Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: X0q7jDtnPyoS4aEOiD9cmSIyfGnZVaaiaUF2YF61VeQ=
Subject key identifier: 34:73:2B:C8:B6:72:94:86:9E:57:34:4F:43:26:8E:FD:C1:5F:FC:5E
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 019F126556EF0FFC74E279529E0A63CEEA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 01EE
Signing time: Mon 29 Jun 2026 08:00:58 +0000
Manifest this update: Mon 29 Jun 2026 08:00:58 +0000
Manifest next update: Tue 30 Jun 2026 08:00:58 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: CF2tQ3YgtBeHc1G+sIL1SV7d7lDoIYt9q9pcA5pvMEM=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:56:ef:0f:fc:74:e2:79:52:9e:0a:63:ce:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Jun 29 08:00:58 2026 GMT
Not After : Jun 30 08:00:58 2026 GMT
Subject: CN=34732bc8b67294869e57344f43268efdc15ffc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:2d:14:5e:40:86:bc:23:22:73:79:7f:ea:
66:22:5e:3f:d8:1c:b9:bd:e8:b2:e4:2e:15:fe:78:
1a:11:79:54:c9:55:c6:a4:c7:20:df:35:97:99:62:
04:e5:6f:0b:06:39:7c:6b:0b:da:93:cc:93:64:43:
a4:08:71:d1:65:e8:1c:4a:9f:5c:3d:cc:ab:7a:a0:
56:7e:88:d2:ce:c9:65:24:16:73:6f:7d:43:5f:a8:
f5:89:8f:79:fd:d7:44:dd:01:1b:82:71:92:69:0f:
ba:a5:58:4e:b0:72:fa:27:a5:74:21:a0:24:97:fd:
e5:94:e1:b2:39:4d:c8:dc:80:69:eb:24:ca:7b:19:
9c:f3:1b:5a:c6:36:02:97:ae:cd:52:90:da:be:3c:
96:67:b5:00:4a:e3:78:60:87:85:39:9c:4b:15:93:
86:4a:71:60:56:93:a3:17:a5:a3:85:df:5f:3b:d3:
ed:59:9d:63:77:52:d7:dd:e1:21:24:9d:d0:f0:32:
ce:47:3d:49:28:8c:df:fb:22:06:07:de:6e:cd:b7:
14:f1:ef:34:db:0d:0f:12:74:bf:89:fa:6a:d1:14:
40:03:93:93:92:52:23:dc:f4:95:ae:fc:60:7a:d3:
70:b6:ef:54:10:d2:a6:27:25:01:27:48:39:ab:ab:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:2B:C8:B6:72:94:86:9E:57:34:4F:43:26:8E:FD:C1:5F:FC:5E
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:54:59:3f:6c:24:3d:12:6d:eb:43:b4:ea:4d:55:b6:16:
4f:14:4b:6c:77:c8:38:1c:51:32:5b:00:2a:50:39:30:91:97:
7c:1f:a6:5d:e3:70:bd:78:fb:6b:de:ae:89:ce:20:eb:8c:61:
d9:3c:b5:eb:0e:83:c1:04:87:1a:ee:42:7e:45:57:3b:08:57:
38:fd:4d:7c:ea:10:c0:f9:1a:88:49:56:ee:98:4c:82:df:55:
cd:a9:63:34:23:8e:66:80:7b:10:6f:6b:b6:d4:ef:dd:1c:15:
48:c7:42:95:7b:e1:78:c7:8b:8c:94:15:fb:4b:ae:0c:43:cc:
36:9b:b2:36:59:23:e7:3f:8c:24:8c:4f:68:2f:4c:8d:d9:fb:
79:27:64:22:ee:dc:a1:e6:13:16:30:2c:b1:27:4a:31:8e:a0:
55:e9:44:65:51:36:7f:e1:c9:22:91:59:49:12:e9:f1:7b:61:
48:42:88:44:f1:74:21:eb:de:1b:40:77:e6:2a:b3:74:92:5c:
9b:42:a2:a7:07:61:1a:fa:8b:2d:d9:0d:67:2b:d5:65:db:e7:
23:01:f6:d0:6d:d4:9c:cd:67:5b:de:f7:55:58:dd:73:4f:c8:
d7:5a:73:b4:1a:79:fc:ef:54:2e:e3:c0:76:ab:49:75:d4:82:
eb:79:86:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZVbvD/x04nlSngpjzuqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWQ0MjczMDk0ZDM3MTA4MTZkY2UyZDEwMDRhNjI1ODUw
MWY2ZGIwHhcNMjYwNjI5MDgwMDU4WhcNMjYwNjMwMDgwMDU4WjAzMTEwLwYDVQQD
EygzNDczMmJjOGI2NzI5NDg2OWU1NzM0NGY0MzI2OGVmZGMxNWZmYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCstFF5AhrwjInN5f+pmIl4/2By5
veiy5C4V/ngaEXlUyVXGpMcg3zWXmWIE5W8LBjl8awvak8yTZEOkCHHRZegcSp9c
PcyreqBWfojSzsllJBZzb31DX6j1iY95/ddE3QEbgnGSaQ+6pVhOsHL6J6V0IaAk
l/3llOGyOU3I3IBp6yTKexmc8xtaxjYCl67NUpDavjyWZ7UASuN4YIeFOZxLFZOG
SnFgVpOjF6Wjhd9fO9PtWZ1jd1LX3eEhJJ3Q8DLORz1JKIzf+yIGB95uzbcU8e80
2w0PEnS/ifpq0RRAA5OTklIj3PSVrvxgetNwtu9UENKmJyUBJ0g5q6sy9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRzK8i2cpSGnlc0T0Mmjv3BX/xeMB8GA1UdIwQY
MBaAFAytQnMJTTcQgW3OLRAEpiWFAfbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2Et
MjVjMzc0Y2VjY2RhLzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2EtMjVjMzc0Y2VjY2Rh
LzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApO9UWT9s
JD0SbetDtOpNVbYWTxRLbHfIOBxRMlsAKlA5MJGXfB+mXeNwvXj7a96uic4g64xh
2Ty16w6DwQSHGu5CfkVXOwhXOP1NfOoQwPkaiElW7phMgt9VzaljNCOOZoB7EG9r
ttTv3RwVSMdClXvheMeLjJQV+0uuDEPMNpuyNlkj5z+MJIxPaC9Mjdn7eSdkIu7c
oeYTFjAssSdKMY6gVelEZVE2f+HJIpFZSRLp8XthSEKIRPF0IeveG0B35iqzdJJc
m0KipwdhGvqLLdkNZyvVZdvnIwH20G3UnM1nW973VVjdc0/I11pztBp5/O9ULuPA
dqtJddSC63mGog==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:05 2026 by rpki-client