Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: lfWOOBe21l4cbANExAa49TIIYkhuQBqOhs1npux8mg0=
Subject key identifier: B7:F3:F6:2F:FA:9D:75:3B:42:69:2C:FD:86:7D:E7:61:9C:C3:8B:C8
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 019FA9AC3205BC175197615FF4AC434901DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 17:01:02 +0000
Manifest this update: Tue 28 Jul 2026 17:01:02 +0000
Manifest next update: Wed 29 Jul 2026 17:01:02 +0000
Files and hashes: 1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: icU/RCENzcnLctDZEN2AadjjmHE8pLLrxj7Atpd+aZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:32:05:bc:17:51:97:61:5f:f4:ac:43:49:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Jul 28 17:01:02 2026 GMT
Not After : Jul 29 17:01:02 2026 GMT
Subject: CN=b7f3f62ffa9d753b42692cfd867de7619cc38bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:34:a3:54:df:dc:06:b6:15:47:c4:92:55:
1c:30:f8:e5:8b:a0:8d:36:84:1b:2e:ec:0f:73:41:
88:fe:43:20:6a:ee:c3:3f:fe:19:d5:ae:16:13:7a:
1a:4e:68:bc:e7:33:ae:3e:d6:3b:57:21:2f:56:62:
e4:4a:39:f7:25:5f:67:0c:93:cc:74:63:9a:b4:5e:
de:c3:78:8c:0c:00:ce:b6:fd:08:aa:28:7e:19:df:
36:f9:ad:bd:c7:69:64:3f:23:63:2c:9c:e9:5f:4c:
99:ac:36:dd:fc:78:9d:0a:dd:e3:14:75:92:7e:3c:
38:13:c8:97:b7:53:e5:b1:a7:c2:dd:38:8a:c5:14:
cc:fa:bb:1a:46:5e:cf:67:21:a3:d8:2d:88:a8:55:
4d:7a:a2:46:35:66:81:5b:09:ff:f0:1c:77:64:4c:
df:18:15:55:ec:02:04:55:dc:77:14:f5:b2:f1:07:
77:eb:15:11:57:bd:28:ec:e0:13:a4:b6:bd:ef:8e:
aa:95:ca:ea:ef:12:a4:18:83:2e:af:7a:b7:45:c1:
70:78:1e:4e:d4:2f:92:d9:80:3c:32:b2:68:98:70:
bc:14:74:9a:4a:98:dc:52:1a:cb:44:7b:9c:fc:5e:
63:65:84:a3:32:98:4f:47:16:8f:48:b5:68:c5:54:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:F6:2F:FA:9D:75:3B:42:69:2C:FD:86:7D:E7:61:9C:C3:8B:C8
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c4:e1:ff:01:e2:07:d3:72:54:c6:41:75:23:9c:a8:7a:45:
9c:c9:ac:f3:28:9c:b0:6d:db:e1:87:93:2b:d9:4a:f7:af:30:
87:57:5d:f1:2f:bf:69:03:9c:55:82:d9:65:d7:39:d1:45:a2:
3a:82:33:a7:0b:25:77:b3:77:e2:ad:0e:8b:37:99:83:22:4d:
13:81:e7:c1:2b:d9:51:ba:eb:f9:c0:28:fc:6b:82:b3:2a:bd:
27:12:d2:eb:0f:ae:3c:16:5a:be:13:6a:30:be:1a:fa:af:93:
c4:ee:19:7b:95:f0:0b:70:71:b0:52:05:00:c4:76:b0:14:5b:
02:1a:46:7e:38:e5:df:15:fd:6e:a6:38:28:e4:55:cb:ec:7a:
96:b9:87:83:6c:94:d4:27:74:bd:ed:13:f8:90:7d:a3:79:25:
80:55:f9:52:41:22:fb:1c:11:dd:e4:a3:f0:cf:eb:e1:3b:cb:
ca:22:15:c3:7e:42:28:49:bb:09:23:eb:48:c3:cd:f7:36:63:
db:e6:fa:58:d0:d5:2e:d3:ed:5e:dc:c0:58:0c:0b:d6:a8:50:
48:98:0e:9c:ba:f9:83:09:b9:f6:76:61:d8:38:39:59:93:87:
c9:ee:c5:35:77:69:b8:33:af:87:61:5c:03:2c:0d:33:e5:5c:
00:11:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:30 2026 by rpki-client