Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: BJOiBQ84adQ3/XS9YDrTuho1EaFUifYJguS7MX9pe24=
Subject key identifier: C9:09:E5:D4:38:57:6D:41:12:5B:A3:00:7B:B2:A1:10:70:17:72:F7
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 01A126C30B7C915D96BB31E4C05098EBD215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 123F
Signing time: Sat 10 Oct 2026 17:01:18 +0000
Manifest this update: Sat 10 Oct 2026 17:01:18 +0000
Manifest next update: Sun 11 Oct 2026 17:01:18 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: sObekaZPXJFG3knP0yaR/x35LAT37kT+dKaApbN56Uw=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c3:0b:7c:91:5d:96:bb:31:e4:c0:50:98:eb:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Oct 10 17:01:18 2026 GMT
Not After : Oct 11 17:01:18 2026 GMT
Subject: CN=c909e5d438576d41125ba3007bb2a110701772f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:32:a3:09:39:30:26:8f:c1:0b:67:bf:87:
64:ac:08:f0:85:ee:43:27:2a:00:14:82:9e:e5:bc:
a4:a8:99:8c:50:76:a2:85:c6:bd:e1:8d:d6:c6:1c:
69:04:f3:9d:ee:d9:23:db:74:0c:83:ae:8b:a3:33:
49:b7:81:5b:5d:07:41:2d:84:2c:8d:f2:a1:e8:3e:
73:eb:5d:1d:ce:82:43:ac:8f:fb:12:d7:b9:a4:81:
70:d5:5f:2d:3f:fc:b5:6f:9b:74:42:17:d7:e8:91:
c2:14:33:23:50:a0:2d:b2:66:0e:ca:56:0c:81:3f:
98:a1:54:fe:02:e4:22:06:10:fc:d0:ad:c0:fe:58:
24:ae:23:0a:14:f4:20:ab:64:1b:48:34:a0:d8:eb:
3d:83:83:74:4a:b8:42:c9:4d:3f:96:07:fd:16:c1:
65:3d:9a:0b:32:f6:08:5a:31:3d:53:bd:7d:1f:be:
c3:fd:c5:8f:32:73:11:17:b0:02:12:12:15:0c:37:
37:2e:1d:3c:ce:8c:04:b1:e2:2d:bf:cc:a5:af:e6:
e6:4b:ef:7c:ab:a0:ab:d7:0b:b9:2a:bc:7f:5d:21:
d4:4d:cb:d4:22:b2:5b:ac:c9:53:12:98:2e:8e:44:
b6:a8:88:7b:34:f6:da:02:63:c8:91:0e:07:d7:0f:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:09:E5:D4:38:57:6D:41:12:5B:A3:00:7B:B2:A1:10:70:17:72:F7
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:73:3a:a2:d7:91:f4:6d:eb:7a:7a:95:dd:89:1c:7a:25:9a:
0b:cb:16:1a:da:ee:ad:4f:fd:71:39:b5:60:7c:1e:87:e4:b2:
e4:4a:97:37:5c:98:1e:4c:f8:89:f6:e6:cd:6f:53:8e:59:67:
71:84:78:ae:cf:76:ca:f4:c9:84:c3:8a:3f:a3:72:56:be:85:
1c:7d:cf:44:6d:e4:5d:dc:d5:99:19:80:1b:bf:d8:56:54:95:
31:b7:65:26:ee:d4:41:99:46:d8:ef:f4:a3:aa:fc:f2:59:4d:
e0:02:d1:a3:27:4e:b9:33:f4:21:2b:e5:6f:0b:93:c3:c4:0a:
99:a0:3c:6d:c4:ae:88:fb:29:86:ab:bd:be:8c:1c:d6:ea:21:
39:9b:54:8b:11:aa:80:84:a1:87:29:60:bc:8e:68:5b:92:3b:
e2:72:84:f8:23:89:38:06:1e:5f:17:ee:95:ed:a4:bd:6d:af:
05:25:ab:f5:21:79:7a:d6:ff:be:5d:05:da:91:b9:01:d2:67:
1f:af:32:09:f6:7b:46:67:d9:9f:57:3a:87:87:64:3e:03:86:
8c:18:72:17:46:93:38:66:50:1d:73:5c:a8:56:df:85:dd:5d:
5b:89:e2:14:08:10:92:c6:97:44:08:e1:3f:84:56:40:ee:cf:
1d:9f:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:35:21 2026 by rpki-client