Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: rP2dIgkib41EWDQm5h1eE+Wu+sxlhqKmKJ2MW2usc9o=
Subject key identifier: 0A:1C:A8:61:D1:00:81:34:A0:7C:EF:A1:D6:92:29:6F:22:E0:6A:6D
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 01A0C8C6904D6BE760463933F59B1D66009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 02D1
Signing time: Tue 22 Sep 2026 11:00:51 +0000
Manifest this update: Tue 22 Sep 2026 11:00:51 +0000
Manifest next update: Wed 23 Sep 2026 11:00:51 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: GpzNxfwsSRblKA3YxwDxwLXlH6yVmXlxhRwW0gKU4IY=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:90:4d:6b:e7:60:46:39:33:f5:9b:1d:66:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Sep 22 11:00:51 2026 GMT
Not After : Sep 23 11:00:51 2026 GMT
Subject: CN=0a1ca861d1008134a07cefa1d692296f22e06a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:1f:ec:3a:f1:f8:d7:23:e0:bc:02:56:c7:
4a:f9:77:60:d3:ea:bf:d6:21:f4:04:21:25:bf:a1:
53:66:ee:5e:73:94:27:c2:0a:3c:fb:00:cd:69:95:
11:66:e8:33:05:48:37:b1:6f:ea:ea:de:18:d2:43:
52:05:a3:7e:58:a3:35:a8:3b:23:da:df:f7:dc:af:
2f:4a:21:71:97:a0:da:9e:46:3e:b4:b6:6a:0d:c3:
a6:d8:b4:12:a4:ab:85:14:13:48:02:24:a1:7b:06:
5f:16:60:27:b2:d9:f2:88:4f:c5:00:18:34:b1:d1:
8f:4b:79:1d:05:1b:af:90:fa:01:66:74:aa:1d:a7:
73:cc:d7:90:b1:c3:b9:fa:05:37:f6:c7:7b:f0:4c:
8b:68:ec:92:3f:8c:d7:ad:0b:44:f1:81:e5:24:04:
a7:9c:b6:e0:f2:bc:eb:cd:a8:52:e7:37:25:d8:06:
12:e1:77:7a:e9:e2:3c:e1:ac:e2:02:98:d2:1a:ad:
98:60:c6:50:b0:6d:23:02:9d:59:dd:76:1f:f8:df:
96:41:a7:f7:bc:af:7d:b9:33:fe:59:13:5b:c0:35:
7b:fb:9e:cb:3c:87:f1:de:28:e0:6c:f7:d9:05:b7:
b7:38:8c:3e:b4:05:d1:8f:3c:17:42:52:16:c3:33:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:A8:61:D1:00:81:34:A0:7C:EF:A1:D6:92:29:6F:22:E0:6A:6D
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8e:59:62:81:7d:87:c7:b9:98:f3:b9:87:a4:12:d6:a9:e0:
15:b2:fb:f7:f4:21:79:e8:f4:8d:c1:7c:ac:15:06:7b:64:5c:
50:d3:6b:88:67:a3:24:10:d2:01:0b:3d:61:51:5c:9c:ce:13:
e3:da:e3:e9:17:90:ae:21:b0:0a:de:47:90:75:58:36:cf:d7:
88:85:8b:38:62:c3:ca:63:11:ea:4e:52:80:59:c9:5b:04:c9:
59:c5:3b:b7:a3:27:80:4a:e3:49:31:4b:a0:9a:59:82:15:f4:
fa:c7:71:28:68:34:3b:8b:bb:b0:7a:5a:55:72:86:4f:12:9a:
5b:cf:9f:72:d8:87:d1:bb:84:f5:d8:79:7c:39:22:35:dc:b6:
e3:1f:6e:fc:b6:da:7e:9c:dc:b8:ab:56:73:52:74:80:18:c4:
92:55:1d:f1:7c:56:ca:2b:a1:fb:b9:58:db:3a:ab:76:26:e1:
3f:7c:1b:33:91:3f:c7:bd:33:4b:3d:18:78:5f:25:66:2d:75:
60:cc:97:97:82:b3:42:8b:e2:e2:f2:8d:d5:0e:74:20:b4:9a:
1f:c8:fb:61:aa:fb:63:10:d5:6f:ea:ab:81:67:d7:bb:87:19:
aa:53:37:01:47:f4:ab:16:2b:55:19:cf:c5:bc:21:5f:ea:92:
c7:ab:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:31 2026 by rpki-client