Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: MvRhlX/EWqhTIIJqFh/gwRcxRmxqbxZJWjlgJmpnQfo=
Subject key identifier: AF:65:1F:2D:39:03:0B:27:FF:D3:FB:0C:BF:30:93:EE:62:05:4F:59
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 01A0C63334788125CA578FE6A6FE793BB614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0862
Signing time: Mon 21 Sep 2026 23:00:39 +0000
Manifest this update: Mon 21 Sep 2026 23:00:39 +0000
Manifest next update: Tue 22 Sep 2026 23:00:39 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: Ag/fZXmo3pqwBJ3/oRMJVWiYrsHLNTPgTCdevlvBrz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:34:78:81:25:ca:57:8f:e6:a6:fe:79:3b:b6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Sep 21 23:00:39 2026 GMT
Not After : Sep 22 23:00:39 2026 GMT
Subject: CN=af651f2d39030b27ffd3fb0cbf3093ee62054f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:73:ce:71:c8:19:71:54:62:84:a3:ab:c3:
0d:1b:e0:f0:39:f4:0f:2d:57:5c:ac:6f:be:2c:48:
40:ca:ac:12:00:13:bb:16:55:53:9b:83:17:38:d9:
c6:58:32:4b:56:58:65:e0:10:2f:3d:29:86:e3:b0:
a4:ed:f3:75:23:65:40:ec:5f:74:b7:01:4b:cd:a1:
f2:f6:57:38:72:03:29:fa:a5:02:17:70:24:19:0a:
f9:14:4f:98:c8:f4:8f:8d:bd:d9:e1:ac:49:a4:77:
85:b5:b9:84:08:de:1a:14:e3:3e:81:61:3e:28:1b:
99:ac:98:9e:a4:27:e2:3b:11:5f:2e:a8:dc:24:fd:
8e:9f:5c:95:0b:ec:37:07:2a:78:8b:cd:3f:a9:a5:
56:56:70:eb:86:3e:51:ce:26:22:58:64:da:07:c9:
e3:14:06:fe:d4:52:af:22:38:06:fc:f0:db:cc:0d:
c3:58:eb:b5:5e:6c:d8:21:d7:c6:1a:ab:f2:b8:ee:
f1:36:0c:e6:86:ee:16:e2:07:6a:3e:a7:fc:79:37:
d8:c6:f2:6f:5c:c0:3f:30:bd:cc:7f:20:25:8b:3c:
cc:c3:1c:de:6c:20:41:02:f9:bd:fb:dc:29:b0:30:
35:a0:1a:a0:19:a7:e4:35:78:fd:c2:fb:47:41:84:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:1F:2D:39:03:0B:27:FF:D3:FB:0C:BF:30:93:EE:62:05:4F:59
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:35:41:41:9c:a2:57:7b:f3:6f:e1:4b:a7:2d:d9:71:67:a3:
19:3b:81:0a:f0:50:41:28:34:da:15:08:f1:00:1a:55:58:21:
7e:c2:7b:3b:88:89:d3:de:3b:26:1e:b7:c6:dc:ec:a5:6f:09:
c4:58:26:13:2d:f9:5f:dd:b8:6f:2d:0d:79:3c:c5:fa:af:80:
b2:d5:c4:86:3b:96:93:f4:87:cd:c9:9e:76:2b:c8:db:a5:af:
cd:66:4a:dc:4f:a5:e4:c3:d8:e9:01:6c:69:b2:22:c5:ea:eb:
81:79:63:a8:f6:5f:fe:02:e0:df:c3:72:c9:7e:db:22:85:bc:
85:bd:47:82:ae:eb:62:d0:87:39:3d:71:7b:19:6f:d9:13:ba:
0a:3c:7e:14:55:d7:52:86:dc:76:de:3f:bd:fc:99:b0:af:8f:
b9:56:71:7b:ea:5d:6c:a4:ec:be:8b:a8:3f:d6:ad:8a:4b:3f:
c0:ab:7e:bb:1d:62:c1:6c:a9:5a:6f:77:f0:99:94:51:2e:8d:
77:33:dc:b5:71:ca:f9:2f:c8:94:ee:3e:69:74:6c:41:93:82:
ba:50:86:cb:9d:e4:37:ab:ba:80:6c:d5:cd:59:ed:ab:33:e2:
f1:17:ed:45:44:64:36:de:fb:38:21:85:99:37:2a:85:e6:43:
f4:26:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:46:39 2026 by rpki-client