Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: t3XHvg7Sy4Po4JaqLbY6rlx8pWKh4uvJnQul8ogF5YI=
Subject key identifier: 39:55:2E:C9:8B:D0:C8:8A:D1:DF:E3:7A:35:CE:EE:65:8A:7C:F6:AE
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019D38663940264F8754380074EF86F035A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1414
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (hash: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M=)
2: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: NOLTZ2BtmVUXv5flE0GbnyZUkhha93AcNMJelyfi1AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:39:40:26:4f:87:54:38:00:74:ef:86:f0:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=39552ec98bd0c88ad1dfe37a35ceee658a7cf6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:13:f6:46:d4:8d:f5:19:1e:70:e2:1c:dd:
a6:85:c0:39:58:2c:93:d6:88:d9:c2:1b:41:78:08:
9e:24:a2:ac:57:83:83:de:25:b3:6f:42:dd:fe:8e:
b6:d0:2f:fa:4a:1c:13:98:76:3a:b1:e2:81:b3:ca:
1f:64:0a:88:d8:68:a9:40:02:64:60:eb:21:46:cd:
70:e8:1b:6b:fc:29:93:95:59:82:a6:9f:13:45:81:
9b:7a:1b:8f:d6:5f:27:4b:b7:b9:80:72:40:92:0f:
80:5e:f4:35:ad:c3:3b:51:76:1d:ea:36:c3:8c:82:
e5:05:0e:0b:6c:c0:63:6f:79:70:b6:8c:6b:6c:d5:
b1:51:e1:23:a4:54:01:61:9b:6c:2e:35:92:18:97:
ea:bc:54:7a:16:60:ce:55:d1:12:0a:53:eb:34:78:
76:9c:95:30:47:ca:37:37:15:35:80:ab:44:56:8d:
ae:55:c5:be:66:fa:46:17:81:16:e9:6f:97:0e:7c:
cd:dd:3c:2d:c6:f7:30:52:01:ee:b4:7f:0b:d8:e8:
c3:1b:e5:54:f3:1b:19:be:04:be:3a:20:59:c4:a8:
1d:53:82:7e:04:55:7b:a1:20:ba:7e:3b:b7:39:e8:
71:76:9a:4c:b7:aa:96:76:09:07:60:ee:f8:28:34:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:2E:C9:8B:D0:C8:8A:D1:DF:E3:7A:35:CE:EE:65:8A:7C:F6:AE
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bd:31:ea:3d:d9:e7:f7:d6:c4:c0:a0:01:b2:c7:14:1b:d6:
2e:bc:97:63:a8:a9:68:84:23:23:64:f5:51:c2:d4:3f:13:de:
f4:f2:df:8f:b7:11:90:0f:42:dd:34:3b:b0:d3:31:56:21:b5:
b9:94:73:63:ac:dc:fe:5e:01:82:0b:00:17:d1:df:c0:f9:c5:
b4:f0:ff:d4:fc:0e:37:f8:5c:59:17:d3:82:07:b9:2a:b1:55:
71:2b:15:48:9c:f4:7a:4e:e9:fa:79:3b:95:0f:84:74:6b:ca:
92:c3:79:ab:87:ab:3f:f0:a5:46:e0:03:f4:2d:29:bd:cd:2b:
10:7a:0b:fc:43:f9:3e:0c:8d:4e:bc:60:c2:5d:cd:27:33:04:
bc:d3:79:71:12:82:34:71:67:4b:e0:e1:a9:22:ff:ad:72:88:
ab:a9:3c:57:d5:2a:85:7b:dd:36:67:fd:d0:6b:12:de:86:4b:
04:93:89:49:64:de:c7:72:cf:27:fe:c4:64:64:f4:79:d1:11:
b7:cf:b3:1a:2d:72:60:d8:b1:65:2a:26:7d:f7:8a:91:31:5f:
81:c5:cf:84:0e:63:38:83:e4:cf:b2:43:96:91:20:d5:97:59:
aa:e7:af:54:b7:e2:bf:a7:ea:56:cd:f2:28:78:74:04:2a:5c:
af:1f:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:17 2026 by rpki-client