Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: hMSa9WCFeRyxcNIL+P9N8oxM4cDnlaIDm79hiiYjmFc=
Subject key identifier: A7:DC:92:41:8D:B3:8E:53:C3:62:7A:8B:E8:4F:32:98:9E:35:63:4B
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 01A16533D873D01C936BDD25C06281C71D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 0322
Signing time: Thu 22 Oct 2026 20:00:58 +0000
Manifest this update: Thu 22 Oct 2026 20:00:58 +0000
Manifest next update: Fri 23 Oct 2026 20:00:58 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: 19uqu7DTsWE+FJbp9x6ASPAFWoaEoVFW69kq28BnNfA=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:33:d8:73:d0:1c:93:6b:dd:25:c0:62:81:c7:1d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Oct 22 20:00:58 2026 GMT
Not After : Oct 23 20:00:58 2026 GMT
Subject: CN=a7dc92418db38e53c3627a8be84f32989e35634b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:ee:3a:7a:43:7f:87:ec:52:21:f2:ca:fb:
9e:71:19:31:6f:95:08:48:e1:b5:25:50:2f:80:7c:
0a:0d:bb:c3:91:00:88:1c:4c:cc:3c:41:f0:7c:cb:
96:7f:2f:43:99:cb:d3:5c:72:50:68:42:d4:05:8f:
64:ff:b0:48:5f:ab:22:0c:93:d9:5c:93:9b:16:5e:
dd:83:d5:59:99:05:98:5a:d6:d6:57:4e:47:ce:76:
d4:fa:5a:2f:94:78:8f:5e:7a:06:47:39:c3:02:7a:
39:9c:ea:db:f8:27:82:bc:82:0e:a4:97:fb:47:01:
a0:4f:df:04:fe:fa:da:9f:b4:35:10:7b:1b:72:8b:
a4:a1:c2:1b:c8:5b:a3:44:d1:38:54:11:b2:da:ef:
8f:9b:ed:ef:f3:39:e3:4d:cc:f7:cb:41:c1:80:a5:
b2:51:95:0b:24:46:85:42:b9:2a:c5:6d:29:b2:0d:
d2:29:51:55:e8:84:d4:b2:69:cf:14:9a:0f:3d:ef:
5f:ae:d2:3d:02:a4:6c:e1:41:6c:25:ba:c6:50:00:
02:aa:5c:54:9d:7a:4c:bc:33:50:22:63:f6:47:9c:
4a:d5:1a:75:9a:d6:e6:da:bf:d4:c2:5b:31:76:55:
94:18:40:b2:8f:0e:d5:f7:1f:1c:b1:9f:3b:7f:f0:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:92:41:8D:B3:8E:53:C3:62:7A:8B:E8:4F:32:98:9E:35:63:4B
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bf:c4:77:d3:1e:7c:95:7f:f5:d1:5c:20:5e:8f:88:3e:65:
f7:40:25:f8:62:8f:e5:ab:32:24:84:a3:ce:a4:29:33:0d:93:
84:3c:ea:22:d5:c4:65:fd:cf:19:35:61:fc:f8:64:3c:c8:e8:
ab:6c:c5:08:a0:99:1a:4b:2f:69:d5:81:cc:34:4e:b4:83:6d:
8b:b9:57:00:1c:73:01:94:09:c3:0d:d5:40:2f:34:3c:56:16:
56:05:75:38:b8:1a:2f:4f:9e:de:10:0d:fc:ba:1e:49:a5:76:
37:98:90:81:37:18:f1:9c:1f:c0:fa:0d:7c:84:32:7f:78:c4:
9f:8b:8a:8f:36:30:d3:bb:0b:6e:dd:ed:81:3e:89:b7:f7:1f:
df:52:16:0b:37:0d:1a:28:c9:24:25:a9:42:e0:7d:93:90:37:
aa:b4:bd:01:0b:26:8d:a3:61:9f:3e:6b:f1:b1:21:87:51:04:
4b:69:56:48:70:73:f0:5e:d6:b0:8f:5c:03:8c:75:26:e6:ef:
ff:43:71:50:08:f6:b0:48:ec:42:f7:74:ee:e6:c5:9c:20:a8:
36:a1:32:1d:62:74:e7:00:12:c0:37:7f:39:73:ec:9e:d6:dd:
bf:6c:3a:13:8b:da:e2:8e:f6:aa:d5:83:61:33:ec:7a:2d:bc:
5c:44:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:08:40 2026 by rpki-client