Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File: 0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier: vq+J2ImvTdmZ/8VdhhCoTakagYx0zthVyaH7ZvKmsmA=
Subject key identifier: AE:0A:A4:5D:68:49:2C:4B:79:A6:12:5C:F1:3B:22:45:4C:F1:4F:AA
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01A0C3D6E0EF9A621EA650A9C5E8D16F5515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number: 0FE5
Signing time: Mon 21 Sep 2026 12:00:34 +0000
Manifest this update: Mon 21 Sep 2026 12:00:34 +0000
Manifest next update: Tue 22 Sep 2026 12:00:34 +0000
Files and hashes: 1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: N8KIp7l3fauW20cMMjsozi3HRereHe+AfaIQ6W4EBqs=)
2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e0:ef:9a:62:1e:a6:50:a9:c5:e8:d1:6f:55:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Sep 21 12:00:34 2026 GMT
Not After : Sep 22 12:00:34 2026 GMT
Subject: CN=ae0aa45d68492c4b79a6125cf13b22454cf14faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:26:d0:25:24:e3:8c:23:da:1d:78:b5:ed:
d6:df:61:2c:24:31:c0:79:dc:a8:2e:8a:b7:8d:f9:
3b:b8:d9:fd:f1:12:c3:b9:82:19:9e:9c:a4:bc:cd:
97:e8:16:83:f8:11:1e:43:82:fc:a5:f5:bc:9d:f8:
c4:d3:10:31:55:73:0d:c4:99:7c:4d:5b:71:d8:d9:
b4:dc:68:49:f5:c3:50:80:59:5a:10:eb:2e:ae:fd:
b9:ae:f1:4c:af:ea:fc:2c:13:71:31:c3:2f:1b:c7:
57:d9:f6:4c:00:f6:ff:32:91:3a:56:c3:93:d6:34:
71:ed:9f:6b:54:e9:4e:29:c0:35:23:69:5e:bc:19:
3e:e6:d9:86:69:98:07:07:4e:55:5d:54:cd:b5:eb:
07:cd:cb:d0:1e:ca:21:70:e6:8f:39:c2:85:84:b6:
57:24:dc:00:44:84:09:ef:ba:fb:40:d7:ad:86:7a:
eb:3f:08:0f:97:84:3d:ec:fb:90:50:36:65:4c:2e:
62:b2:46:e8:fd:17:32:9d:69:9a:9a:83:67:e7:a8:
bd:94:c9:ce:b1:86:da:17:a3:60:ad:7a:eb:66:16:
98:cc:5a:d0:c9:d9:5f:c2:08:17:9e:79:36:1a:37:
6b:bc:18:c2:74:96:1c:f0:fc:63:65:0a:e3:6f:55:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:A4:5D:68:49:2C:4B:79:A6:12:5C:F1:3B:22:45:4C:F1:4F:AA
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d9:c9:6a:ca:1a:b8:a5:56:32:cf:b7:fd:59:5e:2d:86:93:
13:9c:db:f8:ee:76:d0:67:e9:cd:ec:81:53:9c:c9:cd:90:66:
b0:19:64:3a:6f:c5:4a:19:e7:4d:ca:9d:93:8f:cc:05:39:ba:
79:ae:12:15:2e:62:6c:41:b4:ea:53:d6:47:1c:cd:76:6d:3e:
d9:f5:f1:38:18:7e:66:b4:68:4f:f3:e8:0e:ff:6d:47:c3:14:
ac:9d:76:88:df:28:ec:54:66:d1:41:f3:d6:43:65:89:09:16:
25:d6:10:c2:54:bd:ef:72:6e:4e:07:2b:7a:48:4a:8d:a7:67:
8c:7e:51:31:8c:42:18:52:c8:49:17:3b:81:13:64:3a:08:66:
ef:28:43:9f:a8:1d:25:83:11:1f:cf:55:88:92:7c:e8:7d:1e:
4d:bd:88:4a:77:ae:b8:17:7f:89:e0:dd:b2:8c:51:7a:22:69:
31:5a:b4:60:05:08:60:19:dd:5f:21:60:a5:2a:04:9c:a3:d8:
50:8c:57:3c:85:0a:3b:4e:1c:6b:bb:d5:e7:23:1c:71:31:df:
bc:ef:7a:b8:dd:b0:26:77:04:91:9b:d9:77:00:c4:27:61:5d:
cc:22:18:13:09:e1:d4:d5:ea:ec:ec:a5:ee:56:ad:78:ca:23:
40:7c:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:46 2026 by rpki-client