Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: 3Saf985OV2mktr+4aFDUogfpRCrHBHogs8v+zFOcY+A=
Subject key identifier: E3:85:30:1D:7A:39:00:BB:EB:E7:22:85:AE:61:7B:A5:65:43:56:91
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 019CAB6AF90EB4F7A4EB77F8CC574A5CB5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:40 +0000
Manifest this update: Sun 01 Mar 2026 22:00:40 +0000
Manifest next update: Mon 02 Mar 2026 22:00:40 +0000
Files and hashes: 1: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: L4ubC79N9NURy3rcxP1+fHzi12tICukeKZGihtiPjIw=)
2: uNbww_4X227rN9_mg3C05wsDyrM.roa (hash: SaALn4Jzzbpi+nDn2cyiq7RyWC5Gh9LXGatywgfKmRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f9:0e:b4:f7:a4:eb:77:f8:cc:57:4a:5c:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Mar 1 22:00:40 2026 GMT
Not After : Mar 2 22:00:40 2026 GMT
Subject: CN=e385301d7a3900bbebe72285ae617ba565435691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:cc:51:84:d3:24:be:e2:a7:2c:ee:4f:50:
fb:e7:1b:5f:7b:8d:cf:c3:0a:0f:07:2c:41:f0:53:
2c:9b:98:64:7b:42:ee:a5:2b:25:30:04:84:8e:69:
34:dd:76:7a:bf:67:e1:3b:e1:41:8b:01:3e:14:46:
99:91:77:67:7d:3e:29:97:70:7a:c8:af:86:5d:d8:
72:3f:79:1e:4d:3d:1f:26:52:73:e2:7b:ba:2d:1c:
af:32:db:5f:81:3c:b2:a8:8b:12:a2:a0:19:0c:79:
84:97:2d:25:c2:a6:54:04:ec:40:d7:b0:8c:6f:ac:
50:9b:bd:46:ca:3e:9a:ce:6a:63:58:b9:02:8e:1a:
c1:6f:a4:9a:a5:30:d9:7f:5b:54:50:a3:25:e9:31:
0f:0c:54:20:5b:b3:77:50:ad:14:5f:1f:bf:40:94:
99:e9:ed:88:25:69:4f:fe:ea:9e:ac:29:ba:26:4e:
fd:61:92:d5:8e:a9:4c:f0:25:55:14:a1:f7:99:fb:
d7:38:ca:06:5f:f5:0c:ff:43:5c:01:ec:82:9c:53:
e7:cd:72:4a:8b:81:c4:4e:dc:83:d5:aa:ba:15:7b:
ae:dc:66:6c:87:ba:25:49:2e:da:8f:0f:f4:3f:13:
b9:12:04:66:58:92:fe:1d:f8:66:fd:de:64:6b:80:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:30:1D:7A:39:00:BB:EB:E7:22:85:AE:61:7B:A5:65:43:56:91
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:08:c3:f5:7d:46:e1:90:b5:a5:49:98:5a:3b:01:89:a4:9f:
36:05:a2:e8:d6:9d:c6:42:cd:d8:70:36:6b:40:91:48:51:e6:
93:6d:96:9b:6b:17:82:65:88:dd:da:b6:b2:09:5a:aa:c8:29:
f3:99:1e:df:6e:6e:31:35:5e:6e:22:07:a9:1b:6c:3a:41:ba:
a5:0b:ed:44:f5:93:76:35:a4:fa:fd:c2:f6:f3:13:ad:85:fb:
fa:bc:59:99:90:97:d8:ff:65:fb:10:ac:f0:02:25:53:e1:ae:
0f:e2:10:c3:4a:a1:96:da:fa:f4:41:3b:2f:c7:ff:a3:07:85:
ab:f2:73:55:d2:a3:5a:0a:1e:e4:1a:74:47:30:74:10:f6:78:
84:d6:1b:b2:9c:d2:b1:ff:b3:21:df:3f:f8:aa:92:43:4c:0a:
a6:0b:94:9d:78:07:c7:de:ce:a6:97:a8:f0:0c:ed:04:0b:98:
82:f0:11:fb:fb:28:73:5e:34:cf:0e:5d:05:9b:9b:3f:80:a1:
1d:70:b2:0a:3d:e9:a7:30:7b:d2:c5:f9:66:ed:ab:54:ee:9a:
53:62:bf:23:83:59:aa:8d:ed:44:73:2e:8c:5d:1f:8f:37:ee:
e9:d5:5f:0a:47:e0:13:47:76:a2:b5:f2:ea:1c:51:e6:21:c7:
3b:cb:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:57 2026 by rpki-client