Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: mh6X2sdeCCqYYftPFwTBh08Y4Xi5WswUfyAfalxNaF8=
Subject key identifier: 82:A6:96:CC:98:E6:2E:07:0D:3B:9F:FB:08:DD:66:6C:BD:E9:C6:4C
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019D9BF5C0FBB9D134825A6DC57F49CFC664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0C33
Signing time: Fri 17 Apr 2026 15:01:07 +0000
Manifest this update: Fri 17 Apr 2026 15:01:07 +0000
Manifest next update: Sat 18 Apr 2026 15:01:07 +0000
Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: bUdKVZrOnJfalGeusOLxFes1d2TxD40UzpnQwjknmsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:c0:fb:b9:d1:34:82:5a:6d:c5:7f:49:cf:c6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Apr 17 15:01:07 2026 GMT
Not After : Apr 18 15:01:07 2026 GMT
Subject: CN=82a696cc98e62e070d3b9ffb08dd666cbde9c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:e4:49:7d:6a:4c:6d:fc:d8:63:0f:e8:5c:
f6:64:d2:53:22:6a:e4:99:2a:8a:9d:25:7b:bb:89:
99:c4:e6:8c:be:79:5f:c7:6c:43:d4:4c:77:8e:a2:
f6:8d:36:19:b2:b4:73:d4:df:f1:1b:8d:36:86:9d:
89:8e:5d:07:f3:57:37:7f:58:ea:b6:c8:ea:eb:20:
84:c6:2e:f3:0c:0d:72:65:89:e2:44:61:97:9d:29:
76:5e:55:4f:87:22:8f:7c:ea:3f:65:5b:62:3d:01:
cb:af:15:8f:8e:84:b6:a3:c2:b9:98:8e:28:de:a4:
a4:a6:57:89:b6:68:85:ff:ab:a6:67:45:ef:d5:e6:
5a:ad:cf:61:7f:ce:b3:ec:92:14:ad:72:c9:a4:4e:
2c:5c:bb:1c:64:06:f2:b3:fc:4f:0c:76:c5:7e:ed:
7d:fe:fb:de:e1:a4:26:20:06:89:b9:b4:be:74:c7:
d8:5d:f6:ec:13:ac:50:ec:4c:0b:a1:b7:ef:6a:c6:
f6:34:5b:a7:35:eb:19:f5:af:0d:61:14:c0:02:30:
ca:84:05:7b:17:4a:62:a5:8c:2c:e8:ff:e9:02:4c:
5b:ae:53:81:23:f6:c7:4b:04:90:5e:8f:78:9b:9c:
ca:21:7d:bd:8e:cd:cf:9b:71:62:76:a1:95:50:5e:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:96:CC:98:E6:2E:07:0D:3B:9F:FB:08:DD:66:6C:BD:E9:C6:4C
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:04:18:f9:d1:80:fb:b9:80:9a:dc:20:a1:9d:44:8e:90:
ed:f2:06:00:ca:c4:e3:3d:61:da:3f:1a:f5:43:2b:95:4e:12:
15:e5:85:d1:fb:b2:22:e6:92:73:d0:eb:05:e4:94:09:23:e9:
3b:6d:15:2a:0a:fd:da:7c:70:c1:9f:9b:48:e2:b3:3c:43:6e:
64:db:14:b8:27:f1:c8:9e:4e:89:01:7a:dd:07:70:62:41:28:
17:ea:cf:c3:40:a4:19:6d:73:50:5e:b5:15:57:c4:32:a2:f9:
65:e7:00:7d:4e:3f:de:0a:c0:09:95:27:c0:24:40:ff:9a:b4:
28:d7:76:55:e4:e7:67:11:68:6f:2c:67:cd:3c:66:9a:9f:3d:
52:aa:5b:1f:aa:59:28:2e:ac:48:17:0a:de:39:68:1f:e1:89:
1d:fc:68:7e:64:ce:15:89:00:9c:86:8e:13:a7:34:27:5f:99:
d5:1b:7b:2c:4d:91:47:65:3a:eb:2f:15:c9:47:7b:8c:63:a5:
f9:23:8b:ff:7a:bf:93:a6:6f:cc:42:1d:ca:a7:44:a7:2a:8c:
4f:49:39:1e:b2:3e:ff:8c:4e:a4:0e:ba:e3:f6:ce:ec:37:28:
86:9c:e9:46:86:e9:c4:5a:63:5e:0c:e5:1f:5d:17:9b:c7:52:
16:fe:a2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:13 2026 by rpki-client