Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: oJK40P+usDhNxvNIY5q5CdDCdk8/45UvaDEwHsMlRWQ=
Subject key identifier: B5:2C:0A:A4:C7:A7:35:28:33:09:F3:BB:24:CC:3E:10:E5:0F:32:FA
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019CABA1DC73C30B2A1A310B17EB19AF1FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0FF2
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: F+yWHxFCV9/Gqk0wvAJk3s3MJIYz1OkOR/zo2XZJd/k=)
2: NiKwFXYvjbK-UtzIxxbcdKWTmT8.roa (hash: C+90WWb/JQ7zrn55n+w4S16JKtkV7Mdgc4eSRqUFD2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:dc:73:c3:0b:2a:1a:31:0b:17:eb:19:af:1f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=b52c0aa4c7a735283309f3bb24cc3e10e50f32fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:e6:d2:a6:c1:3d:17:57:29:87:44:f9:6d:
ad:4d:26:ae:51:3f:d7:8c:75:c8:ea:07:92:75:7d:
10:df:b5:ed:e9:c6:3a:0c:3a:c7:86:0e:2f:7f:ff:
7c:07:f2:8c:d6:9b:da:1f:ff:16:b4:88:71:07:68:
82:83:aa:8c:f0:31:79:14:88:4b:df:b8:74:1e:01:
da:86:a0:05:3c:3b:4c:99:5d:c4:7b:58:97:c6:db:
df:3a:d9:38:ea:93:b7:e2:e7:e9:f9:dd:f3:21:d3:
8a:ed:9e:55:5b:5b:38:5c:ef:11:53:c8:a5:de:3c:
70:29:c1:d4:7d:a2:9c:cf:87:09:22:7e:f9:b8:79:
80:7f:20:99:46:51:80:ac:04:0e:55:bc:53:d3:ac:
49:b7:15:99:58:aa:19:00:4d:c0:4f:ee:10:b7:65:
a0:c0:34:7c:23:2c:98:9c:e1:09:f9:3f:a0:b2:8f:
d7:81:4e:80:e7:25:f9:20:56:a3:62:96:83:99:82:
09:da:1a:06:82:c7:87:ee:ec:54:79:99:02:ed:20:
94:06:30:f1:99:f7:a6:8b:cb:6d:cb:88:68:e6:2c:
a4:1f:e8:b7:c2:9f:97:7d:54:72:3b:8a:0a:04:e2:
15:87:93:44:e5:2b:ff:1d:1b:2c:e9:63:84:c4:be:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:0A:A4:C7:A7:35:28:33:09:F3:BB:24:CC:3E:10:E5:0F:32:FA
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:fc:b2:4f:a0:50:c5:0b:7c:f1:6e:09:77:b3:02:94:52:
03:15:7e:e0:9b:95:e3:b3:4b:c7:9b:0e:1d:1c:71:18:49:1f:
db:49:f7:d5:38:e1:b3:4d:4f:0f:6e:93:d4:c3:71:6f:43:04:
e5:a5:74:c9:43:af:3a:28:b6:fc:2b:2c:ec:a2:7a:3e:4b:e7:
1c:be:90:65:0f:20:39:58:57:c0:51:fb:be:59:0a:10:bb:ed:
79:7b:88:69:c1:e8:90:76:b4:cc:da:12:57:d6:51:1d:d7:7f:
10:15:e8:42:fb:d0:c7:59:bf:aa:60:ef:76:a7:c8:06:60:91:
ca:b8:c3:2d:11:f5:e3:21:ed:70:13:d6:48:53:01:c4:90:46:
da:6b:cf:14:67:07:f0:b6:df:3d:69:c1:28:5b:47:eb:96:f1:
b1:03:5a:ad:ef:12:3f:65:33:22:8e:92:6a:7f:c0:87:81:f1:
d3:4b:b1:9c:f3:79:86:7a:e7:30:e7:9a:06:be:9e:88:00:7d:
b8:40:f9:80:35:22:07:f1:fa:56:8d:fa:66:7e:81:b6:5c:6d:
9a:d1:54:33:80:a4:b1:93:1e:55:50:43:ef:5d:83:46:5d:57:
0c:04:2b:4a:1d:ef:ea:5c:3a:79:e8:b1:44:d0:a6:51:66:a8:
b4:33:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:12 2026 by rpki-client