Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: M9GHwrz3dwSPoAftgtFrqnq6e5SiKfaQgVoCFabpCx8=
Subject key identifier: 23:D0:CB:0F:DE:85:86:94:4B:06:47:49:20:90:0F:2C:59:16:9C:7F
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019D98F4F16E96F7895B60D5063404903BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1446
Signing time: Fri 17 Apr 2026 01:01:22 +0000
Manifest this update: Fri 17 Apr 2026 01:01:22 +0000
Manifest next update: Sat 18 Apr 2026 01:01:22 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: wp1KoZL2hcuO7qNsxlFDPfKq7We3o+zRVb/+9m4QtLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f1:6e:96:f7:89:5b:60:d5:06:34:04:90:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Apr 17 01:01:22 2026 GMT
Not After : Apr 18 01:01:22 2026 GMT
Subject: CN=23d0cb0fde8586944b06474920900f2c59169c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:35:4b:d1:64:a1:4b:db:29:75:bb:df:ea:
6c:e8:8b:0a:10:f6:e4:ff:dc:0a:08:91:76:b8:7f:
ad:e1:64:61:e9:a7:aa:e2:e7:c6:47:ff:2f:03:fc:
5a:97:e7:96:0c:8f:d8:c2:61:94:76:49:e6:1c:dc:
05:cd:fb:e3:4a:95:f8:9e:2c:df:ae:f7:18:0e:aa:
c3:7e:ce:43:26:ee:ff:19:a9:b7:da:b8:df:8b:00:
ac:14:e5:7a:cc:a1:af:66:4b:d3:6d:64:d0:f5:92:
09:1a:0b:dc:14:d8:a8:52:3d:20:bc:36:f5:35:ff:
09:cf:db:9b:1e:f0:d4:5f:24:e2:35:44:cc:d8:1e:
22:c7:ea:25:bd:2b:2d:cd:a0:05:fb:81:b4:05:eb:
04:05:f9:30:2b:41:06:22:f8:1e:c1:2e:32:07:a9:
f2:98:6c:36:73:14:75:4f:3b:8d:15:a3:7a:e7:58:
d2:be:ce:bd:75:d9:dd:ad:cb:d2:f1:a9:78:90:ed:
9c:79:9e:69:4a:f1:82:d2:42:f5:78:c9:10:ee:a8:
44:cf:3c:f0:6f:f9:4d:5e:99:42:0d:21:12:35:13:
5e:e8:f4:9a:d4:3a:e9:54:10:80:8c:29:7f:8a:03:
d6:87:86:be:3d:a9:e8:f3:d1:87:df:4e:68:60:b4:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:CB:0F:DE:85:86:94:4B:06:47:49:20:90:0F:2C:59:16:9C:7F
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:18:57:dc:04:8d:1a:06:b9:b4:0b:4e:49:0e:76:3c:7b:79:
35:67:15:e1:fd:1f:a0:ec:26:ec:cd:39:c5:15:77:62:d8:c1:
e1:6b:27:82:c7:8d:54:67:24:d3:51:29:22:a2:fb:35:7a:f9:
15:f3:08:5d:bd:9c:2f:9f:4c:bd:c5:eb:fb:87:9b:8e:ec:45:
87:72:c9:0b:6a:c6:5c:86:7f:9e:59:96:eb:a0:78:2e:21:cd:
5f:58:7d:00:6b:33:ff:c4:fa:2a:95:b9:0c:d0:48:7e:25:87:
1a:fd:a3:17:e6:4a:8b:fd:cb:a7:9b:a6:12:9b:e8:7a:6d:7d:
b4:7c:2b:f1:d6:db:5c:33:3d:c6:82:b4:c5:37:2c:14:9d:a3:
92:29:6f:b6:84:e1:a4:39:e8:03:b8:20:1d:ae:f3:1e:1d:18:
c8:4f:d1:ec:62:8c:40:4f:1c:84:0a:c9:16:65:6d:ca:96:af:
54:c4:76:7d:17:ce:ca:d9:a8:4e:c8:54:c2:76:ff:53:7e:fe:
3a:23:3e:78:86:b3:0c:5a:a9:65:7e:df:0e:2e:35:84:bc:7d:
95:61:47:13:c2:73:ca:3e:a7:22:38:7c:04:69:8a:b9:cc:a1:
29:0b:05:73:fc:88:10:78:96:72:8f:ea:95:ca:62:38:4b:bc:
30:f7:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:59 2026 by rpki-client