:a0:af:a1:71:e5:
33:ea:ea:01:f9:aa:d5:6b:20:83:2b:e4:4a:bb:bf:
54:b7:7e:b1:82:8c:3d:13:78:03:7d:b1:93:07:9e:
22:38:a8:a0:d2:56:b1:83:52:2e:e9:f0:56:b6:0d:
ef:aa:9c:73:72:79:d0:93:87:5f:3c:df:2b:fd:51:
9f:c7:f5:ea:53:07:36:eb:09:26:d8:c5:fc:86:16:
0b:a9:04:59:39:6d:5d:77:2e:24:97:fe:0f:06:27:
d0:f8:69:38:e2:88:0e:62:5e:84:2e:81:15:5e:72:
68:eb:30:61:69:0b:15:7e:b2:57:eb:2b:a7:31:13:
58:d5:b9:9b:53:2c:64:ce:63:54:92:80:df:ed:7f:
9e:9a:2f:ce:36:1b:61:52:08:5f:b2:b7:ab:5a:49:
36:9e:06:6a:17:7e:ec:70:b1:19:03:de:88:f1:8b:
04:57:c7:84:40:3d:77:45:ff:9a:c5:26:9d:95:0d:
bb:4f:a2:8a:83:f0:11:16:fb:3f:59:47:10:a5:a6:
b9:4e:9e:16:8c:0f:64:62:e4:ad:9f:96:cf:26:3e:
67:61:54:14:36:d3:8a:ec:84:8c:91:88:ba:1e:30:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:C8:7C:2A:45:57:BD:DC:58:ED:FC:C6:16:14:54:58:6F:6C:CD
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d3:da:e3:65:43:d6:3a:ff:f3:13:be:4f:51:13:6a:2d:22:
9e:fb:a8:bf:92:d4:5c:35:a0:33:b7:86:76:31:f2:2e:29:5b:
b2:eb:13:17:7f:28:96:d9:b8:84:74:0f:3d:0b:3a:82:05:e9:
35:44:9f:14:65:cd:41:68:f8:67:3a:7b:19:2a:f0:ff:af:b1:
13:cd:48:cd:e8:36:9a:e2:03:f6:66:e5:bf:47:9a:24:d3:e4:
7a:6d:8c:81:96:f1:31:1e:ff:7e:31:62:58:d7:d4:14:3e:af:
4c:55:88:98:09:e5:8c:96:0d:44:3c:96:a6:55:a4:89:1a:83:
a3:3a:0b:cd:a0:52:ac:c2:d9:f3:1b:1c:31:b2:55:c1:09:59:
17:8d:07:9e:d9:a4:63:54:37:f2:9c:91:a8:fc:d0:45:d8:0f:
50:d6:de:03:99:40:f1:8e:05:3a:cd:e1:97:54:11:56:78:63:
1a:5d:76:60:50:6e:07:d1:f9:74:bc:ce:0a:a0:48:74:b0:a0:
85:bb:8e:62:1b:c4:a2:3d:24:1d:47:50:fa:f8:07:e7:6c:cc:
7e:03:d3:cf:cb:22:6b:1b:9b:d1:a2:63:87:21:4e:09:67:b5:
8c:dc:81:62:b9:1c:4d:c4:e6:63:ed:15:f5:e2:b2:6d:1b:cf:
13:cf:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:18 2026 by rpki-client