Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: JoVeutaiFsakpTBHLCdjQ+9nniylMvuZrtQ0D/mxZ90=
Subject key identifier: E9:A5:5D:F9:E7:E7:2D:4E:F9:4B:6D:E2:37:70:00:14:44:B1:BA:AA
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019CAB6B397DDC9AE3720435B26FF152BAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 13CB
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: JvxQz4VlvXezl1+hC7h15vj4uNBFxnhE/17sjeyf7as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:39:7d:dc:9a:e3:72:04:35:b2:6f:f1:52:ba:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=e9a55df9e7e72d4ef94b6de23770001444b1baaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:db:56:f4:ca:e7:23:ee:94:f3:d2:1f:cd:
5b:37:98:bb:08:9e:9c:42:45:88:b7:5c:9b:b0:44:
05:ac:34:bd:e2:99:c6:02:f3:8e:ae:5e:e9:c8:94:
1b:60:1d:5e:7d:80:5c:76:81:9d:68:87:01:a8:71:
50:16:ef:ee:68:ed:46:1a:48:c4:8d:e4:a4:a3:fe:
08:d7:41:77:69:ce:be:5c:95:d9:f0:84:f7:63:e9:
f9:cd:df:45:eb:e7:61:d8:f5:80:9e:35:e8:fa:88:
32:c2:9c:d8:37:30:22:33:89:fc:a0:b0:7e:32:8e:
47:1e:0e:40:58:31:6c:cb:77:a9:69:90:81:90:d3:
c8:08:d1:e0:41:4b:fd:96:5a:9d:57:b9:7b:57:8f:
77:d5:d6:94:4e:b2:44:c1:65:d9:79:c2:62:84:78:
cc:ac:4a:2c:c8:e0:70:e1:52:c4:2d:0f:27:05:05:
ad:7a:1f:27:6f:10:85:19:3c:dc:99:09:a3:54:10:
98:7e:bd:68:ad:c6:eb:a8:40:77:33:de:7c:e0:b1:
34:4e:95:22:e4:fb:5b:47:05:0b:fb:db:ad:14:96:
0f:cf:78:8c:c5:23:83:6e:c2:17:4e:3f:49:73:e6:
f6:72:7c:3f:b4:a4:9d:2a:d6:93:eb:fa:34:a1:4f:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:5D:F9:E7:E7:2D:4E:F9:4B:6D:E2:37:70:00:14:44:B1:BA:AA
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:96:c6:a6:0b:78:2b:64:71:83:79:2f:00:b6:83:45:05:
80:d9:1c:29:b2:87:82:b7:f7:d7:ee:ca:8b:41:d9:69:08:e5:
2c:cf:3f:0e:9f:20:a3:e5:f1:0b:1e:46:96:72:04:9c:e2:a9:
bf:ae:80:cc:11:60:2b:13:e5:d6:63:2e:b7:b2:20:08:13:9a:
df:35:d1:d3:a6:44:a2:8a:10:04:e5:4e:9e:40:e2:ef:7f:23:
63:18:45:54:c6:2f:b0:0a:9a:bd:21:1a:8b:39:56:04:2c:20:
3a:24:2e:df:dd:1c:35:3c:c8:fe:8d:87:41:0f:99:9f:dd:f6:
b3:e2:43:44:d0:0b:e5:06:25:49:01:95:5d:16:bb:b0:2d:02:
8d:bf:99:b6:ba:c0:dd:ab:99:bd:8e:90:80:72:46:5e:ab:55:
c9:98:72:8e:66:d0:95:e0:8e:e9:d6:23:98:c9:74:98:af:d4:
81:95:d4:ee:c0:70:a2:c4:87:d2:0b:77:25:93:c7:50:0e:5b:
24:da:98:cb:4f:1d:d7:c7:71:14:73:e8:96:35:dc:25:06:37:
e2:0b:53:33:ef:ce:89:51:1e:03:ec:52:e8:ba:80:bd:15:8c:
46:c3:1b:f0:73:98:e9:13:28:17:6a:63:a1:f4:7c:b9:2f:d3:
89:2d:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:04 2026 by rpki-client