Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: gcKZYscarTieT3OIttciLG4ji7cLp0TqDlbuWJD6wjc=
Subject key identifier: 54:F1:00:03:DC:FF:0D:B7:2C:1C:18:AB:7B:18:D6:F6:83:32:07:C4
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019D992BB61512E7F7335C50AB10B50AF362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 1068
Signing time: Fri 17 Apr 2026 02:01:11 +0000
Manifest this update: Fri 17 Apr 2026 02:01:11 +0000
Manifest next update: Sat 18 Apr 2026 02:01:11 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: AmjZj6umJPEtGTty+vtq2X8HXtNwt0SkwVTY1gZb9+g=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:b6:15:12:e7:f7:33:5c:50:ab:10:b5:0a:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Apr 17 02:01:11 2026 GMT
Not After : Apr 18 02:01:11 2026 GMT
Subject: CN=54f10003dcff0db72c1c18ab7b18d6f6833207c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:28:0b:86:ed:1b:e5:a9:ef:4f:b0:0b:b9:
9e:3c:80:d8:f4:9c:09:4b:d3:fc:0e:cb:58:4a:a9:
87:7f:d2:f1:59:12:38:16:09:e9:dc:55:3d:53:4f:
02:98:d6:fd:c8:b2:7f:7e:41:53:cd:a8:0e:94:0c:
d1:e5:f8:2f:ca:29:13:63:c6:d3:b5:b6:d9:2a:81:
39:bc:b6:a2:54:4f:05:46:38:72:bd:9a:06:59:75:
1f:09:80:93:a9:90:47:81:f8:5e:c2:cf:45:92:d5:
7c:cb:0b:00:65:54:8b:9c:4c:f0:02:3f:ae:0b:0f:
eb:4d:26:cb:52:f7:81:89:ad:78:44:55:ff:00:2a:
e2:f7:4c:44:b4:17:7f:ba:96:1e:fb:60:ee:b8:95:
cf:69:88:ae:4a:16:dc:8c:4e:c0:31:4b:2f:bd:91:
84:0b:64:dd:89:1e:9d:00:8b:46:8c:40:7a:25:b3:
04:ca:07:e2:0c:8e:9c:a9:d2:4c:8b:c0:f5:6e:22:
ce:06:96:4a:25:dd:6c:b0:02:06:2a:81:0b:e9:3a:
f5:c0:01:ad:b6:f6:49:eb:d7:58:c1:05:a3:27:fe:
21:9b:c9:f7:24:ed:f4:ea:bf:5b:e1:f6:9c:8f:65:
1d:73:ef:38:dd:90:20:88:ae:64:07:77:4d:6d:f8:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F1:00:03:DC:FF:0D:B7:2C:1C:18:AB:7B:18:D6:F6:83:32:07:C4
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:13:0b:f4:f7:d5:45:96:0c:fe:56:c7:6b:62:56:3b:be:
23:14:0c:3e:3b:ef:87:35:3a:9d:98:fe:86:b3:7f:b7:9d:a4:
bd:9e:7f:ba:45:a9:6a:14:24:c0:b3:d2:c2:1a:77:f2:4e:a9:
6b:6a:18:68:40:0b:ae:9b:a9:0b:7e:70:07:bc:62:89:ad:f4:
c3:98:90:90:71:97:50:8e:c5:da:44:c1:b3:15:dc:33:73:8e:
89:2f:ad:9d:82:b3:03:e6:92:fe:a1:31:53:02:4e:b8:e5:9b:
10:f0:5f:5e:9b:f8:d5:14:15:41:47:e0:94:77:11:42:15:21:
82:39:7d:a1:19:24:d1:88:c2:07:22:3a:90:23:63:34:36:a1:
bf:9b:c9:98:d4:b9:2f:1b:dd:59:6c:6f:2a:52:d0:54:ac:39:
59:75:0b:23:f1:8a:5f:67:bf:46:07:be:d3:de:62:61:58:4b:
da:96:58:7f:ae:64:f4:6e:82:c3:06:9f:6e:17:d9:bc:c6:76:
2e:ff:12:97:03:67:de:34:2a:a1:4a:28:53:74:de:19:57:6d:
d7:7d:e0:71:07:98:44:8b:bc:65:87:04:ba:ed:69:4c:1d:31:
e6:ac:74:af:27:05:30:90:c4:48:81:66:16:8f:9a:6b:7c:43:
a6:8b:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:32 2026 by rpki-client