Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: ndpL67AaqV35quGqFKUmRs/PEOyYF2/rlFukHzXyi1Q=
Subject key identifier: C2:7B:91:6F:02:15:B9:E2:77:14:AD:CA:5D:EE:D0:1B:05:0A:36:32
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019D265F583166A4FD7EF965B86C4CFC196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: EF
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: AWZtSY0ho8Htds5N8suBAoFqGCQArHg0CjTEhKQaAAY=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa (hash: ZStz8VWjv9JWorKywmlp8CUIrtYl6f6S3mkhtfoiopc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:58:31:66:a4:fd:7e:f9:65:b8:6c:4c:fc:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=c27b916f0215b9e27714adca5deed01b050a3632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:41:42:37:36:5e:4d:1a:64:09:ca:d7:63:
08:fd:44:b5:a6:e5:d5:a7:0c:3a:b9:f4:91:97:ea:
a9:aa:27:26:90:20:99:10:62:88:82:5f:7e:46:fd:
9e:64:a6:89:51:bb:5d:d1:a2:02:00:11:fd:06:5f:
71:cd:bf:5b:02:86:8d:3b:cb:63:9c:b5:59:38:a1:
af:dd:c7:5a:15:77:ee:0e:e8:38:ae:9e:da:6e:b3:
97:9d:6b:cc:bd:c6:c5:fd:25:16:b5:27:96:91:c4:
0b:7b:b4:3f:07:df:09:42:76:7f:c6:a0:73:f5:f9:
2a:e9:09:ca:e4:bc:b1:5e:64:63:f9:5e:c4:32:34:
64:1d:43:73:b4:39:8b:04:08:d9:9f:97:3b:76:bf:
13:b9:ff:04:84:5e:cf:fc:85:1d:22:96:97:58:c9:
19:35:d7:92:f9:70:f8:49:01:04:3a:fc:d8:0d:b6:
d0:ce:f9:69:93:83:6e:08:3a:d7:f4:6d:66:73:15:
8b:f2:0f:b2:d9:f7:5d:0f:a1:f9:d6:81:5d:41:6b:
c5:ba:5a:65:bf:a5:26:e6:0a:39:63:85:0a:16:08:
28:dc:b3:cc:cb:a2:43:da:9d:19:33:05:cf:ee:5d:
a0:d0:f7:3e:1d:ac:ee:44:d6:53:de:7c:05:cf:10:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:91:6F:02:15:B9:E2:77:14:AD:CA:5D:EE:D0:1B:05:0A:36:32
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:58:e0:00:d0:bf:ab:00:68:f3:8c:e0:19:31:0d:91:90:c1:
80:a0:01:18:3e:69:25:89:2e:29:c7:81:81:17:13:ca:02:07:
8f:63:c0:ee:56:eb:cf:da:92:fb:34:dc:e6:63:1a:a3:33:0c:
fb:8e:dc:ad:37:f2:da:68:27:9f:64:67:69:bb:50:bf:2c:11:
ac:9c:d1:d3:5f:c5:f7:cf:c6:09:e3:58:4d:77:c8:c4:73:02:
a5:0a:c3:22:d2:13:b1:6b:51:be:e3:d0:2a:89:68:8d:21:7d:
26:28:8b:b3:ec:31:9f:ff:42:a2:2f:94:a7:09:fb:39:3f:94:
e9:5b:9f:10:84:ac:02:2d:60:0a:68:0b:8d:30:fc:36:95:60:
1f:ee:d7:c0:04:af:6a:68:ff:bf:c0:c4:da:94:98:72:55:aa:
28:31:c0:97:ee:cd:95:5a:af:09:1b:e1:fe:c3:9a:5e:7e:4f:
d9:77:e8:ed:7c:f4:ea:de:17:bf:09:26:7c:3f:af:c5:97:50:
de:b8:27:02:0e:f9:20:10:ea:45:00:2e:5c:52:8d:b1:80:d8:
06:f6:b6:9b:7d:7a:1e:ed:35:29:d8:03:55:41:27:6a:e2:7c:
bf:98:db:b8:27:0c:97:fb:96:92:f2:c1:35:5f:88:69:e7:97:
7c:c0:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:16 2026 by rpki-client