Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: WbI0dGGbxe7Ak2JGDscNfZlYuuTBAGLinAU3rbMF6sY=
Subject key identifier: 4E:0F:F8:4F:8C:92:16:91:E1:D7:09:1A:B0:12:50:77:8E:89:0A:3E
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019F8FEBDB7AA2A9805A98AA4B2169E99CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 022F
Signing time: Thu 23 Jul 2026 17:00:26 +0000
Manifest this update: Thu 23 Jul 2026 17:00:26 +0000
Manifest next update: Fri 24 Jul 2026 17:00:26 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: mBAscFzACi0PYwLVARvVtHzahw3kBAnOTqVSseJZdvM=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:db:7a:a2:a9:80:5a:98:aa:4b:21:69:e9:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Jul 23 17:00:26 2026 GMT
Not After : Jul 24 17:00:26 2026 GMT
Subject: CN=4e0ff84f8c921691e1d7091ab01250778e890a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:0d:53:d0:f0:c6:71:0c:32:79:59:b7:17:
47:be:f7:63:65:0d:6f:03:d8:82:6c:4d:0b:a7:be:
48:db:b1:7d:26:d9:57:57:5a:5f:1f:1a:e5:86:34:
0a:8e:7c:57:70:0d:b2:8a:d5:79:f1:1e:98:51:b4:
b4:f7:90:65:8f:44:da:50:f6:39:6d:08:ad:8a:f4:
46:35:c1:97:f3:a0:69:ee:2a:a5:30:11:17:b8:2d:
38:b8:cc:aa:41:1e:49:2b:26:42:19:b1:96:b9:58:
6b:f8:0b:14:5e:ab:98:2f:c5:68:22:69:36:62:56:
9a:41:45:f2:6e:8a:12:d5:0e:88:0f:15:3f:d6:ec:
53:86:b7:c1:c8:91:3c:49:c4:82:64:d8:bd:f5:91:
62:c2:ef:7e:89:de:c9:d0:6b:4f:8c:2e:c3:52:28:
6e:5f:f8:cf:2d:e9:e9:a7:fa:8d:b4:18:c5:2a:35:
0a:89:5d:a7:00:da:79:d9:5d:f5:7f:71:24:94:06:
0a:ae:64:71:1f:b8:3f:b6:36:28:a4:e9:cc:41:ca:
0a:bc:bf:b6:22:da:06:23:06:72:c1:7d:d8:4c:52:
11:ee:6a:f3:d2:db:49:d5:dd:d7:b8:4e:aa:d1:05:
33:e2:b9:8f:7f:b3:a3:f9:87:3f:1f:64:98:50:15:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:F8:4F:8C:92:16:91:E1:D7:09:1A:B0:12:50:77:8E:89:0A:3E
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:85:ce:99:0f:d6:ec:69:64:b8:1c:18:3d:3c:69:15:50:
7a:19:60:f4:2a:a4:0d:37:cc:00:12:12:af:e0:2b:31:ea:98:
f7:05:8b:96:52:b1:ec:6d:25:45:10:82:dd:85:46:46:bc:a9:
59:8f:e3:39:ba:ea:34:55:16:3b:0c:f0:d2:dc:2f:61:28:0e:
6c:c8:d7:cd:58:32:0b:33:c6:71:96:4b:70:ee:a3:7f:a0:7a:
3d:92:4d:e4:14:5e:ee:c6:43:c9:e0:af:a0:51:fd:f9:3e:7d:
14:45:95:c1:80:25:dd:39:58:49:01:32:74:87:6b:b6:da:9d:
1b:d0:2d:ef:c1:56:8b:0a:20:1b:23:75:56:7b:03:cf:ba:c6:
c3:fc:4d:2b:67:24:46:ce:11:05:5e:ba:a7:e9:47:72:fb:ce:
37:31:c1:4e:a4:f2:02:19:c7:95:65:13:7f:4a:41:11:7a:d9:
b6:8b:a0:46:9e:d1:1a:8d:8c:31:78:34:69:28:bd:ae:7b:84:
42:5f:81:ff:53:d8:57:fe:0b:cf:d2:cd:33:99:9c:16:de:ed:
e7:7e:60:99:5b:7f:48:76:7c:ff:66:da:1e:d9:27:73:4a:33:
af:7f:2e:39:ad:20:6e:e1:10:43:c9:a9:5a:2a:17:80:f2:31:
c3:bd:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:38 2026 by rpki-client