Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File: Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier: Zc65QHVx7Ph/NAmDZ8F0+Wk7JPFRDHz5Rlw7faX1X8A=
Subject key identifier: 60:28:71:00:A0:71:8A:D9:B7:E0:27:13:48:C1:C5:58:58:D9:2D:2A
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer: /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial: 019CAD59C44988321F1F62DF8FFB81991B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number: 052B
Signing time: Mon 02 Mar 2026 07:01:07 +0000
Manifest this update: Mon 02 Mar 2026 07:01:07 +0000
Manifest next update: Tue 03 Mar 2026 07:01:07 +0000
Files and hashes: 1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: kGTeH3DKoyf4djX28sHTe7dBuEvlJ6mNPJCIjkKkMME=)
2: db61oXLP39Cp59_X9LRtM_MiXZA.roa (hash: 2/tDRp+KE5yxGlSOAf8H33OyX8Awatl3Wh7fusLDcOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c4:49:88:32:1f:1f:62:df:8f:fb:81:99:1b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Validity
Not Before: Mar 2 07:01:07 2026 GMT
Not After : Mar 3 07:01:07 2026 GMT
Subject: CN=60287100a0718ad9b7e0271348c1c55858d92d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:0d:9d:62:87:e1:1d:40:35:7e:af:00:7c:
89:2e:b0:dd:53:bd:e5:9b:da:92:9e:1c:4c:0d:ce:
8c:27:18:aa:d9:de:94:a7:96:1f:1f:56:3f:65:1f:
f1:ff:d9:3a:19:ed:06:3a:ce:44:50:3c:ee:58:2f:
42:1b:04:59:eb:61:ed:86:a5:16:34:8f:fc:e4:14:
b3:8b:87:25:26:63:2a:47:06:3f:c6:e1:c2:7d:f3:
2e:d0:e7:dd:66:85:9d:db:24:95:37:35:54:01:36:
6e:4c:d7:de:2a:eb:6e:a2:a5:f1:85:0b:da:31:19:
33:89:46:6a:5e:c5:89:9e:0f:56:04:c6:d8:97:16:
37:29:e6:39:89:67:e0:c8:c1:62:67:c4:e6:c4:dd:
e6:43:fd:dd:69:1a:84:56:73:02:1d:d0:10:6d:5c:
0c:f7:19:30:c0:9a:b6:60:3a:d6:e3:af:80:27:dc:
0a:8b:24:c0:74:3a:1e:ea:e7:fe:8f:86:58:52:b9:
5f:08:4b:bb:17:36:89:ce:50:17:22:8e:e1:ec:49:
af:50:ff:b1:ae:77:8d:55:5d:55:1e:20:4f:1e:b7:
c8:ad:37:d6:64:df:81:b8:10:65:98:6a:88:b5:90:
d5:73:aa:56:3f:da:5f:3a:70:33:b7:34:84:9b:05:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:71:00:A0:71:8A:D9:B7:E0:27:13:48:C1:C5:58:58:D9:2D:2A
X509v3 Authority Key Identifier:
keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:fb:f0:cc:35:87:bb:d8:bc:16:92:bf:a1:36:92:7b:65:
a4:9c:0f:21:0f:a7:f0:dc:5e:e1:83:fb:ce:20:43:78:0d:1c:
ea:f2:1a:74:3a:64:4f:99:b9:70:37:91:a8:16:9e:51:68:96:
90:d4:d9:5b:62:b7:7b:13:16:c4:42:1d:b3:a5:7b:6d:a7:8b:
5e:de:01:9e:de:9c:cb:4e:60:56:1a:73:7b:8b:4f:88:29:47:
3b:3e:7c:b5:8c:38:62:c6:53:26:3f:c1:89:ce:9e:ba:ab:e9:
3c:45:a4:32:61:9c:8f:e9:35:37:83:7e:d8:ce:b2:74:cf:e6:
c0:19:5d:7b:80:18:4c:96:68:3e:88:ae:b7:8d:81:48:64:af:
03:44:28:e4:3e:b6:f5:22:0f:2e:f8:eb:f1:ed:ff:2b:64:91:
82:49:6f:bb:92:f7:1b:54:62:39:3a:ab:5c:7e:95:76:5f:18:
db:c4:26:73:f7:0a:c4:b6:91:c9:d5:32:12:db:82:e7:3e:37:
b7:9c:e1:b9:1c:65:ce:43:07:f1:92:61:f8:0b:29:38:66:53:
b6:e9:2b:b3:a5:2e:e4:19:75:20:f9:92:c9:b7:ba:cf:c1:5c:
de:ca:b5:ca:8d:8f:17:48:78:0e:53:96:61:c3:e4:30:6b:82:
4c:2b:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:34 2026 by rpki-client