Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: qNRV/RV9pKcKfA+AWebgz5aipPhbx/Hbqxn135tXDEc=
Subject key identifier: E2:F5:1E:EA:80:AB:A6:F0:61:A5:0F:A3:2B:76:BF:1B:2E:3F:B0:FB
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019CAE6C8203397205C35E995EF313A56FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0BB8
Signing time: Mon 02 Mar 2026 12:01:12 +0000
Manifest this update: Mon 02 Mar 2026 12:01:12 +0000
Manifest next update: Tue 03 Mar 2026 12:01:12 +0000
Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: 90QOPKLLO0AJo3nRYkYo0uYmcTKmgOthuC5SkoNrkzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:82:03:39:72:05:c3:5e:99:5e:f3:13:a5:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Mar 2 12:01:12 2026 GMT
Not After : Mar 3 12:01:12 2026 GMT
Subject: CN=e2f51eea80aba6f061a50fa32b76bf1b2e3fb0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:f9:0c:d2:50:15:6d:83:b6:32:94:8e:33:
ee:49:5f:f9:dc:67:b8:0b:d8:fe:a4:c3:85:cd:48:
70:05:82:8a:aa:28:65:67:7f:23:84:19:e5:c7:64:
2a:fd:86:cf:1a:c7:5f:35:4a:1e:2c:6e:7a:5a:f0:
ae:d8:6d:83:11:6c:7a:93:50:ef:62:a6:75:dd:27:
18:ab:17:90:03:00:09:42:9c:ee:6f:d6:e6:be:5f:
08:53:89:7e:a2:b7:97:3a:e4:d3:76:c8:79:76:9e:
e2:78:d0:37:f4:11:f7:e5:2e:df:4f:6b:65:84:49:
c5:69:18:de:66:8f:85:30:f0:cb:fb:a5:e3:a8:60:
40:47:86:cf:b6:59:15:3b:9f:3b:15:3a:75:a0:b5:
75:1c:d4:7b:23:5a:25:79:d2:f5:a5:65:8c:70:61:
6a:29:40:02:22:af:d6:cc:d0:86:c9:3d:52:b7:35:
75:09:0b:5b:9b:d7:f8:54:54:40:8f:19:50:e1:2a:
13:4e:3e:1a:6d:08:c6:be:48:7e:e4:4a:51:7a:4e:
47:38:6f:32:d0:0d:19:37:a4:4d:e3:1b:c3:a9:27:
53:e7:b8:da:db:5d:d8:f1:73:f2:0a:de:de:e6:a6:
ca:95:8f:1b:29:6b:9e:f6:c6:3f:41:8c:18:c6:65:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:1E:EA:80:AB:A6:F0:61:A5:0F:A3:2B:76:BF:1B:2E:3F:B0:FB
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c1:27:d2:16:78:85:47:fc:93:41:a9:0a:59:ae:b0:20:1e:
c3:d5:8b:2b:59:c5:2a:0a:f6:d9:6b:b4:32:27:8f:04:18:55:
95:03:51:97:00:15:91:92:71:8c:38:39:67:40:7b:3b:cb:4b:
7b:30:3d:1d:31:f9:7c:2e:9d:0d:50:0a:a0:27:1a:e4:7c:c7:
f1:bf:06:ac:ba:dd:15:20:75:b5:a3:d2:89:d3:48:dd:2d:22:
14:29:b5:f2:8e:46:f4:74:6d:b2:3f:f1:09:05:d6:db:75:24:
52:e4:f2:2b:ef:c7:01:0c:a6:a3:92:14:25:54:fa:e3:01:31:
03:4f:da:dd:ae:0c:9d:21:c9:a0:04:54:cc:b3:d0:bf:33:dd:
2b:5f:86:89:fa:4f:e8:27:be:22:20:8b:9d:a2:8a:aa:6c:5d:
db:5d:e1:5f:dd:6f:95:00:99:9e:08:9d:70:7b:1e:2b:be:09:
63:1d:3a:8a:d9:45:20:dc:f8:7b:90:84:ca:e2:c3:5d:2c:50:
a2:70:5f:bd:c0:4f:6c:35:24:e6:d3:ed:45:38:b8:f4:f4:1d:
d2:cf:7e:b4:c0:cb:eb:92:25:7b:04:04:1e:6c:00:d8:c7:e2:
11:ec:60:07:01:3a:38:10:10:06:9e:19:78:eb:cd:f8:01:4d:
49:d6:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:29 2026 by rpki-client