Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: K2BCG6PdiiS2Hz56xNdV4vN6u8oi0YlUS5MsW3HmDbI=
Subject key identifier: 44:18:2E:A9:93:12:A4:67:32:3A:91:80:FD:56:12:69:18:01:E6:C1
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 019CAB344BAB5E45EBBDEFA50DC125B1DC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0DC6
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: XeNJ0/IjqFW0qsoPTeOqfB0//U4sFJtle61W5Q48Gs0=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4b:ab:5e:45:eb:bd:ef:a5:0d:c1:25:b1:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=44182ea99312a467323a9180fd5612691801e6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:be:ee:59:90:cb:3b:de:96:90:ce:c3:00:
d9:8b:a9:5e:01:43:17:25:c9:48:b2:26:19:88:8a:
ec:7b:40:31:df:dd:2b:01:59:21:34:00:d6:8e:bd:
6b:48:ad:0d:84:72:ad:eb:06:11:e7:db:0e:6d:c0:
95:4c:35:86:04:47:27:95:12:08:2c:4a:a2:8d:a0:
2e:90:9c:e9:a3:82:84:b0:c5:ba:8d:7d:1a:1d:89:
e8:43:62:7e:0a:b4:e3:87:cb:79:6c:b6:47:d9:6a:
7d:e4:60:84:09:7d:e6:7c:4a:4d:aa:29:6c:42:7d:
6b:eb:69:42:37:fa:f7:03:dd:99:72:10:4a:36:8a:
38:bf:49:33:de:b2:a1:99:d7:9c:f6:bc:65:00:e9:
b9:91:a4:c0:d9:3c:be:77:f7:95:2c:f5:81:6a:ba:
dd:5a:75:16:e0:f8:ec:07:ee:62:60:7e:c8:5a:db:
c8:1b:54:06:5e:37:30:6c:e8:97:38:85:24:2b:7e:
44:ac:33:c0:ee:d2:c2:b8:27:a9:0f:b4:dd:88:e4:
3a:9a:02:18:b2:fa:db:41:ec:05:91:99:fa:8d:a1:
fb:a7:92:04:11:14:60:0e:fe:3d:bf:fa:a4:29:86:
ba:fd:24:9f:6b:83:87:dc:15:af:9a:ba:47:d4:a7:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:2E:A9:93:12:A4:67:32:3A:91:80:FD:56:12:69:18:01:E6:C1
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:78:3e:66:e1:cc:5b:6a:6b:0c:7b:1d:cb:40:11:d5:a9:88:
47:dd:ea:77:49:a6:2f:22:7e:dd:9d:3b:75:58:ec:d6:76:99:
f9:4c:06:ad:e4:f0:0e:c2:98:09:14:95:26:f6:c1:80:79:0e:
8b:4f:a0:29:dd:f0:a4:3e:81:e9:f2:0c:48:00:a1:cd:3d:79:
4d:c6:09:dc:ad:58:1f:99:42:22:ff:3a:81:df:82:92:ef:be:
02:ec:8c:fd:e7:15:47:65:48:77:d3:a5:c0:8f:e9:76:8b:85:
6b:b0:7d:27:fd:71:57:5a:e6:92:4d:2d:e4:31:4c:31:b7:8d:
3d:ac:bc:08:7d:2a:39:f3:65:68:80:21:22:66:08:6a:7a:ba:
e4:58:08:d2:83:90:41:fc:9d:aa:c2:e1:bf:dd:5e:aa:80:18:
97:aa:d9:e0:fc:71:67:f0:b1:eb:97:01:b3:25:69:c3:c9:1d:
a8:65:d5:10:17:ec:98:23:08:3b:d7:c5:26:88:10:cf:4f:e8:
aa:7f:64:8b:4d:da:ad:33:ca:fc:30:8b:47:2a:d3:58:ea:3a:
68:46:fd:d8:b8:2b:51:13:f9:17:5f:1f:06:f9:b9:b7:45:b7:
07:97:0e:ad:25:95:6c:d6:c1:bb:bb:b2:84:77:a2:0a:16:ed:
cf:e0:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:16 2026 by rpki-client