Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: dHFg9ABShDvE4SVxDfbZHbFptKxuPThFgBye4o5hj4U=
Subject key identifier: EA:53:93:CF:41:E4:12:81:22:18:C6:04:29:04:AC:A0:20:26:D1:4C
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019CA9B3F3201740F3BE06F0B55F2DAB55D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0FEC
Signing time: Sun 01 Mar 2026 14:01:08 +0000
Manifest this update: Sun 01 Mar 2026 14:01:08 +0000
Manifest next update: Mon 02 Mar 2026 14:01:08 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: h6t6/ZO7AxtED7b+GX9E9282yYQc04RTpfuY5sKAtcI=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f3:20:17:40:f3:be:06:f0:b5:5f:2d:ab:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Mar 1 14:01:08 2026 GMT
Not After : Mar 2 14:01:08 2026 GMT
Subject: CN=ea5393cf41e412812218c6042904aca02026d14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:f4:23:7b:13:4b:99:cf:70:e9:53:e3:8b:
aa:dd:58:fe:7b:b5:20:34:90:b3:50:fe:0f:66:e4:
f7:9c:c9:09:a4:ea:89:3f:14:94:c2:a3:48:e1:f6:
fa:e9:7b:b6:08:30:f3:1e:5a:e3:ad:3c:ef:f4:ff:
ab:3c:f6:00:87:0d:a1:11:19:c6:9b:42:61:e3:8d:
94:90:6c:f7:87:cb:ac:9a:a3:fa:32:52:18:83:f5:
24:f9:5c:79:42:fe:d0:00:4f:ce:68:83:bd:71:b7:
65:58:30:f1:18:00:07:7d:cb:8e:70:12:1e:b3:a5:
d2:92:28:7c:32:b9:81:1e:1a:8e:1b:e2:1e:63:7a:
af:85:33:b2:8c:2f:41:ec:e8:5a:8d:70:44:dc:27:
86:65:54:be:31:66:ef:31:cd:25:d7:5b:35:ad:3e:
4f:40:e5:03:a9:54:b0:c5:9b:f6:8e:76:75:c5:ea:
04:77:92:78:df:96:78:f7:4f:05:89:9f:7b:c9:41:
48:c5:eb:79:4d:63:56:89:8b:19:88:18:ea:50:c5:
17:15:70:b7:67:7a:27:ce:af:48:77:ef:64:b0:33:
5e:cc:41:91:08:f2:f2:9c:15:22:32:09:48:81:24:
8f:ef:d2:de:c6:86:80:bc:6a:b3:13:e2:f3:7f:a9:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:93:CF:41:E4:12:81:22:18:C6:04:29:04:AC:A0:20:26:D1:4C
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1e:16:b4:59:ad:3f:9d:92:c9:14:7f:63:30:9b:ae:0c:75:
6d:84:77:ec:23:54:be:0c:e7:b0:cf:46:09:36:22:c3:9d:4c:
15:0a:5f:84:1f:a5:0a:7b:3c:f2:e5:32:cd:d9:b8:cc:15:95:
10:f2:73:85:72:31:f4:fd:83:81:ba:4d:8e:8d:f3:3c:c8:53:
c4:03:3f:e4:94:19:21:8a:3d:e8:86:25:54:96:79:20:96:46:
0d:b3:6e:f0:91:8c:46:79:65:59:d2:df:0a:66:65:2c:3f:6a:
0f:f6:04:0a:e2:8d:62:c3:83:5d:c3:8a:30:d8:63:c3:72:06:
62:75:8b:81:1d:27:e3:6a:cb:eb:aa:a0:3b:82:e1:f9:b1:17:
8d:1e:80:af:af:79:4c:3e:a5:bd:46:66:6a:90:1a:11:47:f3:
ef:ae:78:94:30:70:db:40:36:5d:cf:a0:91:9b:a0:10:52:72:
4d:7a:3f:f7:7d:de:c1:25:07:34:59:eb:11:54:08:a1:7e:01:
cb:6f:fd:53:83:e6:2f:48:53:db:8a:d7:7e:66:b0:cf:78:a3:
e9:d5:00:08:67:60:ba:f5:eb:3a:99:c4:bb:7e:68:45:20:2e:
0b:b7:11:7c:92:a8:c5:eb:a9:90:95:80:0c:37:f4:95:6c:8e:
26:c3:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:01 2026 by rpki-client