Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: Z+Cf2oZo4v+vICw2QWNxBSlh1F6HQR3GmtguM8jSQb4=
Subject key identifier: 43:54:17:93:6B:13:F4:A4:5B:59:09:D7:B6:CA:FE:3C:AA:CC:17:B7
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 01A0C58E21CEEF1E9B7CA81660BBE3B769D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 20:00:21 +0000
Manifest this update: Mon 21 Sep 2026 20:00:21 +0000
Manifest next update: Tue 22 Sep 2026 20:00:21 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: 760qnqZgWwAyM3YMYGoPGwPluhQlA6Yv0ceSeh4cJbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:21:ce:ef:1e:9b:7c:a8:16:60:bb:e3:b7:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Sep 21 20:00:21 2026 GMT
Not After : Sep 22 20:00:21 2026 GMT
Subject: CN=435417936b13f4a45b5909d7b6cafe3caacc17b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:12:a6:26:fa:37:6e:d3:70:eb:4f:5d:7a:
3c:55:fc:a8:0b:62:b9:3e:b8:64:d0:cf:99:25:c4:
3f:84:56:5c:4d:57:78:1b:42:36:f8:28:bb:83:e2:
5b:87:e9:61:25:b7:5a:70:3c:f8:1a:e4:32:0d:6c:
ac:8e:cc:ab:95:b8:81:d9:ad:4e:67:a0:f8:94:ea:
16:45:0c:af:c6:3e:bc:2c:2a:2a:eb:57:e4:61:06:
71:d0:1f:e6:29:98:4e:49:ee:5c:c1:b3:77:5d:86:
06:7c:93:e1:97:90:e0:2b:b3:c0:69:d1:b0:dc:df:
49:64:39:f0:dc:6d:db:13:fe:9c:08:51:6e:fe:5f:
6f:f6:7f:5d:ed:38:fc:9a:d4:5b:c6:aa:7f:e4:45:
d8:72:8d:2c:3d:99:5a:18:c9:83:3b:83:c6:5d:f2:
b2:2f:45:31:27:01:d4:0e:73:42:e0:21:25:0d:72:
84:a6:b2:5c:44:f9:7f:90:c8:9f:7c:f8:11:4b:4a:
9a:95:13:ee:ab:95:ee:0a:b0:00:af:f6:f5:0d:df:
77:5f:95:5d:74:7d:66:d7:18:02:7c:67:b7:23:6f:
ea:00:91:77:81:6d:58:c1:47:26:d5:a2:c7:c2:54:
e9:6c:45:52:46:92:d0:ac:6b:5f:32:47:e1:4d:50:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:17:93:6B:13:F4:A4:5B:59:09:D7:B6:CA:FE:3C:AA:CC:17:B7
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:4c:80:5f:5a:3a:3a:99:54:e0:b5:48:5e:de:7c:1c:0a:
af:fc:65:a4:3f:ba:9e:d0:c0:b5:9d:c8:50:a3:2a:4a:39:69:
aa:ff:e0:cb:d9:3c:31:9b:a8:3a:9c:0b:26:99:3d:c6:7a:5d:
1f:93:96:45:34:88:77:cf:01:f9:1f:3b:5a:80:76:a7:50:7a:
90:9c:e9:fd:51:39:77:12:4a:f5:8a:21:eb:b9:2c:7a:be:ca:
a1:3a:fe:3f:0f:60:4f:ab:c1:0e:63:c0:6c:a9:75:5a:41:12:
b3:4c:13:98:3e:0f:1c:61:ea:de:50:5e:e1:f4:1c:55:36:e3:
ec:a8:a1:b6:a7:a7:86:d9:d8:61:87:4a:32:46:c1:f0:a4:0e:
24:49:c6:6c:db:32:dc:d7:22:21:f8:86:17:9e:19:19:7d:29:
8d:66:a1:43:4f:37:3a:a5:c1:d0:75:b7:fe:55:8e:91:09:7c:
17:10:48:22:f8:2d:8b:bc:00:7e:6b:5f:27:fc:76:42:b4:78:
1c:a8:71:ae:84:13:e8:99:55:24:8f:db:6c:e0:77:cb:81:02:
d1:e3:b2:3b:2e:9f:bf:19:57:de:ff:f0:c5:3c:81:a3:d4:5f:
bf:ad:d3:e7:13:62:8c:a3:c4:58:37:2f:5a:94:b1:67:ec:a5:
2e:9f:6d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:04 2026 by rpki-client