Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: B+b7DPWmzSnnnJ72XiFkpGMJ8IUcqxR9pkHcgGYLi5I=
Subject key identifier: 10:64:42:EC:F6:15:48:2C:E4:5A:F8:A5:7D:C7:F3:D9:04:76:36:E0
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019CA8D8310B3D60D50FB7DBEBEA6CBBF410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: AE
Signing time: Sun 01 Mar 2026 10:01:06 +0000
Manifest this update: Sun 01 Mar 2026 10:01:06 +0000
Manifest next update: Mon 02 Mar 2026 10:01:06 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: taKwNNBH7oPyS4O6CRuAKoJpf0vJrSn5GOFhhqlXhT4=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa (hash: ZStz8VWjv9JWorKywmlp8CUIrtYl6f6S3mkhtfoiopc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:31:0b:3d:60:d5:0f:b7:db:eb:ea:6c:bb:f4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Mar 1 10:01:06 2026 GMT
Not After : Mar 2 10:01:06 2026 GMT
Subject: CN=106442ecf615482ce45af8a57dc7f3d9047636e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:08:54:83:1b:dd:c4:61:a6:a0:5f:7c:f1:
a6:62:34:96:60:d7:4e:1c:64:8c:3e:d9:b3:08:99:
e3:b9:a0:c8:c3:1b:62:cc:d7:a4:85:fc:7d:1a:20:
ce:bd:92:a6:81:18:1c:a4:30:61:3c:07:81:13:ba:
24:24:fd:78:f2:48:bd:87:61:bb:d3:70:d3:f2:24:
5c:72:54:84:0d:54:2e:b0:86:45:88:e2:1b:35:a7:
d8:51:32:75:64:8a:8c:35:a0:cd:e2:19:fc:4f:13:
99:4b:10:c9:01:75:19:bf:b1:05:ae:23:1e:cb:65:
f3:12:57:cc:46:be:5c:19:f5:d2:55:6c:6b:a4:03:
ea:fa:93:40:c8:09:40:81:93:37:9a:79:2a:94:b5:
06:9f:1c:b5:da:77:61:5c:02:99:4f:6f:ac:6d:cb:
f1:b0:9f:22:fa:c9:be:9b:29:4a:33:36:f4:9c:1e:
88:ea:14:42:75:83:f1:fa:08:8b:e4:24:46:76:2d:
ac:bb:69:b5:d4:59:ad:f2:f9:93:0b:04:04:91:ad:
94:2a:4a:fd:b4:16:db:67:db:d5:19:a0:5f:9a:9c:
7c:6d:ec:c5:10:d7:3b:8b:e6:01:9b:20:38:02:4e:
60:1d:e7:52:c9:5d:57:ea:2c:da:58:ff:77:a7:be:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:42:EC:F6:15:48:2C:E4:5A:F8:A5:7D:C7:F3:D9:04:76:36:E0
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:d1:da:38:b6:d9:a7:ad:f4:f4:96:b4:e5:a8:3e:02:8e:
b8:d8:36:6f:ee:35:6f:8e:a4:eb:ad:2f:64:98:aa:90:ff:cb:
0c:03:ec:dc:c7:03:94:f6:e2:3c:85:dd:93:6c:c4:15:a3:50:
5c:a2:ca:c2:48:b9:56:fd:41:30:a3:83:fb:38:d5:b7:3f:98:
e9:52:f0:b7:fa:90:22:dd:51:58:96:da:2e:46:de:9f:82:cd:
ed:be:fa:5a:48:74:fa:2f:6b:d5:84:37:13:a5:f1:bf:5b:01:
e6:49:b8:2e:f3:33:db:e3:5c:9d:b3:ed:db:f4:89:a3:5f:eb:
b7:22:8e:f8:73:cc:1b:f7:af:80:1d:6d:a8:aa:1b:b8:b6:55:
04:dc:96:24:bd:8c:15:41:01:3f:1c:2a:0a:61:ef:46:1d:79:
ab:96:db:bb:05:64:d2:ce:9f:a9:5f:58:ae:59:68:7e:38:55:
ab:ff:05:ba:16:05:0f:d8:27:2d:fc:1b:2a:d2:1b:e5:c7:c8:
76:3f:08:3e:7e:bc:32:60:47:5c:ec:06:f0:9e:62:45:ef:9e:
ae:12:d2:ee:d1:96:1f:70:9e:f9:a4:8a:f5:01:00:da:07:78:
35:10:f4:12:f1:ba:ac:a6:08:ac:dd:eb:78:a0:24:4d:f5:13:
ce:9f:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:12 2026 by rpki-client