Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: jVWXnR1Pm/RjmfHNfW74w0Mhj6z6rWZnHqVJlLu+oJk=
Subject key identifier: AC:5B:90:51:76:2B:B0:6A:40:AB:FE:70:A7:6E:B3:12:A6:9D:F8:CC
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 019EC36E04C0A1C0524765C4789DCE065338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1689
Signing time: Sun 14 Jun 2026 00:00:27 +0000
Manifest this update: Sun 14 Jun 2026 00:00:27 +0000
Manifest next update: Mon 15 Jun 2026 00:00:27 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: a1ZPRacaCiE2RqbZXd7UH5q3+uvL/W6JfSvURVAw2NM=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:04:c0:a1:c0:52:47:65:c4:78:9d:ce:06:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jun 14 00:00:27 2026 GMT
Not After : Jun 15 00:00:27 2026 GMT
Subject: CN=ac5b9051762bb06a40abfe70a76eb312a69df8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:0b:67:53:d1:fd:db:2b:03:5c:a5:ab:39:
09:f8:b0:32:f2:05:a5:19:66:3b:ec:80:aa:f7:5f:
32:99:8c:aa:80:65:c6:3b:b8:5d:86:92:ee:3f:92:
1f:1c:4f:3e:06:46:34:19:e4:44:12:95:97:85:9e:
fd:96:ae:9f:a2:2d:aa:14:73:2a:42:80:b0:66:70:
8f:d9:9d:a8:06:b7:19:21:b9:f3:90:9f:50:51:c1:
f8:0e:d9:ba:26:a8:da:19:52:a4:ff:04:29:d5:95:
62:96:47:d3:5b:17:3c:8d:f0:90:f7:0f:a8:45:76:
04:26:77:fa:c8:39:b8:95:79:d2:61:12:c7:ac:1d:
ff:31:97:e7:f0:9f:a6:12:86:ad:be:d0:cb:51:ca:
3d:a3:15:86:5d:e5:05:3a:1e:de:46:07:39:91:cb:
9d:bb:87:12:b4:a6:32:76:a0:30:c1:47:59:55:56:
a9:cc:1c:ae:aa:ca:c2:35:be:61:c0:b8:0a:af:86:
8d:4c:3c:e0:b7:00:2f:52:97:97:48:b1:54:ce:73:
f8:ec:55:c6:72:5f:7d:26:48:8a:65:5f:34:f8:60:
5d:ca:5c:c9:8d:74:d0:b0:75:6b:9f:1f:fc:1c:e3:
63:a9:80:b5:5d:80:cf:e4:ab:bd:a8:36:d1:ea:34:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:90:51:76:2B:B0:6A:40:AB:FE:70:A7:6E:B3:12:A6:9D:F8:CC
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8c:37:cb:6c:e9:4e:fa:9a:61:d5:e9:6c:c4:1e:dc:c4:c7:
c0:69:a2:8c:3f:9d:e2:f1:cb:19:c3:cc:f7:fb:33:a0:45:d0:
fc:49:04:a1:c7:7d:46:1b:bd:f9:e8:61:d3:8d:31:87:53:67:
fa:2c:79:00:f9:d8:b6:3a:48:5a:39:12:3d:24:f2:07:00:4f:
95:93:41:4a:86:db:24:6d:25:9f:3a:99:05:f1:7c:5a:3d:c3:
5a:ae:22:59:74:9d:7e:22:47:de:34:90:a2:17:48:fe:83:f6:
42:43:65:56:94:95:1d:30:fa:ca:a7:09:cb:03:15:c5:20:41:
07:46:15:df:08:a8:60:de:32:c2:5b:5d:c4:84:3b:3d:49:fb:
9e:b0:e0:a4:bc:21:4b:77:20:4a:29:c8:36:4a:1b:5d:63:51:
96:09:7d:04:41:62:a0:ab:6b:e8:18:6b:c3:3c:87:bb:a2:ed:
57:72:f9:b9:ca:f4:90:c1:2c:ee:ed:37:51:c6:de:35:ef:d3:
a7:44:e7:47:be:9a:ef:af:0e:ac:7c:7e:ba:4d:b3:53:90:13:
cd:1f:51:ca:f2:5e:f6:34:41:7d:ef:ec:8a:98:f3:03:c1:7f:
00:9d:9f:11:35:b4:0d:a9:34:cc:a4:63:61:70:e0:b8:8d:94:
19:60:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:27:04 2026 by rpki-client