Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: rT0zk4Wca0p2bY7Wj8O/zwUp/kcjgVv4qA7KwTsA8Jc=
Subject key identifier: 78:31:01:53:DC:D7:4A:8B:CC:74:47:E9:7F:7D:B3:A1:18:90:D3:95
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019CABD9B2F32064DEC96D22F81A314F5A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1786
Signing time: Mon 02 Mar 2026 00:01:36 +0000
Manifest this update: Mon 02 Mar 2026 00:01:36 +0000
Manifest next update: Tue 03 Mar 2026 00:01:36 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: rTe+dqY8D/d0x58N4QDuIz6JZtf8Bi10bLjC8jld7vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b2:f3:20:64:de:c9:6d:22:f8:1a:31:4f:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Mar 2 00:01:36 2026 GMT
Not After : Mar 3 00:01:36 2026 GMT
Subject: CN=78310153dcd74a8bcc7447e97f7db3a11890d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:08:25:84:d6:16:6b:96:75:54:96:35:e5:
65:a0:58:3e:13:8b:df:10:ce:34:34:37:54:b5:cc:
04:a2:f2:3c:df:97:5f:69:32:49:26:46:60:bb:fd:
a2:1b:98:ee:7a:1f:74:e4:15:87:eb:3b:64:60:3d:
25:f0:24:07:40:a6:60:2a:1c:1d:a2:30:13:ff:29:
08:dc:0f:f2:2d:fc:7c:5f:cd:a5:16:7b:f2:44:bb:
bf:69:0e:97:6d:62:2c:a4:8a:54:50:45:39:74:34:
46:91:a8:36:84:0d:cb:17:7e:de:c6:e8:41:23:74:
2b:20:aa:5d:f3:14:77:74:05:8d:f8:a2:c0:9a:2b:
01:e4:af:70:18:2f:be:ac:5f:f7:01:e5:00:4d:2d:
54:40:bc:3a:42:77:28:40:d2:07:a1:36:12:01:92:
e0:5e:fb:bd:02:39:29:66:70:10:54:3f:b7:f6:6d:
99:f1:3b:52:ea:e5:ec:9e:7e:48:cc:86:74:08:1d:
22:94:a5:24:3c:26:3a:63:b7:60:d2:ab:87:e2:b2:
47:2a:e4:4d:47:d2:2a:e3:d2:ea:01:54:ce:49:e8:
3a:82:b1:95:c8:9a:e0:00:86:35:4f:27:16:40:cb:
d9:74:59:c9:25:04:5a:0a:c3:65:ba:3e:8c:0f:5e:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:01:53:DC:D7:4A:8B:CC:74:47:E9:7F:7D:B3:A1:18:90:D3:95
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:f4:81:0a:c4:e7:4a:e8:12:36:7d:6a:e5:bd:06:c8:88:
6a:d9:7f:ec:07:8c:56:e6:ff:c1:94:28:07:e6:b0:25:76:bf:
74:53:1c:1e:74:e2:5c:e0:08:70:61:9c:d4:8f:e5:e3:64:2e:
6d:d1:2c:28:2b:62:fa:4f:2a:7d:7b:45:41:5e:f4:b5:36:08:
ad:24:6b:7e:2c:7c:2a:27:be:b8:85:5f:72:42:0f:f2:44:e3:
d0:a5:6a:4f:b8:43:4c:a0:61:4c:5c:91:af:03:b6:8f:76:bd:
3d:70:09:f4:7b:ce:b3:4f:b8:dc:c6:5c:87:77:83:2c:03:a9:
13:c4:d0:9a:9e:f3:95:3c:59:d9:3f:bc:bc:ec:b3:66:91:9f:
88:d6:f4:40:3e:9a:f6:7c:11:f9:33:24:a0:34:05:72:7b:de:
9f:80:69:59:4e:d7:9e:55:3c:09:bf:2c:16:2c:1f:41:a5:5c:
7e:25:f2:a5:72:ef:a1:8c:76:a5:f8:b1:42:40:8a:f7:cd:be:
ce:ca:80:01:26:c5:23:79:00:54:d7:cf:0f:83:f7:d8:0f:17:
89:9b:d2:81:3b:83:28:d4:96:33:4d:9b:60:66:91:92:65:59:
b3:1f:06:61:d6:80:7a:11:00:a7:60:06:e5:c4:a0:a4:ee:12:
5b:9e:5f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bLzIGTeyW0i+BoxT1pfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjYwMzAyMDAwMTM2WhcNMjYwMzAzMDAwMTM2WjAzMTEwLwYDVQQD
Eyg3ODMxMDE1M2RjZDc0YThiY2M3NDQ3ZTk3ZjdkYjNhMTE4OTBkMzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc0IJYTWFmuWdVSWNeVloFg+E4vf
EM40NDdUtcwEovI835dfaTJJJkZgu/2iG5jueh905BWH6ztkYD0l8CQHQKZgKhwd
ojAT/ykI3A/yLfx8X82lFnvyRLu/aQ6XbWIspIpUUEU5dDRGkag2hA3LF37exuhB
I3QrIKpd8xR3dAWN+KLAmisB5K9wGC++rF/3AeUATS1UQLw6QncoQNIHoTYSAZLg
Xvu9AjkpZnAQVD+39m2Z8TtS6uXsnn5IzIZ0CB0ilKUkPCY6Y7dg0quH4rJHKuRN
R9Iq49LqAVTOSeg6grGVyJrgAIY1TycWQMvZdFnJJQRaCsNluj6MD179bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgxAVPc10qLzHRH6X99s6EYkNOVMB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJ30gQrE
50roEjZ9auW9BsiIatl/7AeMVub/wZQoB+awJXa/dFMcHnTiXOAIcGGc1I/l42Qu
bdEsKCti+k8qfXtFQV70tTYIrSRrfix8Kie+uIVfckIP8kTj0KVqT7hDTKBhTFyR
rwO2j3a9PXAJ9HvOs0+43MZch3eDLAOpE8TQmp7zlTxZ2T+8vOyzZpGfiNb0QD6a
9nwR+TMkoDQFcnven4BpWU7XnlU8Cb8sFiwfQaVcfiXypXLvoYx2pfixQkCK982+
zsqAASbFI3kAVNfPD4P32A8XiZvSgTuDKNSWM02bYGaRkmVZsx8GYdaAehEAp2AG
5cSgpO4SW55f5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:53 2026 by rpki-client