Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: 04mKmHpE2L4Iw6GQyMJ68B+YTzYzYVnNzM42cvX1UHY=
Subject key identifier: C4:BD:1C:43:1B:77:31:6E:5F:B5:BA:5B:C6:E6:8B:6B:A4:03:18:54
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019D277291EAF609B101BB7E9438BAA4B50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 17C6
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: w3ZhclMFN8oLK/ElrJBAuJifU1SKNmw/l2DciCBuMXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:91:ea:f6:09:b1:01:bb:7e:94:38:ba:a4:b5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=c4bd1c431b77316e5fb5ba5bc6e68b6ba4031854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:99:73:96:12:20:48:50:82:02:6d:d8:7a:
23:57:0b:e1:66:ee:73:54:15:7f:0f:5e:63:ad:f9:
11:c6:b1:31:1e:25:33:ed:b4:3e:e5:a9:02:04:d1:
96:78:99:2e:10:c9:18:8e:21:93:20:c2:b9:d3:02:
cc:4c:b8:0b:8d:55:b2:6b:9d:c1:4f:0a:69:dc:33:
bc:5b:fa:bf:e2:83:79:69:17:46:91:b6:3a:6a:5d:
63:15:54:3d:03:18:d6:fa:e4:9b:4d:96:7f:6a:c3:
0f:f8:c3:80:9d:fa:4a:b4:8d:26:3f:1f:e6:9f:4f:
0c:2d:cd:d7:3c:48:da:e4:db:2c:26:d0:9f:e6:79:
83:30:76:e3:08:00:62:a7:58:8c:bc:52:90:b5:b6:
cb:64:db:97:8d:07:0f:0b:b9:02:78:57:fc:4f:46:
21:c6:00:4b:ae:20:29:80:d1:0b:be:a6:aa:e5:89:
c0:45:d1:8d:ba:58:c4:54:d2:4e:71:8e:9c:a2:64:
c4:3f:8a:9e:d7:2b:ee:af:95:04:4d:a8:dc:15:2d:
15:2c:dd:26:8f:fe:f6:81:45:0b:55:eb:3d:8b:91:
b7:f4:2f:11:92:15:1e:f2:03:1c:49:54:15:b2:16:
98:b2:f8:3d:6c:5a:f4:28:c5:3e:1d:a3:24:3e:e2:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:1C:43:1B:77:31:6E:5F:B5:BA:5B:C6:E6:8B:6B:A4:03:18:54
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f1:a4:b7:3c:4c:a8:02:6e:d3:8a:34:da:bf:f1:ee:c6:33:
1b:b0:84:83:fd:6f:87:ce:1b:be:78:a3:4f:e0:1c:ea:e7:b1:
e2:97:ae:ca:5b:2b:b0:a4:db:3c:8d:7a:7f:06:8f:d5:22:87:
50:d8:01:02:3f:87:37:f3:5d:68:1a:bb:d7:1c:47:b6:f0:89:
e6:54:03:f6:96:18:96:6d:26:a5:5d:0d:2b:b9:b6:f5:64:68:
b2:fd:23:20:d9:fd:92:24:5f:03:16:b4:cd:05:6d:45:14:29:
1f:e0:18:ed:d1:72:9a:ac:c0:cf:a2:b4:04:08:55:42:11:f3:
c1:b2:1a:cd:4d:3c:ed:2b:ef:ae:31:90:43:7c:27:0b:44:d7:
3f:f8:ef:cf:8c:c4:99:e1:8c:9b:89:ea:d8:96:78:a2:16:6c:
f7:25:54:49:88:4a:55:a8:58:63:68:c2:ca:f0:6a:91:79:08:
d3:92:5a:47:86:12:9b:d2:5b:1d:2e:ae:35:b3:4a:16:a0:37:
a5:60:c1:5b:fc:a3:76:b1:74:27:42:87:1d:5c:5f:1d:3c:ae:
57:88:af:b8:fb:85:23:ad:31:dc:0e:ef:94:12:5e:5a:ea:c4:
99:08:ed:73:50:72:96:c5:78:4c:35:29:d4:2f:87:ae:8c:d4:
5c:b1:bc:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncpHq9gmxAbt+lDi6pLUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjYwMzI2MDAwMTUzWhcNMjYwMzI3MDAwMTUzWjAzMTEwLwYDVQQD
EyhjNGJkMWM0MzFiNzczMTZlNWZiNWJhNWJjNmU2OGI2YmE0MDMxODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pSZc5YSIEhQggJt2HojVwvhZu5z
VBV/D15jrfkRxrExHiUz7bQ+5akCBNGWeJkuEMkYjiGTIMK50wLMTLgLjVWya53B
Twpp3DO8W/q/4oN5aRdGkbY6al1jFVQ9AxjW+uSbTZZ/asMP+MOAnfpKtI0mPx/m
n08MLc3XPEja5NssJtCf5nmDMHbjCABip1iMvFKQtbbLZNuXjQcPC7kCeFf8T0Yh
xgBLriApgNELvqaq5YnARdGNuljEVNJOcY6comTEP4qe1yvur5UETajcFS0VLN0m
j/72gUULVes9i5G39C8RkhUe8gMcSVQVshaYsvg9bFr0KMU+HaMkPuLszQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS9HEMbdzFuX7W6W8bmi2ukAxhUMB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvGktzxM
qAJu04o02r/x7sYzG7CEg/1vh84bvnijT+Ac6uex4peuylsrsKTbPI16fwaP1SKH
UNgBAj+HN/NdaBq71xxHtvCJ5lQD9pYYlm0mpV0NK7m29WRosv0jINn9kiRfAxa0
zQVtRRQpH+AY7dFymqzAz6K0BAhVQhHzwbIazU087SvvrjGQQ3wnC0TXP/jvz4zE
meGMm4nq2JZ4ohZs9yVUSYhKVahYY2jCyvBqkXkI05JaR4YSm9JbHS6uNbNKFqA3
pWDBW/yjdrF0J0KHHVxfHTyuV4ivuPuFI60x3A7vlBJeWurEmQjtc1BylsV4TDUp
1C+HrozUXLG8TA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:49 2026 by rpki-client