Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: vo0aFyMgwU31OwUmTAjKkk6gfY07WXGSO0muo/Q3KrM=
Subject key identifier: F1:74:BB:29:C3:7B:E9:DD:A8:1B:E5:1F:DD:79:23:68:55:0A:90:87
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019FA89A1791EB0A06244C1CA12F1A0B5F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1912
Signing time: Tue 28 Jul 2026 12:01:38 +0000
Manifest this update: Tue 28 Jul 2026 12:01:38 +0000
Manifest next update: Wed 29 Jul 2026 12:01:38 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: VTQxiXiazzNjuu3SspnWIeNeOvLs6w/6KgTbI1Rlz/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:17:91:eb:0a:06:24:4c:1c:a1:2f:1a:0b:5f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jul 28 12:01:38 2026 GMT
Not After : Jul 29 12:01:38 2026 GMT
Subject: CN=f174bb29c37be9dda81be51fdd792368550a9087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:35:88:c1:fa:13:9a:f1:81:71:98:a1:60:
09:27:4f:2c:76:31:e5:55:ec:ee:f7:0f:03:4f:4c:
c1:a8:5d:e0:a9:e7:bd:a7:1d:06:b7:95:6f:a7:a9:
35:8e:77:5a:e4:a9:73:24:a1:1f:79:28:1c:30:51:
b2:3b:ac:36:53:44:36:73:68:bb:76:18:50:1b:18:
36:b3:94:be:37:bb:64:e9:5f:46:0e:ad:cc:1c:2a:
9c:3a:46:8a:8e:02:42:03:e2:10:ea:a0:33:26:bf:
71:d3:1f:e4:dc:5a:a0:80:69:c7:2a:45:23:7a:ef:
d4:c9:61:b9:06:97:07:2e:3b:a4:82:f5:6d:34:e9:
17:9b:f8:47:8f:0d:9e:df:7b:32:6b:3b:98:ed:1e:
4d:90:95:95:9a:6e:fd:5b:c6:dc:9d:b5:7a:8b:9a:
27:ed:8e:02:96:89:bb:d6:3e:fd:9f:83:35:4f:11:
6c:59:d0:a5:b6:9c:2d:ea:fb:0c:6e:ef:1b:15:68:
a7:a4:67:8e:eb:f3:65:dc:b1:11:09:86:50:7d:cf:
b3:c5:1d:8f:fe:af:50:1b:a5:35:e0:8a:85:1e:fb:
97:c1:ce:64:7f:63:b9:13:25:6b:96:1c:cd:cb:61:
83:88:4c:2c:81:78:19:07:b4:76:ec:e9:76:c5:9e:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:BB:29:C3:7B:E9:DD:A8:1B:E5:1F:DD:79:23:68:55:0A:90:87
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fa:89:fd:a5:5a:fa:45:ac:1e:c7:e2:f0:a0:96:96:77:31:
75:2a:22:c5:96:8d:93:8e:25:b0:1d:c3:2f:c5:72:d6:6e:ec:
60:46:9e:2f:ea:11:9d:f5:f1:53:bd:ab:48:57:fc:8c:8d:66:
f7:5d:ed:0f:44:ef:16:72:51:67:92:6a:26:90:af:50:37:bb:
15:84:3b:81:d5:f4:ff:1f:1d:cd:30:82:0d:19:f4:7f:a9:4a:
50:e9:c4:85:e3:9e:c5:b0:4b:c1:71:95:0a:76:b0:44:1c:fe:
11:75:9e:93:64:aa:7b:95:5e:fa:47:83:b7:98:5f:6c:ae:c6:
91:4e:63:13:7c:2a:0e:02:2d:0e:f9:c7:d6:6a:c8:02:6b:ce:
20:3b:16:d3:4b:64:f1:b6:0c:c2:34:8a:31:28:bd:85:bd:ee:
0e:3c:ed:0f:c6:3c:42:f0:05:19:8c:bf:6f:9d:37:df:72:26:
c2:00:20:95:41:f3:d4:22:9c:7b:1b:86:90:6b:29:c3:21:35:
53:20:5c:69:6c:d6:2b:db:1b:a1:e1:8b:97:0e:8d:74:ef:0d:
8b:07:c3:c1:70:e5:e9:f8:c7:b5:76:be:66:9f:11:7d:6c:7e:
b3:4e:f9:7a:d0:26:2b:fc:fd:90:08:a3:f0:c8:0c:a2:37:1b:
d6:fe:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:57 2026 by rpki-client