Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: HGKnEPO8SJmoBrfEmAylOTh1Ev2JM/tc7TgRLEvDOAE=
Subject key identifier: A9:0D:7E:2C:11:5C:D3:4B:D6:41:F0:41:0C:38:07:59:00:46:32:A3
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019F916D8135FE51CF5D2FEDD1A1E0EE84BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1906
Signing time: Fri 24 Jul 2026 00:01:40 +0000
Manifest this update: Fri 24 Jul 2026 00:01:40 +0000
Manifest next update: Sat 25 Jul 2026 00:01:40 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: G9lih7iw/DLi/EkJBzSVof2JuM/YBKWgMNj0Nc8KkeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:81:35:fe:51:cf:5d:2f:ed:d1:a1:e0:ee:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jul 24 00:01:40 2026 GMT
Not After : Jul 25 00:01:40 2026 GMT
Subject: CN=a90d7e2c115cd34bd641f0410c380759004632a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:41:8e:5b:33:7d:76:da:7b:b9:6c:34:41:
0e:29:6e:a6:88:dd:e4:47:ec:15:75:e8:a7:4a:01:
82:6a:47:50:a3:b6:cc:63:9b:eb:5d:f1:50:dd:42:
ee:7d:94:4d:dc:11:45:32:80:d1:b9:3d:46:ba:69:
8d:20:ac:e8:ed:17:f0:3a:d4:99:79:4a:66:79:85:
47:df:5b:47:ab:c3:2b:b8:71:a6:2c:1a:86:36:12:
9e:fd:87:0a:75:78:61:12:8e:ad:65:e0:52:60:a8:
68:7e:76:99:41:1e:d0:d4:02:ef:89:9c:d8:87:15:
4c:d5:d9:5c:f4:ae:0d:02:ea:f8:6e:84:6c:2a:d6:
91:a5:fb:da:35:4f:1a:99:fa:09:ff:9d:b4:09:f6:
c3:f1:b9:f1:37:77:f8:bc:ba:20:32:47:ec:1a:f5:
ec:0c:1f:6b:da:0b:9d:a5:2e:80:19:14:a7:30:72:
76:e1:f4:6c:a4:ed:e2:e0:57:ef:02:09:5b:7f:45:
47:1e:36:ee:1e:4e:02:65:62:aa:e4:5c:aa:eb:76:
a1:3d:59:b6:66:1f:a5:87:58:57:e0:15:4b:1c:67:
51:a1:03:8d:14:fb:71:ca:4e:20:e9:b4:62:e4:18:
5d:63:34:7d:87:16:6e:95:64:0a:77:44:8d:72:f3:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:7E:2C:11:5C:D3:4B:D6:41:F0:41:0C:38:07:59:00:46:32:A3
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:29:8a:f9:2e:a9:1a:ce:d4:f9:66:14:29:fc:16:8c:2e:
b8:e9:79:2f:f5:e5:87:a0:78:ce:a8:9a:75:0a:79:0a:b7:35:
7c:77:c5:a2:52:2d:d9:ed:8e:68:4f:7b:b8:0b:43:20:fe:c8:
49:31:af:12:bc:a9:06:32:e4:c0:9e:29:a1:9d:15:75:a5:e3:
8e:32:66:4e:13:9a:5a:95:eb:93:4d:36:c2:af:12:30:53:e1:
ce:a7:29:0a:50:a6:b0:ba:67:1c:84:d8:64:e1:1e:a0:22:43:
4e:72:47:45:9e:da:ba:ea:4e:3c:da:9d:34:d6:60:ed:48:76:
b8:fd:52:5d:08:1c:70:33:46:96:9c:73:26:f5:06:91:61:9d:
f6:01:35:ea:d4:a6:34:eb:03:84:60:7b:25:fe:96:bd:10:56:
02:e4:2d:0c:e6:ce:5d:0b:35:2e:6a:ac:7f:26:1d:d5:97:c5:
7c:a0:91:76:ca:c5:ec:45:14:1f:eb:50:9f:b6:88:e1:1c:56:
6b:88:88:ef:a2:59:75:0c:42:a1:fd:f4:07:2f:dd:d3:9e:63:
6a:c6:63:ae:0f:7f:0a:65:34:8d:78:d3:38:83:ff:2f:f1:56:
63:7e:8a:fd:75:18:62:3a:85:4a:49:48:3e:0a:34:d7:40:4f:
25:ca:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:30 2026 by rpki-client