Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: fO3+/7F6VMRUz0qiZPba+u368w1DQ1sOJloMUw0EgyE=
Subject key identifier: E9:EA:21:51:3E:0B:D2:71:BE:71:00:E2:D4:0C:61:A3:B0:3D:76:B5
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 01A1298CA7AB88DDE1720C7ADBF4C1BC32A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 17C7
Signing time: Sun 11 Oct 2026 06:00:46 +0000
Manifest this update: Sun 11 Oct 2026 06:00:46 +0000
Manifest next update: Mon 12 Oct 2026 06:00:46 +0000
Files and hashes: 1: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: PIl5Ip4xzn3NVfBqzprjnQ3zMZYu09YcrHfORdMUxSI=)
2: DrqSAiQsORehrryYAD7Rq8PmrJA.roa (hash: AaXq/+2gsLHCIuS3xSicfRQKvAMxMmXLzBhDFnvyVKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8c:a7:ab:88:dd:e1:72:0c:7a:db:f4:c1:bc:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Oct 11 06:00:46 2026 GMT
Not After : Oct 12 06:00:46 2026 GMT
Subject: CN=e9ea21513e0bd271be7100e2d40c61a3b03d76b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:64:1f:f5:22:f5:33:f7:f6:09:4d:d7:f8:
c1:50:08:1a:6a:36:6c:59:8f:43:b4:57:ac:2d:7c:
5e:c5:cb:e6:19:7f:b6:0b:39:a7:d7:0a:3d:bb:c4:
e2:a4:97:10:fb:ec:c4:c7:06:61:a0:78:ec:99:fd:
e2:4b:c1:79:37:c8:1e:94:d4:3c:73:8b:b8:19:a7:
08:fb:e6:1c:f8:36:7a:ef:a6:de:b7:16:e8:3a:0e:
6f:9e:d5:13:e3:a7:de:88:24:74:13:1b:99:d1:a8:
eb:9e:55:40:7b:e0:1c:dc:d3:ba:08:a9:64:43:86:
67:02:4e:a2:4d:98:3a:38:ce:62:f1:12:6f:e9:d3:
ce:df:92:ab:9a:7b:26:0d:50:86:5b:c0:5c:30:2f:
36:52:72:e4:e5:82:a3:ed:f6:15:1e:23:f0:24:dd:
e0:f4:68:d2:b3:ed:19:0e:c7:8b:56:92:9a:a1:0f:
e9:73:ac:9c:9d:2e:a0:f0:7d:6d:1a:e0:81:2c:4c:
31:57:1f:7a:f0:cf:3b:c2:eb:7e:d1:f0:23:36:5c:
1d:92:ba:d9:fd:6f:50:d9:36:27:84:a9:10:cf:db:
cc:de:e9:5e:d8:a2:8c:27:a0:2e:f8:dd:ce:46:08:
a5:0d:b4:e1:23:c6:9c:20:64:24:5e:a3:67:5c:e2:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:21:51:3E:0B:D2:71:BE:71:00:E2:D4:0C:61:A3:B0:3D:76:B5
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:81:97:ea:28:b7:2b:c5:87:16:b1:ad:fb:97:62:86:da:
a9:e8:97:9b:0f:de:b1:3d:f8:79:4f:c5:c7:39:2a:94:e3:46:
d3:a4:08:75:82:3d:f7:da:f4:98:1d:b8:17:0c:66:3f:ce:b4:
43:b4:5a:29:90:8e:4a:1d:ac:13:a1:4e:de:1a:7d:5c:be:d9:
69:d2:a9:f3:ac:38:16:39:46:53:88:e0:39:4c:af:da:64:e8:
d6:b0:1b:60:79:94:4c:bf:1e:4e:3e:35:1f:16:79:db:02:f2:
51:cf:31:06:a2:8c:3c:ce:34:d8:d0:76:53:f3:c3:41:fc:89:
50:35:66:00:b9:ad:4d:c1:c1:ec:f8:e7:d1:68:54:84:75:de:
f6:86:bf:75:b8:bf:f9:09:cc:f7:44:e8:85:46:f7:e1:f0:d8:
05:39:09:71:08:3a:58:18:33:27:48:34:58:4f:21:d3:71:7c:
e6:53:fe:59:cf:23:03:4d:d3:f2:80:a8:b4:2f:aa:f4:97:2f:
a3:c8:a6:8e:c1:23:3a:a1:13:c2:5d:db:27:c0:60:43:44:89:
e8:c3:3f:da:d1:6f:ee:51:9a:80:33:b4:62:46:00:d4:f7:1a:
d9:71:f1:f0:8e:7e:77:13:03:dc:b3:1e:00:5f:d1:7f:87:4e:
46:61:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:57:00 2026 by rpki-client