Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: 8a3ws37RKMBgyUXbf89KtD93Wb3WvfxrVPZxjuT6fDQ=
Subject key identifier: F8:D7:8F:03:5C:06:98:40:00:F4:8E:08:85:94:EC:AF:B0:ED:18:75
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019D9962B667AFF63C4DE1C177EC1F67CEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1801
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: V0pbGtMHXKHoZhycHY8LFXkzAZgdX22EL8PMB0GLIiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b6:67:af:f6:3c:4d:e1:c1:77:ec:1f:67:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=f8d78f035c06984000f48e088594ecafb0ed1875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:1a:b1:34:a8:48:e2:f9:d0:51:b3:82:dc:
57:1a:d1:91:06:fa:7e:e1:db:3c:55:6b:85:8e:1d:
d4:e3:76:25:a5:c1:0e:8b:52:1c:23:6a:7c:7e:2c:
05:8e:0a:e6:d2:66:f0:95:cb:51:23:8d:89:33:c5:
a2:ae:df:d2:5b:0d:ab:2f:2e:cd:f0:90:92:e8:ea:
5e:36:d0:49:e1:d0:06:0c:89:74:00:62:d5:3e:5c:
5b:c2:d3:03:c2:ce:a8:42:12:27:01:0e:8e:ac:5f:
0d:77:e8:30:71:4b:e4:89:9e:99:ea:13:48:a6:c8:
d4:56:16:70:b7:80:3b:6c:a6:bb:3c:b4:82:e5:a0:
e4:f9:ae:08:f5:b3:18:b0:27:51:33:74:b9:0b:f4:
2d:e8:18:f8:f6:66:e7:8d:21:9f:53:aa:5e:b8:4d:
51:f2:aa:20:67:24:3e:5d:92:e8:d8:36:b7:55:26:
23:ce:3e:a1:e5:a2:e4:70:f0:6c:c1:2f:33:29:b6:
75:0d:c7:9f:3d:c5:9c:92:cc:09:df:92:ab:d9:05:
66:00:fa:f8:22:ab:37:1f:19:10:6e:ea:ad:a5:da:
8d:e7:d9:a3:d7:54:ff:c1:31:96:92:7f:d0:ba:2d:
35:26:6c:49:da:77:9f:2c:e2:5c:c8:4b:83:56:9b:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:8F:03:5C:06:98:40:00:F4:8E:08:85:94:EC:AF:B0:ED:18:75
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:ad:7c:29:19:3c:63:84:44:a7:cc:81:b8:d3:02:b4:36:
2c:87:fe:cf:9c:22:cf:6d:92:ce:ac:bd:79:3e:d0:24:8f:25:
65:f2:9c:7e:fc:8b:26:f4:5a:e8:e1:26:bb:84:79:21:ca:f6:
bd:bf:67:46:34:12:ed:8b:95:bd:3c:b3:f3:2f:13:be:bd:1b:
91:fd:b4:dd:b5:b6:6c:39:30:0a:f6:94:d1:2a:5d:bb:0a:c0:
77:9f:7e:9d:6b:40:7e:61:fc:5a:39:bb:d8:17:3a:b9:10:15:
c2:cd:e0:6a:3f:dd:ef:b3:37:d7:92:6a:00:c8:a5:41:da:b9:
62:d6:be:20:3b:c1:83:de:5c:9d:02:30:7f:8d:e9:cc:1f:6d:
1c:0c:cc:82:86:e9:7e:f4:2b:b9:89:f1:53:5e:ab:4c:60:2d:
38:e6:27:0c:a6:3e:c2:b8:e3:e8:20:e9:ff:92:03:23:1e:bf:
53:8a:b8:b9:6e:f8:2d:58:17:14:3f:81:f3:2a:a7:ff:02:06:
0e:04:2d:5d:1d:9a:63:96:e7:03:ff:0f:ba:a1:75:99:61:8a:
ea:87:5c:f6:2e:55:f7:2f:52:3d:dd:3a:05:5f:8c:a3:67:c7:
71:b4:a3:55:66:fd:fa:57:ee:df:81:4c:23:8f:58:a8:d5:7c:
61:77:52:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrZnr/Y8TeHBd+wfZ86mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjYwNDE3MDMwMTE2WhcNMjYwNDE4MDMwMTE2WjAzMTEwLwYDVQQD
EyhmOGQ3OGYwMzVjMDY5ODQwMDBmNDhlMDg4NTk0ZWNhZmIwZWQxODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AYasTSoSOL50FGzgtxXGtGRBvp+
4ds8VWuFjh3U43YlpcEOi1IcI2p8fiwFjgrm0mbwlctRI42JM8Wirt/SWw2rLy7N
8JCS6OpeNtBJ4dAGDIl0AGLVPlxbwtMDws6oQhInAQ6OrF8Nd+gwcUvkiZ6Z6hNI
psjUVhZwt4A7bKa7PLSC5aDk+a4I9bMYsCdRM3S5C/Qt6Bj49mbnjSGfU6peuE1R
8qogZyQ+XZLo2Da3VSYjzj6h5aLkcPBswS8zKbZ1DcefPcWckswJ35Kr2QVmAPr4
Iqs3HxkQbuqtpdqN59mj11T/wTGWkn/Qui01JmxJ2nefLOJcyEuDVpuF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjXjwNcBphAAPSOCIWU7K+w7Rh1MB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTitfCkZ
PGOERKfMgbjTArQ2LIf+z5wiz22Szqy9eT7QJI8lZfKcfvyLJvRa6OEmu4R5Icr2
vb9nRjQS7YuVvTyz8y8Tvr0bkf203bW2bDkwCvaU0SpduwrAd59+nWtAfmH8Wjm7
2Bc6uRAVws3gaj/d77M315JqAMilQdq5Yta+IDvBg95cnQIwf43pzB9tHAzMgobp
fvQruYnxU16rTGAtOOYnDKY+wrjj6CDp/5IDIx6/U4q4uW74LVgXFD+B8yqn/wIG
DgQtXR2aY5bnA/8PuqF1mWGK6odc9i5V9y9SPd06BV+Mo2fHcbSjVWb9+lfu34FM
I49YqNV8YXdSrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:56 2026 by rpki-client