Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: n+cdz2zeiqB0L8wUxjOa4edIBbCHQD+bZsDjSISO8Z4=
Subject key identifier: B7:11:E3:69:7E:0D:DD:28:3E:93:52:CD:8A:E4:A1:F8:63:C5:14:04
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019F90FF14BF871553CED552DC83B73D733E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 154B
Signing time: Thu 23 Jul 2026 22:01:03 +0000
Manifest this update: Thu 23 Jul 2026 22:01:03 +0000
Manifest next update: Fri 24 Jul 2026 22:01:03 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: ab9pKSyj8Kjz6MJ/z5NjXyGgnBnw/xpRtWTjHxmPxmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:14:bf:87:15:53:ce:d5:52:dc:83:b7:3d:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Jul 23 22:01:03 2026 GMT
Not After : Jul 24 22:01:03 2026 GMT
Subject: CN=b711e3697e0ddd283e9352cd8ae4a1f863c51404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:48:bb:43:f6:6f:49:e1:92:71:8e:bf:bc:
25:b1:83:59:24:39:6d:bd:54:d7:b3:55:d6:39:1e:
36:0e:99:1d:2c:a9:38:42:f4:27:7d:35:22:90:a4:
a6:9d:f5:2c:b7:29:b2:a5:39:b2:2e:4f:01:50:74:
7e:5c:3a:a2:c5:f6:a1:af:89:dc:55:47:aa:84:11:
13:2d:52:22:57:a2:6e:be:06:ac:b9:45:78:1d:da:
5b:88:2a:2d:52:21:2e:17:30:ac:ad:9d:26:56:04:
4f:35:46:d8:ea:f8:2f:f5:07:8a:cf:46:a6:60:e6:
5b:15:80:4b:cb:84:3a:2b:9e:98:e0:a1:53:ce:0b:
90:54:e8:1d:53:ea:11:54:b5:30:d7:c2:ec:7f:f2:
d8:4a:29:34:29:54:c6:cd:f1:aa:df:89:15:e5:4a:
d3:4e:11:4f:66:80:5a:41:68:e9:db:83:48:de:4e:
db:6d:c3:3d:00:2a:5c:d7:7d:16:a2:e1:db:ad:f7:
4e:0b:58:7d:62:1c:7f:8d:40:ab:24:52:ae:4a:c4:
f3:f5:82:ef:48:a0:ec:3e:3d:54:5a:c2:94:af:49:
8d:4e:7b:7d:3f:08:29:6e:ad:58:22:6f:08:ba:27:
d6:2b:9d:38:60:dc:e9:13:77:42:a7:d0:51:9f:e0:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:E3:69:7E:0D:DD:28:3E:93:52:CD:8A:E4:A1:F8:63:C5:14:04
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:05:70:6a:90:8a:50:5b:a8:ee:c9:0d:d8:14:36:d3:f1:70:
19:11:d5:f5:68:e1:cc:df:b0:3a:78:37:e1:75:3d:60:61:b4:
f8:36:50:9e:07:95:6f:49:ab:80:23:6b:d5:96:5c:d0:50:2f:
b5:60:c0:bb:3c:a3:cd:b5:cc:46:6e:76:e4:b3:ea:19:72:06:
f9:da:8c:8c:15:2b:fa:8e:a2:25:92:03:b6:1d:82:de:d0:f5:
10:ba:89:f9:7a:c7:e8:6f:74:5c:8c:56:28:74:4b:f9:ba:15:
4d:1f:e8:ce:0c:ec:57:b5:96:19:aa:19:7f:3f:a8:e7:90:be:
37:33:f7:f9:ee:09:7b:7c:df:7d:5c:d2:36:e8:ea:49:e0:b5:
3c:6d:49:86:11:15:8f:c8:c9:58:fc:55:b5:57:15:24:da:05:
42:b3:44:60:73:43:62:2c:96:4e:2b:93:b4:99:28:a0:ac:84:
12:2b:de:13:a4:d3:a4:ba:17:fa:4c:8f:bf:01:df:89:c2:96:
28:05:3c:66:fa:69:38:4a:42:33:05:5c:c5:37:b6:4d:17:b3:
a0:f8:a9:c9:f1:66:f9:3f:ad:7b:05:56:7e:3e:d7:28:91:6d:
57:3b:b9:fc:b6:e8:10:cf:78:21:3c:fb:40:ed:ac:a2:e1:55:
f7:d1:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:16 2026 by rpki-client