Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: xwQVhtM9XxduXwfeycY2gZK78yN0S5iJqgENU7PbdGM=
Subject key identifier: C9:98:B1:AF:74:E2:38:A9:56:15:03:F3:05:9B:FF:A8:87:D4:7B:89
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019FA9070FF9A4A71598896A56228C5ED8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 023C
Signing time: Tue 28 Jul 2026 14:00:40 +0000
Manifest this update: Tue 28 Jul 2026 14:00:40 +0000
Manifest next update: Wed 29 Jul 2026 14:00:40 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: Fq+Ma6SXVwWGCBlNvB4d3pEmEV5SAK+WG4LE2L3uLq0=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:0f:f9:a4:a7:15:98:89:6a:56:22:8c:5e:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Jul 28 14:00:40 2026 GMT
Not After : Jul 29 14:00:40 2026 GMT
Subject: CN=c998b1af74e238a9561503f3059bffa887d47b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:48:74:4f:9d:81:34:04:e6:d5:d2:32:f3:
f5:5d:81:53:eb:e8:eb:ab:07:c3:81:0a:c3:74:f5:
b2:12:38:42:36:2a:63:78:3b:9a:fa:d2:c2:83:a7:
dc:53:9b:4c:9c:4e:73:72:1c:9a:67:5e:62:76:59:
65:bc:98:b8:ec:94:77:8c:0f:40:b0:0b:43:b8:a7:
7d:06:19:51:0e:ed:1a:ad:73:67:b5:7e:b8:9f:6b:
6c:2e:20:28:9f:fe:0c:38:9e:a2:6a:01:9f:15:26:
34:cb:0c:bf:c7:50:86:98:65:fb:3e:4b:2d:c4:46:
7d:21:8f:5d:a9:ac:ca:14:55:53:b9:90:43:35:d9:
97:a4:67:ed:06:b0:ca:8c:3e:bb:d6:17:85:3c:85:
6f:45:79:61:4a:43:cf:24:b0:29:6a:0d:49:19:47:
6b:01:4d:cd:e2:d8:ca:31:c5:bc:ac:de:eb:0c:c0:
d9:8b:85:99:5b:8b:5c:ff:75:36:3f:67:33:04:e2:
94:89:a2:20:0c:ff:98:dc:f1:ba:da:a4:af:c6:34:
f9:af:3b:2f:30:cc:5a:cc:64:3c:46:43:a0:f0:8c:
c5:49:72:55:92:4d:e7:87:66:0c:f8:e2:ec:4c:5e:
99:aa:4c:b3:b7:3e:a8:59:8b:4f:fa:17:ec:61:c3:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:B1:AF:74:E2:38:A9:56:15:03:F3:05:9B:FF:A8:87:D4:7B:89
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5f:55:43:d1:a1:c8:df:19:c3:41:10:27:19:d0:cf:f2:a6:
84:4c:5f:3b:18:0d:52:85:5b:3f:1f:2f:a7:cd:1a:a7:c5:4f:
73:30:3c:42:93:c7:8f:85:75:8a:f8:fe:42:01:ec:86:ec:78:
ee:95:2d:b4:08:03:55:5f:d0:9d:6f:ad:a1:d0:b9:b4:dc:4b:
be:19:e5:0e:08:4a:eb:1b:b1:a0:5d:3f:79:8c:dd:42:1d:7a:
3f:16:71:53:4a:8b:24:4f:39:7d:ff:c9:3b:aa:f8:52:a5:ad:
2c:a4:fb:24:4c:37:3b:77:2d:71:ea:01:97:dd:d9:e1:be:df:
a9:0c:c0:0e:65:6c:0d:6a:2e:98:76:2e:9c:7e:88:e6:ec:aa:
12:ba:7a:08:c2:d2:e1:e1:b5:b9:01:2c:37:57:31:6b:c8:42:
f6:ef:b6:3a:13:23:17:6e:68:9d:f1:f6:89:66:da:4a:42:a5:
35:07:61:7c:6b:22:bb:46:36:b0:57:cb:78:8a:8a:c1:c7:f7:
69:e2:39:58:f8:ba:39:1c:d8:87:47:70:6d:76:1d:0f:ad:4b:
2a:16:11:e4:b2:c0:e2:a1:03:a7:44:16:53:41:e8:72:c0:dd:
fd:01:c3:96:43:ff:59:76:59:df:11:ba:a1:a9:9f:60:27:71:
5f:27:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:22 2026 by rpki-client