Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: KMbZHXpi+837cNSoRd8wdMzb16x/Lp+LXsv0N+fXdZQ=
Subject key identifier: 7A:45:0D:EF:45:13:45:9E:2F:B4:10:F8:BC:EE:25:5A:14:6A:F1:78
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019FAA19B61FEDCD1B06C81747A5A39937E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1558
Signing time: Tue 28 Jul 2026 19:00:39 +0000
Manifest this update: Tue 28 Jul 2026 19:00:39 +0000
Manifest next update: Wed 29 Jul 2026 19:00:39 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: f/wp707RQjJDPCKAk3XQFLCfGwMKyQFGD7e2Xy8IDLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:b6:1f:ed:cd:1b:06:c8:17:47:a5:a3:99:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Jul 28 19:00:39 2026 GMT
Not After : Jul 29 19:00:39 2026 GMT
Subject: CN=7a450def4513459e2fb410f8bcee255a146af178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:fb:99:cc:5b:5e:3c:11:54:bd:80:5e:a7:
95:c3:92:d8:94:80:dd:8f:87:1f:c6:ad:5c:8f:54:
66:32:f3:32:02:35:7b:29:12:54:41:6a:b5:3a:ce:
86:17:d1:db:6e:63:40:7b:df:7d:33:96:e4:da:e3:
11:ee:14:07:84:7e:af:cc:a6:0e:24:89:8f:b9:9f:
bd:d3:80:c1:b3:eb:24:40:a1:89:31:8c:79:9d:9d:
cf:e8:49:7d:24:53:24:d7:84:79:06:19:79:2d:03:
1d:05:ad:90:1a:94:49:ab:de:4e:ab:15:57:5d:da:
ad:e2:e7:e5:33:21:90:a1:a1:5f:1e:81:35:9a:47:
3c:a8:01:5a:38:d4:a1:ea:7d:cc:8d:8e:f2:30:ba:
9b:bf:31:99:bf:47:58:b3:38:a1:d3:ef:7e:1f:65:
f2:a1:7b:59:ba:69:ad:08:77:06:cc:0c:f9:30:73:
26:f1:b7:88:54:62:61:fd:b9:0f:af:35:d8:2f:ff:
ad:5d:3e:09:de:63:72:8c:52:9b:1e:7a:ba:b9:17:
f1:ce:4d:71:5e:c3:64:05:b8:45:bf:8d:fc:4e:e6:
db:ca:66:60:f1:92:78:e7:17:2f:c8:67:5f:a7:c6:
60:96:6e:c9:ab:04:ab:e9:38:47:c4:33:55:27:31:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:0D:EF:45:13:45:9E:2F:B4:10:F8:BC:EE:25:5A:14:6A:F1:78
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4d:7a:d8:bf:b2:0d:a6:c7:1b:02:13:7f:24:d1:d1:ab:57:
20:aa:09:a9:59:97:86:a9:73:b4:6c:c8:f5:fe:ac:01:a3:e8:
5d:5d:2c:92:43:34:d0:9a:21:06:76:62:34:4a:44:ae:15:da:
17:4b:10:58:35:c0:c5:26:c9:f5:9f:04:86:54:92:a8:73:02:
b2:30:c3:7a:35:c1:aa:b5:e4:53:f3:f0:e7:fa:e9:92:48:27:
8a:5b:55:88:d0:89:52:47:bc:36:4f:75:24:de:8a:40:1d:4c:
4d:3a:85:c8:46:b5:6f:46:0b:ac:05:a1:53:be:03:68:c4:9f:
ab:4a:2b:bf:12:22:22:c0:7f:05:ab:4c:ed:a6:af:1d:19:75:
42:60:6f:9e:e7:2d:2c:67:8b:dd:35:d5:e8:9e:27:08:78:3c:
2c:51:16:12:27:9c:04:0c:9a:1e:ca:a2:ed:df:98:7d:9f:3f:
20:44:41:4f:04:32:48:d3:4a:cf:5e:11:37:2b:62:b7:ed:47:
43:5e:7d:ce:7b:31:a1:b5:6d:28:a6:a0:fb:2d:cd:aa:97:1d:
b9:64:94:15:df:1a:82:ba:78:bb:ff:34:4c:ca:1f:55:b6:16:
8b:cd:05:55:62:99:ef:30:c9:81:be:e1:12:7b:15:8e:16:e3:
d1:3c:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:05 2026 by rpki-client