Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: 7axYCxoIcwHhWWtSMhHrVt5XsRiTvwwhK17to+iXpTc=
Subject key identifier: 53:9C:81:42:2C:D8:05:01:7A:F7:54:DF:C6:92:90:19:01:EF:59:FB
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019D37C0B7DA01F4B2002FB8A5C51AFB3025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: F8
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: AIYYka9cpySiMMSO4OTGw57oxQbBAxK3fiRoWJEXZt0=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa (hash: ZStz8VWjv9JWorKywmlp8CUIrtYl6f6S3mkhtfoiopc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b7:da:01:f4:b2:00:2f:b8:a5:c5:1a:fb:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=539c81422cd805017af754dfc692901901ef59fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:0e:42:15:42:64:b3:a4:19:8b:1e:f2:bb:
05:d2:20:fe:d5:86:99:57:ea:65:58:74:da:4b:d7:
35:45:14:61:dc:2d:d6:df:64:0e:52:89:ab:5c:a0:
ee:65:ac:c7:dd:71:c2:9a:fa:c9:c2:61:fe:cf:73:
21:2b:15:13:f6:4d:c3:6b:40:8f:cb:c8:18:01:ce:
e1:12:02:9b:66:92:aa:c2:31:25:31:bc:24:6e:10:
d1:3f:cd:85:92:53:b3:f0:91:ec:86:ea:97:a7:08:
fa:17:6c:11:06:59:df:c5:b0:0f:97:47:ff:06:70:
a3:86:f8:77:90:af:ce:fd:77:a9:5a:09:d0:3a:32:
ec:91:d8:af:b0:2a:f6:40:b8:3e:dc:af:da:d0:03:
eb:34:57:49:c0:5a:fa:fa:c8:83:19:7b:37:be:e0:
59:aa:ab:95:b7:81:37:77:a8:d6:f1:e9:af:db:a2:
f9:2a:49:41:a7:b7:9e:b5:ed:27:fa:86:44:a0:22:
46:cd:b8:5a:2f:43:8d:07:54:f7:0a:b4:db:87:76:
2a:ab:a6:dd:06:0d:cc:01:fd:e1:61:32:da:70:38:
2c:89:5a:c3:0f:ba:69:21:86:bd:c1:cb:df:ec:e7:
fd:35:eb:a7:e3:86:9a:da:a4:eb:5e:bd:60:81:b8:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9C:81:42:2C:D8:05:01:7A:F7:54:DF:C6:92:90:19:01:EF:59:FB
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:43:f5:02:37:39:51:3e:75:d9:c7:76:33:d4:f5:6f:df:c4:
f8:46:ed:fb:2c:1c:53:88:96:dd:93:16:9b:d4:92:d3:9e:fd:
e1:55:42:20:3d:17:4b:ee:61:a9:a0:96:f6:9c:49:cf:a3:ac:
f8:e1:1a:d7:e8:af:fb:94:89:ab:2f:50:f9:8e:30:5f:be:13:
82:6f:fa:20:f5:98:49:fb:9d:07:c9:e8:8d:16:e1:21:b9:85:
e8:d2:ca:e8:19:bd:95:13:a0:24:4e:a1:ae:cb:4c:39:53:54:
5c:e4:e9:b2:30:de:4b:e7:ae:1a:39:a5:fa:93:c8:6d:d5:cd:
fa:0e:0f:c4:43:4f:d3:ec:1d:7c:a7:41:11:27:51:a0:dc:57:
ce:2a:6c:23:50:4e:a5:9d:de:65:33:bd:9f:cc:74:af:a1:77:
15:3f:ea:b9:33:67:94:d1:cb:e3:3a:56:0c:63:97:3d:c0:0b:
79:87:b2:f3:c8:2a:16:d4:23:54:d1:5e:10:4c:22:26:b3:ba:
83:fa:72:5f:0b:26:d5:31:c3:31:f5:07:d1:03:6c:40:72:e0:
f8:a2:41:84:c8:fd:df:b2:b5:1a:bf:3c:e8:e1:ff:ca:f4:78:
61:e3:5c:26:b7:be:67:bb:6a:8c:0f:0e:d4:c9:38:bd:75:c4:
95:70:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:20 2026 by rpki-client