Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: QlwlGasothkLEWoMUo0zgHA7WHO3FUy9r1Eer3/Hwc8=
Subject key identifier: 12:80:02:1F:43:83:C1:2D:BC:27:1B:24:63:6C:94:50:01:33:AF:41
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019E1E355960393A4AA499017AFA88A5BCE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 148B
Signing time: Tue 12 May 2026 22:01:13 +0000
Manifest this update: Tue 12 May 2026 22:01:13 +0000
Manifest next update: Wed 13 May 2026 22:01:13 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: ocT7l7mQ8KSKh3AnmGhvgK/8bqQ/jI/6JiCt31yiZQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:59:60:39:3a:4a:a4:99:01:7a:fa:88:a5:bc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: May 12 22:01:13 2026 GMT
Not After : May 13 22:01:13 2026 GMT
Subject: CN=1280021f4383c12dbc271b24636c94500133af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:a9:ab:ce:8d:9f:63:34:83:d0:9c:77:a0:
98:0a:ef:63:aa:cd:6b:17:5d:81:91:3a:8d:70:e1:
3c:0b:0b:60:19:25:ef:94:af:eb:42:ef:5e:07:07:
2e:05:d8:c6:ba:28:a6:28:8a:cc:3f:0c:3e:b7:d6:
52:2f:fd:df:25:e4:95:2b:56:f5:72:36:e9:d4:3e:
7d:81:28:0c:38:f9:ff:0d:c7:af:e0:83:5c:6b:bc:
bb:6b:65:6d:03:8d:16:71:e3:ba:90:43:f3:a6:f6:
1d:6e:21:b6:e4:2e:7e:57:de:9a:42:e6:14:60:23:
41:34:c5:4b:78:a8:ed:59:f7:2a:4e:64:89:b9:96:
3d:7e:aa:25:fb:cc:2b:14:8e:a3:56:ad:35:83:5d:
cd:66:87:b4:ab:db:50:f4:af:63:6c:0e:9b:9d:9c:
45:a4:c0:db:0f:90:ed:14:d5:48:e0:b5:58:c3:18:
e9:c7:5a:78:ae:9e:ad:68:29:3f:cd:a0:8b:2c:57:
0d:a2:a7:22:bc:2e:f6:79:51:33:60:06:3e:54:e9:
6e:51:66:56:99:7c:04:e6:ea:ec:04:0a:a1:90:af:
87:30:62:68:31:6d:b9:ab:4a:11:40:99:da:69:af:
1b:27:91:e2:79:18:c8:a8:49:83:4a:c9:a5:0c:83:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:02:1F:43:83:C1:2D:BC:27:1B:24:63:6C:94:50:01:33:AF:41
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:e1:ec:da:20:c9:c2:8c:c2:0b:4e:43:37:6f:1f:98:c9:
b9:c0:76:97:51:53:0f:11:77:e2:89:7f:a8:1b:3f:fe:23:ed:
9f:4f:39:ec:8e:19:fe:9d:0f:75:57:5a:67:c3:f6:f0:88:e7:
8e:30:da:19:09:63:16:16:62:b8:28:94:4e:81:b7:70:2d:67:
a6:17:2f:81:cc:4f:c1:a0:61:89:59:a0:61:f7:10:cf:f0:f2:
80:9f:9b:23:e7:d9:66:64:7b:d1:8d:4b:a5:39:d7:95:9d:8a:
2f:9a:ea:9e:4b:b1:12:df:e9:f4:ab:74:43:60:37:a6:cb:43:
1f:13:fc:31:d2:61:2e:cd:7b:fd:58:b1:3a:45:08:69:8d:66:
4f:0a:6d:b1:62:65:3f:8b:d1:9c:38:34:48:7d:bd:5d:b0:6b:
a6:e1:2a:78:60:cb:5a:26:d9:54:d0:a3:b6:60:11:13:04:f2:
2d:0a:90:24:0e:47:05:a3:b8:2e:cd:69:f2:cc:23:70:3a:38:
23:eb:fb:93:91:4e:df:23:f6:59:f3:c1:ae:00:e1:c6:4b:f0:
af:61:63:33:26:35:ff:94:44:1d:12:bf:51:11:7c:02:1d:1c:
cf:e9:1a:25:d3:99:76:89:02:16:8b:a0:dd:31:c9:a1:88:35:
ff:ca:5e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:35 2026 by rpki-client