Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: 5n1gtFR/hr+xHy7Lmw3m7rGp4PaErg1FHz7GRYKoMXY=
Subject key identifier: 18:B9:F2:94:35:EB:8F:5E:E4:D1:11:20:08:53:A8:CD:2F:3B:FD:45
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 01A0CA479965CBA57DE47ED401A74F35252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 19A8
Signing time: Tue 22 Sep 2026 18:01:24 +0000
Manifest this update: Tue 22 Sep 2026 18:01:24 +0000
Manifest next update: Wed 23 Sep 2026 18:01:24 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: dCdcFVPLIGAgmCvLeuzQyal3tU1mcNxtC3/ZqqOISAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:99:65:cb:a5:7d:e4:7e:d4:01:a7:4f:35:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Sep 22 18:01:24 2026 GMT
Not After : Sep 23 18:01:24 2026 GMT
Subject: CN=18b9f29435eb8f5ee4d111200853a8cd2f3bfd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:62:f8:ea:23:0d:5e:20:4a:8c:90:4c:c6:
c4:44:9a:a3:51:31:05:57:8f:aa:e0:03:5b:fe:ef:
18:75:a8:93:ba:1e:57:c7:18:48:87:9b:56:55:85:
b3:f6:2a:aa:c2:44:49:2d:fc:4d:9f:5e:4f:cb:f4:
96:06:9a:a7:1a:46:48:23:68:25:c1:00:7b:0f:97:
61:e1:93:5c:1a:9a:f3:e2:b2:52:d7:34:31:17:ca:
10:49:ef:d4:bc:18:4f:ff:88:e3:73:e6:7d:4e:55:
0a:2d:3f:88:04:49:66:98:ed:b3:89:ec:2b:65:20:
2c:ef:c0:67:12:8d:48:31:7a:58:9c:8c:ee:15:67:
ad:64:ca:2e:95:13:83:c0:2e:cd:ae:e9:c9:0a:a3:
db:f2:91:5d:85:5a:06:69:26:de:d0:89:4b:3e:05:
87:1d:67:c2:9f:c2:1b:48:be:42:97:a9:4c:fb:02:
d4:50:4f:da:dc:5b:26:88:68:79:f2:45:81:4a:4e:
80:a2:51:1d:99:4c:d3:69:ce:a0:d3:ad:49:38:d1:
4d:51:da:bf:f0:54:a0:e9:c5:1b:84:b4:78:2a:16:
04:c0:53:ec:46:1f:a4:ec:71:de:97:ce:70:38:2c:
d7:2f:54:0f:e2:01:6e:22:e8:c9:31:46:d2:ab:dc:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:F2:94:35:EB:8F:5E:E4:D1:11:20:08:53:A8:CD:2F:3B:FD:45
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:70:93:83:70:a2:59:ab:9b:c1:36:72:87:c2:7d:1b:48:ea:
8c:37:53:fe:b9:74:4d:7e:e2:26:bd:e5:45:e9:21:da:95:8c:
6c:09:38:15:55:53:0c:e2:4e:85:b0:58:f6:76:60:b4:1c:06:
ba:3c:6b:86:f4:85:2f:8c:cb:22:42:0f:2f:21:d1:46:29:7b:
d3:e5:f1:27:ea:b3:50:20:96:a3:4a:81:4f:e5:41:43:47:6e:
2a:1b:8b:92:b0:4e:86:80:4f:01:62:e3:ac:13:e8:82:b6:50:
aa:97:17:17:3e:76:61:e5:90:0b:57:2d:91:0f:ba:f2:d4:18:
05:8f:fd:39:98:55:85:5e:52:3f:c8:0d:25:c0:88:2c:41:76:
dd:84:ff:71:b0:8f:04:ba:03:52:3e:69:f3:56:4f:5d:84:2e:
d6:e4:77:ab:26:5c:c7:e5:6c:86:d6:c8:02:7d:cd:64:09:85:
bf:f1:97:8b:03:d5:94:91:b7:e3:3b:de:2e:f4:57:a1:3f:22:
38:89:cd:af:1e:a8:c4:7f:a9:07:cc:ea:28:d5:c7:42:21:73:
73:13:39:4d:15:4d:0f:26:ba:bd:59:e9:1a:ff:a8:1f:95:eb:
df:17:a5:00:19:56:e2:91:83:56:c2:46:49:7d:81:70:f0:87:
36:1b:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:01:53 2026 by rpki-client