Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: OjSaCDYnCdIa/EEKyVpDlHvI3P9FqZ8funcvt2iX7gE=
Subject key identifier: 78:01:05:09:25:A5:A2:88:F5:FE:60:36:B4:62:1E:DE:EF:D1:F1:82
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019F91DB3BB02200BC06C04F5E12409C0827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 102E
Signing time: Fri 24 Jul 2026 02:01:31 +0000
Manifest this update: Fri 24 Jul 2026 02:01:31 +0000
Manifest next update: Sat 25 Jul 2026 02:01:31 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: Qti2B+n3TRVkq9xuegvhh8vH5QUMeTXdV7g+udHZbC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:3b:b0:22:00:bc:06:c0:4f:5e:12:40:9c:08:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jul 24 02:01:31 2026 GMT
Not After : Jul 25 02:01:31 2026 GMT
Subject: CN=7801050925a5a288f5fe6036b4621edeefd1f182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:7a:e1:26:14:63:70:53:c6:20:df:a0:c9:
0b:93:62:cb:71:e6:8f:b3:02:c3:13:bf:a2:b6:e9:
eb:ec:b4:97:15:c4:e4:65:e6:c8:7d:fd:ff:64:35:
53:94:79:8e:32:c6:28:b8:ef:30:10:82:0d:8f:ed:
3c:c1:b4:80:71:20:e8:61:62:5c:8c:b4:e2:e6:d6:
19:5f:39:ee:e8:b3:49:10:22:ac:08:11:55:ca:7a:
8f:4e:af:10:8f:82:21:7c:4c:6c:5c:9e:7c:93:1e:
66:0f:c1:9d:35:8f:9b:bc:78:20:70:a2:0a:99:5c:
17:2b:a3:50:fc:02:9d:4c:c0:c4:ed:70:cc:6e:66:
60:bd:74:88:08:81:4c:57:1e:3f:02:9c:fe:66:af:
03:12:74:6d:77:2c:ba:9a:92:cf:82:82:00:cf:5b:
6e:e5:f9:50:b2:b7:88:ed:b9:ee:c8:d7:e2:e2:52:
e0:a4:ef:cc:23:90:52:a9:72:8c:c6:7a:fd:f4:9d:
37:60:4a:e7:04:e7:86:9f:96:1e:90:2d:7b:f3:e7:
c9:63:31:55:d3:1f:2d:28:a9:cc:f3:6b:ae:b1:08:
00:e6:e7:70:df:a0:e4:d6:69:bb:59:a6:a9:75:8a:
f7:b0:6e:ef:21:52:a5:a0:4f:e8:fb:ec:16:df:73:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:05:09:25:A5:A2:88:F5:FE:60:36:B4:62:1E:DE:EF:D1:F1:82
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d7:c9:92:a8:4d:9f:15:52:fb:63:52:40:3f:07:ce:1e:53:
58:65:ab:91:db:be:f7:e1:3d:00:40:25:46:29:c5:06:c4:0f:
e2:ef:a3:05:01:c3:f8:30:ca:c4:5b:e3:94:98:dd:66:3d:63:
a0:4e:62:29:3e:19:ea:9d:37:aa:60:b8:b8:eb:db:2e:cc:3d:
34:45:fe:da:b1:de:64:f1:9e:8e:24:3d:c7:64:d5:cf:63:48:
9c:e9:35:cf:df:1e:ff:a8:f5:98:85:2c:9c:cb:6f:06:ac:b6:
3f:0c:53:be:3d:63:dd:bf:b2:d5:84:5f:55:13:51:5d:60:d4:
54:9b:bb:a7:62:5b:9b:36:f7:38:70:a1:35:80:a8:ae:60:8c:
9a:f7:90:36:b9:55:64:c9:33:a3:79:c7:74:a1:78:bb:68:ff:
87:ae:66:4f:24:96:6e:44:25:d4:f2:49:ed:0e:c8:bf:8d:77:
8d:59:05:6d:c0:a5:6f:dd:63:0d:08:cb:20:c0:43:a3:79:6f:
a2:5f:ec:9e:90:2a:92:68:77:05:42:c2:bd:48:c9:d9:57:7b:
77:b7:81:da:2d:4a:8a:21:1a:c0:e7:75:a2:5c:07:61:dd:b1:
71:7f:81:2c:84:a8:39:2c:73:62:4b:85:c1:e5:db:44:89:6a:
e1:64:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:43 2026 by rpki-client