Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: 3VALB+7I6mVZdnkefW8oERQUxAvd9kdnU1GRlthiEWA=
Subject key identifier: 58:21:C1:23:D4:53:CE:5F:9A:E9:C8:D1:76:06:74:4A:61:02:44:94
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019E28B98CEACBEBE81DB40B7C82B0F1D3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 0175
Signing time: Thu 14 May 2026 23:01:49 +0000
Manifest this update: Thu 14 May 2026 23:01:49 +0000
Manifest next update: Fri 15 May 2026 23:01:49 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: /BRjmM87OnQtjOVIYMXy7JeAga4OeO+lVMF24kD6Erg=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:8c:ea:cb:eb:e8:1d:b4:0b:7c:82:b0:f1:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: May 14 23:01:49 2026 GMT
Not After : May 15 23:01:49 2026 GMT
Subject: CN=5821c123d453ce5f9ae9c8d17606744a61024494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:b0:c8:46:8a:9a:68:8f:7f:16:5c:0d:c0:
38:00:90:8d:f9:26:48:48:39:4f:db:da:87:33:4b:
2f:58:09:07:84:b5:72:ac:12:03:b1:ff:1b:e4:f3:
98:0e:59:ec:52:03:15:be:22:1b:c2:5b:3d:ca:da:
05:12:af:cd:5c:48:83:e4:c9:17:ed:c4:7c:fe:c9:
93:bb:94:13:b5:02:bd:d2:25:ac:1c:be:d2:ce:07:
5e:58:86:2e:29:06:68:c8:cd:d0:ad:50:33:09:c5:
0b:e3:a4:fc:eb:2f:27:11:0e:77:21:84:46:be:f7:
b6:79:f2:2f:79:ed:36:85:ed:a5:fb:a6:21:51:85:
b8:91:a6:15:9b:70:44:dc:92:3a:6a:75:55:3b:0d:
24:99:85:38:b8:67:39:f4:7e:ab:fa:26:a5:bb:48:
13:72:b8:78:90:72:c5:9e:17:00:38:41:72:fb:7d:
9a:81:39:58:25:c3:21:40:da:57:91:8b:bd:a7:fb:
c1:b1:97:31:c1:d2:24:ba:20:4b:81:ca:a3:56:de:
67:e6:02:5c:cf:db:b3:ef:2b:13:35:a4:22:ab:95:
2b:31:3f:77:03:48:7c:ea:db:13:36:1d:d4:49:bc:
54:99:d6:6a:0a:38:2e:73:b6:27:ac:e9:87:52:78:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:C1:23:D4:53:CE:5F:9A:E9:C8:D1:76:06:74:4A:61:02:44:94
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d1:55:55:f4:e0:a1:64:81:cc:2a:1c:b7:d7:8a:d9:3b:78:
75:3e:41:03:cb:1b:37:34:0f:b8:9e:98:f1:f3:b3:c8:15:44:
98:bb:18:59:54:78:81:cb:29:e7:71:b1:8c:43:4e:b4:6c:4e:
6d:d1:26:63:2d:0a:93:8b:f9:ba:a6:33:42:4d:49:2a:45:cc:
fa:63:58:14:f6:b1:46:9d:3b:ae:8a:75:f1:4f:02:7f:10:97:
bc:5e:1a:48:e1:a9:76:37:5c:de:d3:0e:ca:b7:4d:e8:b7:17:
de:7b:d5:f9:62:78:8a:aa:48:37:85:5a:99:ca:3a:37:32:a8:
f2:67:d1:33:73:cc:52:99:d5:dc:8f:c7:00:f9:b5:ae:ef:1a:
ef:88:e8:16:a2:fd:5b:ff:9e:53:90:06:60:1c:1b:ab:dd:20:
f7:22:83:d6:42:38:e3:df:d4:3c:6a:84:88:44:a0:62:64:11:
13:aa:db:ec:b0:e3:01:42:2e:73:40:56:15:6e:1d:b2:e5:79:
2d:ba:18:ce:a0:3c:38:18:cc:ce:dd:35:c6:ba:95:43:b0:4d:
e8:4a:6c:36:16:d1:f1:4e:d1:5e:af:53:fe:a1:9e:23:44:01:
a2:0c:96:0a:bf:ab:83:3f:30:0b:e8:7f:e9:3f:d2:a1:1f:16:
39:59:82:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouYzqy+voHbQLfIKw8dP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWQ0MjczMDk0ZDM3MTA4MTZkY2UyZDEwMDRhNjI1ODUw
MWY2ZGIwHhcNMjYwNTE0MjMwMTQ5WhcNMjYwNTE1MjMwMTQ5WjAzMTEwLwYDVQQD
Eyg1ODIxYzEyM2Q0NTNjZTVmOWFlOWM4ZDE3NjA2NzQ0YTYxMDI0NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgawyEaKmmiPfxZcDcA4AJCN+SZI
SDlP29qHM0svWAkHhLVyrBIDsf8b5POYDlnsUgMVviIbwls9ytoFEq/NXEiD5MkX
7cR8/smTu5QTtQK90iWsHL7SzgdeWIYuKQZoyM3QrVAzCcUL46T86y8nEQ53IYRG
vve2efIvee02he2l+6YhUYW4kaYVm3BE3JI6anVVOw0kmYU4uGc59H6r+ialu0gT
crh4kHLFnhcAOEFy+32agTlYJcMhQNpXkYu9p/vBsZcxwdIkuiBLgcqjVt5n5gJc
z9uz7ysTNaQiq5UrMT93A0h86tsTNh3USbxUmdZqCjguc7YnrOmHUngOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFghwSPUU85fmunI0XYGdEphAkSUMB8GA1UdIwQY
MBaAFAytQnMJTTcQgW3OLRAEpiWFAfbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2Et
MjVjMzc0Y2VjY2RhLzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2EtMjVjMzc0Y2VjY2Rh
LzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNFVVfTg
oWSBzCoct9eK2Tt4dT5BA8sbNzQPuJ6Y8fOzyBVEmLsYWVR4gcsp53GxjENOtGxO
bdEmYy0Kk4v5uqYzQk1JKkXM+mNYFPaxRp07rop18U8CfxCXvF4aSOGpdjdc3tMO
yrdN6LcX3nvV+WJ4iqpIN4Vamco6NzKo8mfRM3PMUpnV3I/HAPm1ru8a74joFqL9
W/+eU5AGYBwbq90g9yKD1kI449/UPGqEiESgYmQRE6rb7LDjAUIuc0BWFW4dsuV5
LboYzqA8OBjMzt01xrqVQ7BN6EpsNhbR8U7RXq9T/qGeI0QBogyWCr+rgz8wC+h/
6T/SoR8WOVmCHA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:01:49 2026 by rpki-client