Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: Jtf8Vvq2bEePnC4aH0bwAaWKrWOu9C0xjzzhTSGAjuY=
Subject key identifier: 93:A1:FE:66:C3:B3:70:3E:4B:70:78:8F:7E:1A:70:D3:11:3D:5C:BD
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019DA3E6BDB60EB0D0CBBB5384608E7D4312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 13E7
Signing time: Sun 19 Apr 2026 04:01:41 +0000
Manifest this update: Sun 19 Apr 2026 04:01:41 +0000
Manifest next update: Mon 20 Apr 2026 04:01:41 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: bSDE83AOKQR2sykvii34ilkMiNKMTgnN356rxUgv3q4=)
2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:bd:b6:0e:b0:d0:cb:bb:53:84:60:8e:7d:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Apr 19 04:01:41 2026 GMT
Not After : Apr 20 04:01:41 2026 GMT
Subject: CN=93a1fe66c3b3703e4b70788f7e1a70d3113d5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:2f:37:97:c8:58:22:35:89:81:67:4a:43:
cb:63:74:96:c1:61:24:87:62:1e:fd:09:91:3f:7f:
83:dc:72:ae:66:1f:8a:3c:39:ac:95:82:07:7f:c0:
10:1f:c8:b1:89:0d:98:64:bc:51:da:81:80:c3:b4:
46:a8:7c:69:fb:f0:65:4c:5d:91:15:40:24:53:14:
74:eb:45:37:f4:d5:2a:f6:9a:37:8d:56:08:af:b3:
91:5f:c8:c4:36:5a:b9:c3:ed:ac:8a:0c:24:d4:78:
7f:b0:30:a6:cd:4f:52:81:1a:24:95:fc:e5:f7:3a:
f5:c7:05:4d:cd:03:49:98:a1:7e:40:d0:75:fd:94:
13:95:3f:87:9e:eb:d1:35:b5:82:1e:1a:40:d7:60:
77:67:10:3b:7c:48:12:30:1f:10:c7:1a:48:04:00:
79:3a:77:ac:54:c0:93:28:ad:9a:a4:d5:d4:84:28:
12:ab:b4:02:6c:f3:ea:22:ff:5d:58:52:0f:ee:76:
92:ea:fc:a8:2e:15:34:e0:8a:67:f4:2c:15:4b:4b:
d8:5a:f5:6e:31:fd:4b:bf:1d:30:d5:52:5a:b6:b4:
9a:8e:54:fa:9f:dc:ca:47:d0:db:0d:4a:13:88:23:
0d:10:42:cf:db:8c:01:f2:26:b8:e4:13:b1:04:ee:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:FE:66:C3:B3:70:3E:4B:70:78:8F:7E:1A:70:D3:11:3D:5C:BD
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:3b:36:9e:d8:9c:20:87:77:13:51:8d:08:5c:f2:e1:99:
47:59:01:cd:28:10:38:c0:ee:1c:90:1c:ec:2d:9e:48:c9:0d:
bb:df:14:ed:8b:4a:9a:f3:16:ec:e0:bc:ce:1e:7f:12:26:41:
7c:59:fc:94:dd:60:ad:0a:06:aa:3e:d2:91:dd:70:12:e1:0e:
2f:84:a6:25:3c:46:f5:27:9c:1f:13:b5:61:4e:ea:2d:4b:cd:
63:4f:91:de:d7:dc:83:bd:75:c0:00:b8:7d:2b:cf:fa:d3:50:
4a:ad:a1:f9:42:ce:12:e1:6a:39:5e:d2:8a:9d:d0:30:ed:d8:
7a:8f:74:e4:e7:4a:7d:83:50:8c:69:21:17:20:32:73:c2:10:
21:c2:f5:9c:ed:1d:da:4a:eb:1d:03:d9:fb:8a:17:3e:95:d8:
10:2f:5f:ab:54:87:5c:02:3a:5e:0f:a0:a7:9b:5c:50:9c:9e:
76:09:c3:8c:eb:bc:5e:94:cb:51:a0:69:25:c0:ce:e5:16:81:
87:6d:b6:d9:bf:a0:09:97:c2:b9:4d:47:43:6a:af:f5:bd:96:
c0:5c:aa:ae:77:47:3e:31:47:b1:1d:5a:2c:29:10:2e:53:70:
95:f0:72:66:14:de:0f:0d:35:dd:44:61:65:a4:e8:3e:ac:32:
95:a8:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:11 2026 by rpki-client