Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: yKumSV4L/ZYCRHVxKjlD1EYP+4re/M7t+XGGWdIgjDM=
Subject key identifier: 23:78:05:F1:51:05:C8:0D:A8:E2:D0:33:2A:37:EA:13:0C:A3:76:BE
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019EBE7FA1C6A9FB001BC1C10152FEDFE38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 14DE
Signing time: Sat 13 Jun 2026 01:01:35 +0000
Manifest this update: Sat 13 Jun 2026 01:01:35 +0000
Manifest next update: Sun 14 Jun 2026 01:01:35 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: f17yPjULvIo/5ZbaNMZg43ODhZzwZJ+TvEIktENmEaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a1:c6:a9:fb:00:1b:c1:c1:01:52:fe:df:e3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Jun 13 01:01:35 2026 GMT
Not After : Jun 14 01:01:35 2026 GMT
Subject: CN=237805f15105c80da8e2d0332a37ea130ca376be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:e2:99:7b:ef:53:d6:45:f8:fb:26:d0:d5:
d8:a0:ff:32:21:77:2e:f2:8d:54:0a:a3:2c:80:ce:
ae:d7:c3:8e:8e:7b:93:87:9d:28:0d:24:42:34:db:
14:97:a8:17:03:b7:e4:ad:e4:d2:49:13:b7:61:c1:
35:d8:69:0e:dc:4a:e4:83:a5:a3:ab:c8:71:61:e8:
b9:39:6a:96:a3:dd:ff:e8:e4:16:ca:02:db:93:58:
3d:92:12:04:e1:3f:e3:a0:2c:17:64:f7:a7:c8:6b:
84:f2:02:ff:78:ad:88:21:41:e4:a8:1c:b8:26:93:
6a:e0:77:3c:c5:8f:a8:36:ef:d8:c4:05:f9:18:d1:
f4:a9:e5:81:ea:7d:20:ad:b8:67:05:4f:7a:6c:d7:
3f:57:b8:ef:59:1b:26:8c:77:24:6e:eb:50:b8:58:
fa:e8:cb:58:3e:66:23:aa:4b:90:7d:4c:be:8b:0a:
2e:43:93:20:55:06:2f:48:be:a9:87:a4:6a:a8:20:
f7:be:6c:11:6e:e8:08:ee:51:ba:6e:2a:d9:0b:4f:
c8:1d:c3:1b:c9:d3:78:66:6f:c0:7f:0c:8f:31:10:
57:34:03:d6:f7:eb:cd:28:7a:60:03:e1:50:9c:95:
51:70:c3:bb:90:ca:5f:8b:9f:57:ff:c2:6b:d3:9a:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:05:F1:51:05:C8:0D:A8:E2:D0:33:2A:37:EA:13:0C:A3:76:BE
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:54:74:c4:1b:32:42:c5:74:6d:9f:29:f6:c4:8f:fc:e4:2f:
62:1a:ae:e0:e6:4c:6e:f4:ef:af:c3:d7:70:14:18:68:6c:21:
eb:4b:f3:63:e7:7c:98:50:18:bf:90:94:f2:d0:e4:ba:8d:ab:
8a:b6:1c:fd:24:4d:f5:32:c0:e4:25:6b:84:71:c3:d5:66:11:
39:f7:55:fe:8a:85:83:0c:3f:46:02:55:0f:30:dd:ce:be:c3:
8a:8a:da:43:be:6f:0e:a5:40:5d:19:73:40:40:44:57:05:3c:
03:03:0e:2f:f9:22:80:75:0d:8d:eb:17:a4:0d:03:b9:14:c4:
2f:0a:77:98:60:41:a7:98:27:aa:be:b6:03:da:5b:a3:76:67:
a0:e0:8d:90:de:63:da:4b:f7:c3:5b:75:4a:da:0a:e7:22:bf:
b9:2f:50:da:97:ce:d3:6f:d9:42:51:43:9e:2e:96:22:c8:57:
f4:c4:05:97:ef:f4:7d:63:79:a8:50:47:54:50:1a:60:8a:11:
a6:eb:c1:6d:78:be:17:42:fb:22:41:5b:e6:7a:61:1d:9d:aa:
78:67:bc:82:da:7e:08:e1:15:0c:f8:bd:a5:96:f9:da:95:2b:
92:47:7c:85:78:fd:e6:bb:af:48:a9:6c:0a:37:76:42:5b:c9:
27:06:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:36 2026 by rpki-client