Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: R7Ucv/y2nTgoaDt7mGtwRcYxYu3ALo7q9MyCV5CUibc=
Subject key identifier: 39:D7:A1:25:AD:11:E2:F7:33:59:9C:B7:0C:9E:1E:5A:25:9D:81:24
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019D2AE0ADFF7E5664113AC4343D96AF56A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 140D
Signing time: Thu 26 Mar 2026 16:01:00 +0000
Manifest this update: Thu 26 Mar 2026 16:01:00 +0000
Manifest next update: Fri 27 Mar 2026 16:01:00 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: YfWObLJPLG/Pv73av23GQRpe2QhMHLOGtoU3Lkt9uSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ad:ff:7e:56:64:11:3a:c4:34:3d:96:af:56:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Mar 26 16:01:00 2026 GMT
Not After : Mar 27 16:01:00 2026 GMT
Subject: CN=39d7a125ad11e2f733599cb70c9e1e5a259d8124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:02:ce:49:9a:75:70:dd:37:ba:aa:00:de:
6d:dd:f1:d9:f0:4d:a3:7f:dd:5a:87:f0:98:67:49:
9b:30:45:08:6c:c0:24:7e:22:05:4d:c6:f7:4b:03:
f0:fb:3b:fe:c9:f9:9d:48:89:19:19:d5:9a:09:05:
68:c9:c1:44:b7:4f:9b:6f:d7:b4:58:86:80:e3:9d:
22:28:ef:6c:44:d4:ef:6a:75:5f:aa:95:89:bb:08:
e4:ce:3c:15:37:d6:72:e8:c0:10:c5:6d:0b:88:d2:
72:01:0f:14:b1:99:7e:70:b2:98:33:92:29:e8:96:
07:07:10:dc:1f:e4:4a:a9:ab:1e:e1:ff:18:b5:76:
10:41:5f:ac:e3:3c:93:86:84:83:ed:3d:34:ee:b4:
d3:97:5f:56:ef:3a:e2:07:df:fa:3f:6d:1c:31:3c:
a6:8b:1a:f0:c7:11:44:f4:e5:7d:fc:ee:4d:09:62:
b6:70:e1:11:f3:a9:eb:48:19:7f:c8:30:a7:d2:c9:
98:0d:3a:ea:f2:75:f6:8a:63:1e:98:72:f2:3e:d4:
54:42:54:33:f7:8e:c2:df:c5:fa:36:8a:cb:15:d3:
3f:f1:e5:24:93:34:78:58:dc:d1:99:2b:af:17:08:
7f:5b:fd:12:d7:4f:3a:12:f4:0a:56:5e:ce:1c:63:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:A1:25:AD:11:E2:F7:33:59:9C:B7:0C:9E:1E:5A:25:9D:81:24
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:de:18:57:4b:ed:b4:ed:5a:48:2f:ee:7f:82:c0:30:d9:78:
91:3f:ff:fc:12:f0:9e:39:00:e2:07:69:2e:a3:12:63:3e:5a:
84:3b:ee:26:dd:d1:93:62:1c:ca:28:58:3c:6e:5d:db:37:40:
25:e9:da:83:f7:7c:d3:71:73:f5:60:d4:7b:e1:40:59:df:91:
27:6d:8b:c0:f4:3e:cb:e7:e2:2c:af:ad:eb:a2:b7:cb:20:e3:
25:ec:50:d1:34:1d:e7:98:a8:29:60:b7:18:99:2d:3c:d6:70:
2f:6d:b4:44:64:a7:0a:cb:f1:f5:f9:ee:e5:34:16:3a:28:7c:
bd:f0:d3:fa:37:88:b3:cb:35:25:0a:b4:56:f6:d5:0c:72:fd:
e6:8d:5b:fd:ad:52:94:ee:ad:e9:8f:5c:69:49:de:9c:d0:54:
97:15:6d:82:bc:0e:2a:38:ff:e2:81:10:a9:f9:58:d2:36:8f:
43:16:e4:b6:fc:05:41:7d:e5:71:a0:97:40:07:f6:e0:19:bd:
41:a4:e1:53:c8:9f:8b:cc:ce:62:b3:10:48:7d:1d:14:7b:fe:
db:00:24:7c:f0:0c:c5:70:8f:bd:37:44:6c:48:3c:46:39:8f:
15:50:67:8d:c9:c8:cb:c8:19:37:d2:47:72:4f:e9:78:ed:7a:
12:0e:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:41 2026 by rpki-client