Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: gKzpW04f8dRABANGSaiBFASnnfTzVoPQqPkDZS2v5dY=
Subject key identifier: 89:97:5B:11:F1:3A:CB:DD:20:84:7A:F4:2D:3A:79:38:39:D5:1E:CE
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019D9DACB37DF1C51FBA1932DDD3D6B8B435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 012D
Signing time: Fri 17 Apr 2026 23:00:34 +0000
Manifest this update: Fri 17 Apr 2026 23:00:34 +0000
Manifest next update: Sat 18 Apr 2026 23:00:34 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: 458Op/aB2UNR7bR1as35GhWRhu0BMaCMhl3N7F13/cY=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:b3:7d:f1:c5:1f:ba:19:32:dd:d3:d6:b8:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Apr 17 23:00:34 2026 GMT
Not After : Apr 18 23:00:34 2026 GMT
Subject: CN=89975b11f13acbdd20847af42d3a793839d51ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:3d:e1:a6:ab:07:a3:67:00:34:7e:37:e5:
92:13:3b:80:3d:4a:99:fd:d9:d1:ce:d3:e5:be:2c:
f4:aa:53:0a:3d:f5:ec:b2:20:ed:bb:1b:3c:c5:a7:
a8:1a:81:0a:cb:b6:b0:00:8a:f8:c1:22:e8:7a:fd:
d9:bb:68:41:d3:85:e3:8a:8c:c4:5c:d6:9d:72:41:
8d:43:4c:f0:51:8e:b0:82:9d:cd:8a:bd:40:2d:5c:
26:05:32:6a:b4:84:36:58:7c:63:ee:31:ce:9a:37:
bb:42:f3:2a:54:aa:8f:f7:fb:a3:09:a0:b3:c1:17:
ed:36:29:b7:17:fc:f1:f6:bb:c7:b8:6f:ce:c8:d5:
1f:60:ee:46:c7:75:6e:b3:df:7b:58:28:02:ee:e9:
81:91:b5:1a:8a:2a:c0:86:05:f6:f6:a2:99:8c:b3:
d2:f7:30:ce:ed:2d:05:b4:9d:15:cf:e4:7d:95:fc:
f6:df:8d:be:a3:79:c8:e5:c7:29:75:04:86:51:41:
d8:72:2d:38:30:41:42:7e:fc:a0:39:d8:1d:73:f8:
7a:48:81:ba:c9:72:ac:67:d0:1a:14:4b:73:9e:57:
c0:b5:b2:9a:3c:e3:b1:3c:71:5a:b4:c3:1f:d6:0f:
fa:6e:f7:f0:7a:f4:9a:8c:08:a9:e5:37:15:9a:37:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:97:5B:11:F1:3A:CB:DD:20:84:7A:F4:2D:3A:79:38:39:D5:1E:CE
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6d:a1:77:74:ed:ed:5a:7d:45:99:03:53:a2:b8:c4:a9:20:
4a:c0:4b:4f:5a:79:f1:3a:33:5e:9e:d4:6f:60:d1:1c:3a:a4:
8a:26:62:05:b2:0b:dd:71:18:50:90:89:32:2a:67:5a:69:09:
1c:e3:c8:c5:e7:f3:8b:68:e1:47:0a:45:a8:55:62:71:eb:a9:
45:6d:08:de:b7:2d:f4:a3:20:e0:26:5f:f7:c0:81:94:2d:e1:
01:5d:31:40:39:78:e2:57:19:f7:21:91:0e:1b:ad:ef:f3:4b:
49:75:5d:74:89:36:ba:f0:0d:d8:e9:3d:86:33:cc:4e:2f:8b:
88:1a:b1:f9:7a:dc:4a:33:80:dd:dd:ce:d7:f7:0e:e9:01:81:
b7:10:f5:fa:36:c5:fb:c2:1a:3b:32:01:e2:57:f7:61:37:4e:
14:87:52:89:d1:19:d8:8e:bb:16:8e:1c:95:08:30:fe:c3:de:
20:80:3c:c4:f3:16:95:4a:31:00:53:4a:bb:e9:c6:be:d7:e6:
9c:a6:73:9a:b2:ee:f8:02:c5:a5:21:1e:c1:3c:ce:13:4a:cd:
a5:c6:7c:aa:c7:7c:11:75:db:48:5a:27:da:c0:2b:48:2a:ee:
6f:3d:27:a8:ee:4b:88:88:af:68:32:b5:14:7f:91:e4:18:cd:
05:6a:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:48:36 2026 by rpki-client