Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json)
Hash identifier: Y0ydD2JyG+KpGKmTDLY1CpMNj0zExUU0bm4kaPxGxY4=
Subject key identifier: 32:81:EA:50:47:32:E2:CA:F7:8D:2E:12:DE:DB:1A:EB:DD:8B:80:B7
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial: 01A03DBB042F772418E99B2ED92835869FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
Manifest number: 0289
Signing time: Wed 26 Aug 2026 11:01:01 +0000
Manifest this update: Wed 26 Aug 2026 11:01:01 +0000
Manifest next update: Thu 27 Aug 2026 11:01:01 +0000
Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: qAB5SIm5PMnaADzOS/3e5TLhGUpG9SCZJrNXKKyle3Q=)
2: Tu0HTeu7VFiGpoxzmAHKn4jmWSk.roa (hash: +d9iXfQa+gZ+9cKBpXzuasEKwtK//SWvTy+/XK9Fz84=)
3: eNypCQqIJRNls5R5rHbJCG2j29M.asa (hash: dVB2QDUBKVGmHXidWGVJbvPhOh342bYj9EpCYc9qklY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:bb:04:2f:77:24:18:e9:9b:2e:d9:28:35:86:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
Validity
Not Before: Aug 26 11:01:01 2026 GMT
Not After : Aug 27 11:01:01 2026 GMT
Subject: CN=3281ea504732e2caf78d2e12dedb1aebdd8b80b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:ac:4a:f8:48:17:8c:50:83:7d:62:bd:06:
e7:39:0a:d7:33:1c:74:3f:5a:1d:66:87:ad:4b:31:
34:aa:ed:82:3b:2a:87:8b:b8:49:f4:6d:37:66:84:
02:56:49:01:bb:5f:a0:48:23:c4:88:ac:94:8f:2c:
ff:f8:6c:52:86:0d:81:16:ee:28:42:52:96:fd:55:
de:46:4a:e8:5a:72:d7:4c:ab:ee:a1:4b:7a:9a:89:
58:62:79:27:c6:76:79:31:d0:1e:d0:b1:53:d7:9b:
8d:a6:63:ee:99:f4:f5:69:7d:ea:29:4c:48:c8:4c:
18:3d:b9:bc:5b:5e:f3:9e:74:2d:0b:20:e4:e6:c2:
3a:f0:f9:f1:84:e3:09:9e:b6:c6:67:a4:b2:8a:33:
65:60:ea:21:8a:17:dd:52:e6:20:41:09:f6:7e:f1:
a1:8b:a7:19:ca:c3:1f:d2:d2:6c:09:63:6e:37:50:
cc:fd:3a:78:52:9c:4f:4d:27:07:87:d0:a0:53:ab:
b4:01:46:41:2b:42:76:4e:39:38:fc:a6:76:01:c2:
53:8a:7e:40:98:df:1b:86:31:20:62:d8:5d:0b:cf:
d4:d9:5d:63:40:12:3d:98:70:7a:02:c8:ca:cb:8a:
c5:d6:1d:5d:15:4d:a1:eb:5b:99:65:bd:e8:27:a7:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:EA:50:47:32:E2:CA:F7:8D:2E:12:DE:DB:1A:EB:DD:8B:80:B7
X509v3 Authority Key Identifier:
keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:ce:55:af:f9:ba:2a:2e:03:19:2b:fc:3c:3d:f1:6b:a1:
44:be:70:5b:e9:73:53:10:a0:fc:63:3a:aa:87:e4:e8:7d:61:
aa:76:a2:f1:11:d1:72:60:8b:8f:b1:fd:0e:89:90:24:4a:d9:
9d:f0:74:25:14:ca:e9:1e:80:2b:23:bb:e9:d6:4c:4e:0d:19:
17:1b:ad:ed:dc:4f:81:b9:8f:cf:3e:86:65:eb:cf:b1:30:86:
3d:d7:c6:4b:8b:2a:1f:1d:05:86:a7:b5:38:93:fd:06:58:a4:
2d:d4:87:34:66:5d:4e:d1:74:c0:45:1b:f2:93:99:c0:3b:ce:
53:5b:dd:f9:48:60:9e:18:19:2c:07:ab:57:99:89:c0:4a:5c:
3f:e9:ce:ac:13:65:a7:5c:ae:d7:51:07:d0:99:48:0e:c1:0c:
d9:9b:de:16:cd:b6:a7:63:a8:91:78:96:a4:72:96:95:d2:db:
4e:76:b3:f2:13:d8:5f:db:95:dd:45:1a:f3:0f:5e:78:18:e9:
9b:be:a4:38:3d:a0:d8:51:95:e8:5d:64:3b:c7:47:9b:49:8a:
4f:b2:8e:db:3d:23:3a:e9:e2:89:d1:e9:bb:a0:00:c1:fa:ea:
3f:29:5e:f7:3c:13:58:5c:6a:53:fc:5e:0a:95:c6:ca:59:8c:
b9:93:84:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9uwQvdyQY6Zsu2Sg1hp+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWQ0MjczMDk0ZDM3MTA4MTZkY2UyZDEwMDRhNjI1ODUw
MWY2ZGIwHhcNMjYwODI2MTEwMTAxWhcNMjYwODI3MTEwMTAxWjAzMTEwLwYDVQQD
EygzMjgxZWE1MDQ3MzJlMmNhZjc4ZDJlMTJkZWRiMWFlYmRkOGI4MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9qsSvhIF4xQg31ivQbnOQrXMxx0
P1odZoetSzE0qu2COyqHi7hJ9G03ZoQCVkkBu1+gSCPEiKyUjyz/+GxShg2BFu4o
QlKW/VXeRkroWnLXTKvuoUt6molYYnknxnZ5MdAe0LFT15uNpmPumfT1aX3qKUxI
yEwYPbm8W17znnQtCyDk5sI68PnxhOMJnrbGZ6SyijNlYOohihfdUuYgQQn2fvGh
i6cZysMf0tJsCWNuN1DM/Tp4UpxPTScHh9CgU6u0AUZBK0J2Tjk4/KZ2AcJTin5A
mN8bhjEgYthdC8/U2V1jQBI9mHB6AsjKy4rF1h1dFU2h61uZZb3oJ6fcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKB6lBHMuLK940uEt7bGuvdi4C3MB8GA1UdIwQY
MBaAFAytQnMJTTcQgW3OLRAEpiWFAfbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2Et
MjVjMzc0Y2VjY2RhLzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2EtMjVjMzc0Y2VjY2Rh
LzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMfOVa/5
uiouAxkr/Dw98WuhRL5wW+lzUxCg/GM6qofk6H1hqnai8RHRcmCLj7H9DomQJErZ
nfB0JRTK6R6AKyO76dZMTg0ZFxut7dxPgbmPzz6GZevPsTCGPdfGS4sqHx0Fhqe1
OJP9BlikLdSHNGZdTtF0wEUb8pOZwDvOU1vd+UhgnhgZLAerV5mJwEpcP+nOrBNl
p1yu11EH0JlIDsEM2ZveFs22p2OokXiWpHKWldLbTnaz8hPYX9uV3UUa8w9eeBjp
m76kOD2g2FGV6F1kO8dHm0mKT7KO2z0jOuniidHpu6AAwfrqPyle9zwTWFxqU/xe
CpXGylmMuZOEXg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 14:06:37 2026 by rpki-client