Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: 44G6cDS41G1Pr6RuvqucE40wXgnVxhDgM/vbqL3pXkU=
Subject key identifier: 6A:BA:0B:28:09:E2:0F:0A:1A:F2:6D:CF:72:72:42:3C:F5:51:CC:AA
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019CAE6C25B5D435FBB53505225E403A7912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1575
Signing time: Mon 02 Mar 2026 12:00:48 +0000
Manifest this update: Mon 02 Mar 2026 12:00:48 +0000
Manifest next update: Tue 03 Mar 2026 12:00:48 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: gp5+LfKeMHCVX6DrRSLhj/zyWnOiSPBhQtSVYEGBz3k=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:25:b5:d4:35:fb:b5:35:05:22:5e:40:3a:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Mar 2 12:00:48 2026 GMT
Not After : Mar 3 12:00:48 2026 GMT
Subject: CN=6aba0b2809e20f0a1af26dcf7272423cf551ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:20:c7:99:23:ad:ec:10:0d:ea:50:fd:3f:
c5:96:5a:b2:98:ba:96:aa:0c:f4:31:dc:f0:a6:1c:
3e:f7:6f:64:9a:bb:01:7c:ff:ff:a9:4f:ca:6f:e8:
30:5c:e9:5d:db:10:3d:fd:53:38:88:72:eb:bc:2a:
e5:cb:db:cf:62:6f:a7:15:8d:35:e5:37:eb:c2:c2:
98:ab:bf:a4:57:7b:15:cf:8b:16:49:ee:ed:f1:b6:
4d:7a:4b:39:af:98:f6:ee:b4:33:f8:21:e0:49:48:
14:87:0e:69:91:a2:5d:69:f9:5b:17:59:d8:f6:8c:
01:11:2b:bf:c9:7e:01:38:96:06:63:03:7c:0f:8f:
31:d2:1a:2d:a7:cc:77:d8:5a:96:5a:88:08:26:ad:
58:ac:89:bb:96:8c:55:2b:46:21:64:bd:f8:57:06:
08:86:c7:94:de:0f:5d:de:e0:6e:9c:5f:8b:d4:f7:
11:71:f1:f7:0d:41:88:5e:75:35:7e:aa:e4:f9:dc:
8b:65:d6:ba:3d:d1:0b:db:63:a9:2e:27:2f:9d:84:
0c:19:94:84:85:06:96:b3:5b:86:f9:75:18:58:02:
cd:0c:e8:ef:7b:d4:fd:c2:38:87:ac:19:04:dd:5c:
4f:29:72:98:95:2b:4e:c1:7b:f4:48:b9:82:b3:f8:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:0B:28:09:E2:0F:0A:1A:F2:6D:CF:72:72:42:3C:F5:51:CC:AA
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bd:f6:15:a4:26:3e:1a:36:69:e4:3d:cf:67:1a:6e:4c:a1:
fd:0f:63:ab:d2:5b:c9:00:cf:2c:5f:9a:46:88:ed:fd:c0:fd:
b4:76:11:c1:6b:40:4c:aa:26:8d:f9:20:9d:1a:86:d0:69:b7:
ab:5d:d9:a2:6a:f1:d9:f8:2d:d6:13:ed:56:20:3e:47:de:0b:
bd:1d:dc:2f:52:14:ae:f2:42:99:05:d7:3e:d5:9e:ef:d5:c2:
a1:52:1b:ac:ec:52:40:4e:59:ea:ed:ff:f9:26:1b:41:3b:18:
78:c4:dd:78:80:2a:ff:4a:34:39:ff:8a:23:dd:70:af:1d:bd:
72:ed:72:c0:b7:00:ae:85:5f:09:62:72:f4:41:79:9b:f1:4e:
5a:f5:82:67:80:6b:d7:43:16:9b:a0:8e:b5:f3:35:8b:1b:1f:
60:cc:71:92:1b:f8:18:5f:b1:c8:b2:0e:33:7c:99:84:7e:59:
63:f6:f6:a2:ae:6c:bb:7e:8b:81:c7:ad:39:f6:a4:0f:ca:2b:
19:b2:64:8d:45:e7:2c:d7:7c:c2:d2:9e:f8:d4:8a:71:56:b7:
a3:95:1f:8a:7c:3c:c7:e0:b5:9b:1c:54:44:ad:49:91:fa:f1:
8c:ed:8d:9b:0d:38:ff:57:68:2a:54:04:f9:5e:1b:2d:f5:a0:
ba:24:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:34 2026 by rpki-client