Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json)
Hash identifier: D71v9IXezARG856xWRei6t/33HcqN7U9AvxhftPLIUw=
Subject key identifier: F4:8E:BA:B5:50:46:07:63:67:A6:8F:1B:44:2C:1B:47:D2:95:6E:5A
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 01A13E25B0786B7E8A952C7D9F5245BFA6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
Manifest number: 19E4
Signing time: Thu 15 Oct 2026 06:00:19 +0000
Manifest this update: Thu 15 Oct 2026 06:00:19 +0000
Manifest next update: Fri 16 Oct 2026 06:00:19 +0000
Files and hashes: 1: BT7pM6aA48OhQBOTNTxsIIj998o.roa (hash: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg=)
2: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: oO+AGNS+dOfOs21/+XiZ3HWsNnnQQn8E06zwl+PECVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:b0:78:6b:7e:8a:95:2c:7d:9f:52:45:bf:a6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Oct 15 06:00:19 2026 GMT
Not After : Oct 16 06:00:19 2026 GMT
Subject: CN=f48ebab55046076367a68f1b442c1b47d2956e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:ff:c7:e9:c6:c5:74:69:43:3f:14:e5:9c:
df:44:ac:0e:bd:c6:ce:29:da:b5:d2:de:23:04:5e:
de:0f:8a:cf:21:73:e2:c1:4c:21:bb:09:fc:90:0a:
14:b1:f1:78:1a:75:12:b0:45:c2:e3:38:6a:c6:ed:
be:4b:2b:8b:d8:6b:23:fa:18:9d:16:ca:81:0d:a7:
0f:d1:81:58:f2:c5:88:24:7f:28:56:12:f1:2d:eb:
d9:3e:a6:76:89:63:3b:8b:97:6f:d2:5d:7b:31:9a:
06:0c:ae:19:f5:26:5e:b7:ba:b5:09:61:4a:4e:ad:
7c:d5:38:f8:5c:13:dc:b9:fb:2f:49:96:99:d8:38:
36:b5:7d:d3:be:f8:9b:bd:aa:92:19:75:b0:8d:9a:
e1:0a:29:11:d4:95:47:86:6e:7d:6b:a8:70:8b:b9:
b0:07:c3:e3:e0:88:eb:6a:ff:34:1b:a1:68:84:82:
d2:5b:3e:b0:f6:71:a6:48:38:ca:53:c5:cf:59:f5:
b3:fa:ca:e3:57:fe:b0:40:6d:c3:96:71:a7:2b:cc:
b8:a5:79:22:56:16:6c:36:d9:f1:fa:3e:35:14:ef:
7b:c0:88:27:ae:77:54:7a:8c:1a:53:04:3a:65:5c:
c5:3b:25:0a:d7:9a:73:93:7c:8e:50:a9:01:4a:c1:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:BA:B5:50:46:07:63:67:A6:8F:1B:44:2C:1B:47:D2:95:6E:5A
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4c:6c:4c:0b:1d:ea:f0:d8:ea:a4:c2:e6:b1:a8:4b:ef:b2:
19:31:45:1e:07:16:0b:fd:71:11:7a:d5:87:c9:6c:62:b6:4a:
20:6d:59:63:55:f6:68:19:d9:fb:d9:1c:53:d6:88:4f:4e:ff:
ad:13:eb:71:f3:2b:85:12:16:46:0c:16:84:ae:29:95:de:6e:
69:36:03:a0:ef:26:0f:c2:9d:2b:db:8c:77:35:b6:6c:e5:6b:
5b:92:ec:64:94:ee:59:b9:1d:23:77:84:51:ea:e9:1e:51:f1:
68:4c:ba:e9:af:73:60:d0:09:c8:19:d8:eb:81:bb:ac:3b:eb:
6c:68:82:d6:be:87:02:87:53:70:c1:7d:48:bd:02:ee:1b:f1:
ba:b0:63:b3:bf:fe:18:77:71:0c:55:bc:54:ca:e0:13:3d:c1:
e0:d9:c0:43:56:df:0b:2b:46:03:8f:c4:01:e2:03:e9:8b:ce:
0d:70:2d:f5:5f:55:7d:f3:42:2e:9a:1a:12:a0:9e:c3:49:dc:
97:b0:9a:d8:4a:2f:0a:2b:2f:70:31:c1:01:7d:12:e6:d5:84:
63:27:38:23:ea:99:41:db:0c:36:5e:43:1e:30:60:88:0b:5d:
d9:22:d4:c4:01:67:11:7f:ed:a7:fb:88:78:50:39:84:66:84:
65:eb:f5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JbB4a36KlSx9n1JFv6bSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5
MjIwNWMwHhcNMjYxMDE1MDYwMDE5WhcNMjYxMDE2MDYwMDE5WjAzMTEwLwYDVQQD
EyhmNDhlYmFiNTUwNDYwNzYzNjdhNjhmMWI0NDJjMWI0N2QyOTU2ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09T/x+nGxXRpQz8U5ZzfRKwOvcbO
Kdq10t4jBF7eD4rPIXPiwUwhuwn8kAoUsfF4GnUSsEXC4zhqxu2+SyuL2Gsj+hid
FsqBDacP0YFY8sWIJH8oVhLxLevZPqZ2iWM7i5dv0l17MZoGDK4Z9SZet7q1CWFK
Tq181Tj4XBPcufsvSZaZ2Dg2tX3TvvibvaqSGXWwjZrhCikR1JVHhm59a6hwi7mw
B8Pj4Ijrav80G6FohILSWz6w9nGmSDjKU8XPWfWz+srjV/6wQG3DlnGnK8y4pXki
VhZsNtnx+j41FO97wIgnrndUeowaUwQ6ZVzFOyUK15pzk3yOUKkBSsEJDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSOurVQRgdjZ6aPG0QsG0fSlW5aMB8GA1UdIwQY
MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt
Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4
LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYExsTAsd
6vDY6qTC5rGoS++yGTFFHgcWC/1xEXrVh8lsYrZKIG1ZY1X2aBnZ+9kcU9aIT07/
rRPrcfMrhRIWRgwWhK4pld5uaTYDoO8mD8KdK9uMdzW2bOVrW5LsZJTuWbkdI3eE
UerpHlHxaEy66a9zYNAJyBnY64G7rDvrbGiC1r6HAodTcMF9SL0C7hvxurBjs7/+
GHdxDFW8VMrgEz3B4NnAQ1bfCytGA4/EAeID6YvODXAt9V9VffNCLpoaEqCew0nc
l7Ca2EovCisvcDHBAX0S5tWEYyc4I+qZQdsMNl5DHjBgiAtd2SLUxAFnEX/tp/uI
eFA5hGaEZev15w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:37 2026 by rpki-client