Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: WXuG7RRhr30pryvO+NtxIty2oO6JIt7wVAwyUqfJ2m8=
Subject key identifier: FF:6C:39:0A:1F:60:47:41:E0:8E:A8:DD:4F:FC:79:15:3C:27:71:01
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019E1D230D2ECE5E11180DCC2A55216F0093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 016F
Signing time: Tue 12 May 2026 17:01:36 +0000
Manifest this update: Tue 12 May 2026 17:01:36 +0000
Manifest next update: Wed 13 May 2026 17:01:36 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: Gow43QpVzSx66GHe0vW97CG6DMQ03hMm3DWEk8+fOcc=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:0d:2e:ce:5e:11:18:0d:cc:2a:55:21:6f:00:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: May 12 17:01:36 2026 GMT
Not After : May 13 17:01:36 2026 GMT
Subject: CN=ff6c390a1f604741e08ea8dd4ffc79153c277101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:3f:56:99:ab:9b:7d:6e:84:b0:54:56:b8:
5f:25:e9:d2:d1:83:60:08:1f:2c:4f:50:a6:70:a7:
f1:eb:e9:b3:77:69:3a:9c:2c:bb:1f:cf:95:3c:d0:
9c:3a:0e:b5:7c:5b:c2:1f:80:ee:c1:fe:5b:12:68:
b2:26:43:1b:09:50:7a:d1:f6:03:ea:4b:03:fa:03:
85:a3:d1:a3:9e:cd:6c:cc:4b:65:73:8b:ab:fd:1c:
f7:f5:6c:05:06:bf:0d:85:c6:35:98:48:a1:ee:08:
4a:a3:ce:9c:c0:93:49:98:d8:9a:4b:f9:2a:81:a5:
91:a7:8a:3f:ee:b1:5e:72:3f:9b:56:b5:f5:e5:3b:
84:51:6b:fa:e4:4e:14:03:ab:81:a3:61:53:f6:61:
08:04:a5:58:a3:15:58:85:1e:f6:39:89:fa:4c:ac:
ca:70:c8:84:5f:a7:d7:d4:58:9b:61:a7:73:18:98:
30:6f:5a:2f:a1:c9:e7:b7:a7:60:54:7c:7a:1f:30:
72:3f:a0:6f:81:3e:12:d3:db:91:2e:0b:28:a7:06:
a7:15:ea:c8:e5:4d:66:7a:9a:14:63:b5:8e:2e:da:
44:f3:31:ad:d0:67:21:11:c7:80:1f:c4:ad:df:4e:
d6:09:b0:57:60:04:37:de:7d:1a:28:4a:24:ff:c9:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:39:0A:1F:60:47:41:E0:8E:A8:DD:4F:FC:79:15:3C:27:71:01
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:2b:0e:3c:36:f2:8f:bd:06:5e:eb:de:00:05:fe:6b:c8:
64:ba:b3:34:78:bd:d0:01:5a:a3:91:59:2c:bf:98:41:a0:25:
fe:92:a6:4c:3d:f2:c1:1f:ed:81:ee:30:a3:03:82:7f:9c:28:
07:a5:56:21:c2:7d:33:e1:11:f0:fa:26:98:24:3b:be:e1:a5:
04:4e:11:a2:67:c9:11:87:34:65:02:37:51:95:9e:e9:d2:b2:
39:6c:0c:4a:09:fb:67:77:81:83:fd:32:39:e2:79:98:f1:ad:
30:0c:37:9a:7c:fa:3a:a7:44:f1:11:a0:79:f8:da:7b:0d:e2:
29:c1:40:df:50:8f:3b:0c:00:59:19:4f:59:70:9c:bf:ed:e0:
ef:a5:05:f6:c0:a2:34:50:9b:61:c7:46:6a:4d:02:c4:e5:a6:
79:68:22:1d:de:a4:42:dc:cc:6d:15:69:9a:51:00:39:bf:a8:
a2:6f:a8:8b:d9:56:10:19:39:00:ba:03:39:76:8d:a6:86:b4:
f4:70:0e:9f:59:0b:13:a2:66:e3:2e:db:10:ad:53:b9:84:82:
66:f1:0f:f1:87:03:b0:36:24:dd:ce:ec:34:d6:81:73:ed:90:
4f:98:5d:f9:e6:9b:78:36:c1:a7:50:f4:83:88:08:56:57:00:
0b:34:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:48 2026 by rpki-client