Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: a5iyeI3CczVAWC1cdzmDY+onUelyNJApbeVAh/c6vCI=
Subject key identifier: 1C:22:EC:86:74:48:26:50:6E:D2:5C:6C:0F:77:70:5C:51:91:42:F2
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019D9BF54D83E6DE97465FB33B62B0259239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 15F0
Signing time: Fri 17 Apr 2026 15:00:37 +0000
Manifest this update: Fri 17 Apr 2026 15:00:37 +0000
Manifest next update: Sat 18 Apr 2026 15:00:37 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: PF/LtUB7vxmFW47iy9h3s0lRDvpV8yshThO5PXflQH8=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:4d:83:e6:de:97:46:5f:b3:3b:62:b0:25:92:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Apr 17 15:00:37 2026 GMT
Not After : Apr 18 15:00:37 2026 GMT
Subject: CN=1c22ec86744826506ed25c6c0f77705c519142f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:f1:be:78:3e:b5:17:ae:6d:3e:06:e5:72:
79:4f:5f:75:0b:f4:ed:65:44:e8:78:cb:71:b0:59:
72:7d:75:ed:38:31:4a:b1:a4:77:cb:17:0a:0f:af:
8b:25:cf:8f:60:da:fc:a3:69:d8:b0:75:3d:d6:e4:
ec:42:57:cb:e9:98:df:b1:f6:19:35:17:6f:da:58:
96:9c:a0:79:40:46:f2:12:90:6c:6c:53:fb:c8:ce:
4a:8b:1c:af:2d:82:03:14:78:7c:ac:5e:31:29:47:
c8:c0:78:85:85:33:f6:86:3e:13:29:f1:de:af:3e:
18:65:20:9a:cf:6c:bc:71:5f:a2:43:37:ea:85:0e:
f2:9d:d3:0e:81:32:65:26:a4:d6:0a:cd:19:db:76:
e3:0d:77:8d:99:06:f7:d8:98:65:64:38:a7:9b:38:
ae:25:a1:b3:4d:4b:e6:e4:43:a1:da:35:57:1b:30:
99:79:54:dd:94:70:33:8d:1a:93:01:36:91:81:2c:
bd:b9:e4:a5:e4:3b:41:9e:e5:d9:c4:b9:2d:17:98:
71:e4:dd:11:c5:6d:5c:d7:6f:94:1a:2a:1c:88:33:
eb:dd:33:a7:da:6a:62:75:72:c8:e8:5c:21:27:05:
ac:4e:11:1e:76:fb:5d:05:7b:0a:73:6d:0c:82:db:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:EC:86:74:48:26:50:6E:D2:5C:6C:0F:77:70:5C:51:91:42:F2
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:f1:a8:63:e7:18:83:77:dc:29:81:ee:00:5c:82:2c:9c:
1c:99:4f:8a:f9:b1:c5:f1:8c:ee:e9:36:12:d4:a4:76:00:78:
93:86:05:3a:20:b5:e6:51:25:df:00:0b:dd:38:6c:6b:ed:67:
96:99:d4:ea:4e:53:91:2e:4d:fb:fc:10:4a:53:26:47:f8:18:
cf:3e:9f:20:a8:c4:00:7b:4b:67:1e:fb:cc:ca:ab:e2:51:d2:
15:a9:49:82:51:9a:dd:ce:05:e0:f0:6d:f8:90:58:a8:87:c7:
cc:56:52:a5:cd:81:9d:44:e0:9b:80:6b:25:0b:3a:12:2c:56:
21:e5:29:a4:1b:1b:35:35:04:5a:e8:e5:e4:41:8b:e9:2a:ca:
25:25:30:2a:c8:7e:04:e0:19:c1:bb:84:2e:dd:e9:3b:86:ee:
c9:46:9f:48:e8:ed:fa:e7:3b:ce:52:f9:6c:c4:d1:1b:6c:c2:
d0:ee:62:4d:2f:5f:91:f5:83:a3:1f:1a:46:05:22:ad:60:56:
08:9f:b3:b3:e9:2b:15:9f:4c:3a:9e:37:f2:be:ac:ec:b0:32:
a8:c5:3e:31:fc:f7:d8:dd:27:ae:30:c7:8f:fa:a9:c4:d2:fa:
5c:48:59:b3:4b:4e:24:2f:76:40:09:bb:9e:d6:77:63:b8:cb:
e9:ab:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:36 2026 by rpki-client