Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: Nm2WoD48rUT4pc4aCJ3uKJ4TiBuIvNi9SVDzClVbkyQ=
Subject key identifier: 91:0D:63:B8:18:EB:E9:0D:08:2B:C9:53:02:E7:4C:01:9D:04:23:D2
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 019E1EA37BCBC1145BF1446799A780012B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 1846
Signing time: Wed 13 May 2026 00:01:31 +0000
Manifest this update: Wed 13 May 2026 00:01:31 +0000
Manifest next update: Thu 14 May 2026 00:01:31 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: f6X+B7qq1a6zQ2bi291E7FLpjbKK4fvW2b2yqHP6LoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:7b:cb:c1:14:5b:f1:44:67:99:a7:80:01:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: May 13 00:01:31 2026 GMT
Not After : May 14 00:01:31 2026 GMT
Subject: CN=910d63b818ebe90d082bc95302e74c019d0423d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:c3:22:4f:0a:9a:1a:75:86:4f:f6:0e:79:
15:b0:be:67:ef:46:2b:91:2e:a7:71:20:d6:f3:50:
c5:a2:f4:bf:22:6c:bc:40:27:48:cc:3a:d1:f6:0a:
b7:ee:91:33:e7:95:76:22:85:52:b6:08:bb:2a:93:
43:74:9a:f5:3f:98:b0:33:14:f1:eb:43:20:cb:e1:
a0:0c:63:39:e0:e2:e4:d5:ee:41:52:b0:56:97:46:
ad:b8:25:06:62:52:f5:8e:93:bd:d9:08:04:51:20:
1d:76:3f:40:71:ec:41:5a:be:7b:65:d6:a8:b3:9b:
dd:04:db:e0:82:87:d0:bc:38:87:d8:f9:1d:e8:6f:
a3:a8:a3:87:e8:41:73:3d:c4:c3:bd:53:0e:ec:dc:
2a:e0:ce:18:e7:e2:d5:35:37:6f:98:94:6c:63:fa:
26:f6:06:3e:b8:ae:b2:36:2e:b5:2f:50:59:e3:79:
63:82:e5:16:96:9d:bf:21:70:fd:63:7b:fc:21:d7:
80:09:ed:7a:53:5f:95:a6:45:d1:e7:eb:93:d7:e9:
c7:72:ee:11:ae:c1:20:33:15:ad:fe:4a:9c:58:b7:
fb:99:f8:92:be:10:1d:27:31:d0:e4:3a:ad:7e:64:
a8:c6:e4:42:00:09:9a:76:33:40:88:fb:92:68:84:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0D:63:B8:18:EB:E9:0D:08:2B:C9:53:02:E7:4C:01:9D:04:23:D2
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:76:c9:c0:85:02:98:d0:48:cc:49:04:0e:ee:b6:62:88:58:
8d:eb:22:f4:c8:e1:15:c3:8a:8c:db:c2:b7:bd:6f:59:33:37:
f3:45:0c:26:6e:3d:2a:4c:3b:a8:7c:af:db:e9:af:0d:aa:78:
31:f4:fc:16:69:59:5f:aa:46:ab:b4:28:9b:85:a1:17:71:ec:
7d:a7:93:28:86:6d:9d:ca:f9:3c:f2:c0:01:3e:67:2e:ef:08:
7d:ac:a8:f1:f1:fa:77:77:86:01:6d:ba:2f:1c:b4:47:54:4c:
cf:5e:38:de:1d:d2:22:e7:e0:6b:61:c7:85:bd:18:9e:eb:25:
4c:74:6a:7d:0c:71:c0:9c:4f:f7:af:0a:87:d6:49:95:ec:6e:
aa:7e:69:c6:e9:a2:9a:4a:2f:bb:af:c9:ef:54:a0:bf:35:35:
cd:45:43:ff:fa:59:fb:f2:58:d4:02:5a:38:48:9a:a3:9e:eb:
cc:53:73:0e:ee:10:06:4a:2f:fd:ca:0c:4f:0d:39:69:6b:0b:
21:d6:76:09:5c:75:35:64:d6:d0:7e:ab:4c:46:33:97:09:c2:
ed:00:7f:94:55:66:fd:0c:a8:08:6f:d4:30:76:d2:59:5d:7a:
d2:40:7e:dc:c3:6a:9e:a0:eb:cb:0f:ca:93:2a:20:71:eb:db:
42:1f:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:30 2026 by rpki-client