Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: ok5ZuzCbnW3Oelx5sExnwULbJGkkCXJzTttnNflSpHY=
Subject key identifier: 27:F7:A2:FD:CE:6A:C4:1C:52:2B:FA:B7:34:26:3E:22:5D:BB:60:0D
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019EBF5A76986B58FE15D1E5C662427F1825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 01C3
Signing time: Sat 13 Jun 2026 05:00:37 +0000
Manifest this update: Sat 13 Jun 2026 05:00:37 +0000
Manifest next update: Sun 14 Jun 2026 05:00:37 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: esUqKNXk3zvTA7oyuaN4UuwcYWC3MRziAeUIM69xQLk=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:76:98:6b:58:fe:15:d1:e5:c6:62:42:7f:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Jun 13 05:00:37 2026 GMT
Not After : Jun 14 05:00:37 2026 GMT
Subject: CN=27f7a2fdce6ac41c522bfab734263e225dbb600d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:7a:a6:5d:57:6f:b8:b4:32:ce:cc:89:6d:
88:b1:de:85:2f:67:9d:00:50:79:58:db:1a:c5:ea:
5a:e3:4e:70:8a:85:bb:ff:8c:ad:38:ca:f9:94:68:
6e:28:e8:3b:72:a0:96:e6:30:5d:5c:64:18:76:8f:
76:71:ca:17:95:2e:80:2e:61:7f:b8:c4:65:f5:76:
c7:6d:c4:c2:83:94:04:de:d2:0e:1d:7c:04:54:47:
d9:63:54:5b:3b:9a:41:45:89:0a:9f:5e:37:89:a6:
82:49:74:4a:96:c7:54:69:96:54:04:67:ae:f3:20:
3b:b4:63:11:d8:0a:c0:84:f5:e7:2e:d4:2b:99:71:
e6:42:72:47:8f:00:9c:db:2b:52:c3:51:3b:20:e1:
df:d3:1f:74:93:51:92:bd:2b:f1:09:81:1e:3a:1c:
d0:b1:b4:81:4d:6b:71:b4:f5:29:c6:80:c3:bd:a8:
7f:88:85:85:f7:81:16:45:8b:60:72:94:7a:38:a1:
a6:7d:91:a4:c7:61:a9:29:32:1e:6f:1f:0d:92:80:
58:d2:46:43:dc:2e:71:cc:b9:27:f9:9c:9e:32:2c:
c7:c0:a7:b6:80:09:8d:47:15:02:54:e5:b1:75:a0:
2a:e2:42:f3:2f:58:6f:0c:c0:2e:8c:b2:77:7e:54:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F7:A2:FD:CE:6A:C4:1C:52:2B:FA:B7:34:26:3E:22:5D:BB:60:0D
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:36:cc:9f:c4:ee:c8:bb:fe:48:21:d2:38:2b:a8:ac:db:
0b:77:a7:da:fb:82:f9:79:38:a8:a7:19:f8:57:db:1f:d5:3b:
fe:20:8c:7c:2f:a5:1c:87:bd:87:11:70:59:00:d1:a2:03:8f:
95:66:e2:02:fb:3f:6d:bd:a1:0d:59:33:37:30:56:0d:ee:25:
8e:4d:8c:95:58:4d:f3:1d:d0:71:46:1a:c8:c9:a2:9c:17:82:
77:c8:cb:88:bb:01:7a:28:92:0d:69:a8:5c:45:95:c6:43:22:
6c:51:4a:e2:3e:04:fb:17:5d:ae:75:62:a4:c2:a4:a5:96:71:
8e:c2:15:5e:4e:0d:69:ac:5c:4b:38:08:88:d0:ef:bd:2a:91:
52:a6:25:74:38:1b:cb:8b:10:70:80:5e:14:5d:f4:0e:70:47:
92:87:5a:cd:db:7b:d8:68:ca:77:3b:c2:76:31:49:17:d6:a1:
52:56:3f:ce:e1:d3:59:f3:6f:4b:2c:67:db:31:9b:c8:7f:a9:
58:5f:3f:e9:06:43:de:cb:77:c9:52:b2:07:22:08:19:d2:5c:
91:e6:2f:8d:8e:4b:4a:c2:28:1c:02:5b:ff:37:a1:dc:10:eb:
9a:cd:33:91:89:a1:57:a7:8a:2c:5b:da:de:82:cb:7a:1d:f8:
f8:f9:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:20 2026 by rpki-client