Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 8lITAvFjJTXgajvuEo6m17yVF9bKCMT/DZyQgDr3PnM=
Subject key identifier: 74:0B:DE:EC:FD:7F:0A:19:50:31:75:07:5E:35:A4:FC:B8:20:6F:20
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019E1F115192A83E5346CA5F653A609B6AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0F6E
Signing time: Wed 13 May 2026 02:01:29 +0000
Manifest this update: Wed 13 May 2026 02:01:29 +0000
Manifest next update: Thu 14 May 2026 02:01:29 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: Hi2cR2uy/wQ3hN087nlqYCJo1ystreb9PH7TN4Dv+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:51:92:a8:3e:53:46:ca:5f:65:3a:60:9b:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: May 13 02:01:29 2026 GMT
Not After : May 14 02:01:29 2026 GMT
Subject: CN=740bdeecfd7f0a19503175075e35a4fcb8206f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:82:d0:e2:59:89:a7:94:97:f1:65:91:c1:
67:f1:bc:4e:bc:44:b6:a5:27:95:4e:bd:74:f5:1c:
e6:f5:b6:be:af:2f:b8:42:40:3a:c7:ea:a9:8c:77:
1c:cd:f0:6f:35:55:3f:e7:77:22:55:45:bd:03:c8:
84:2a:93:da:2b:79:51:a6:c0:95:63:85:d5:3f:3c:
c4:17:6b:75:e8:c3:c0:fc:e9:3f:4c:7d:56:d4:5b:
ba:a9:5e:bd:70:43:70:11:56:1a:28:59:1d:a0:be:
d9:a5:7f:b8:3d:c7:e4:ac:c8:12:c3:30:22:9e:26:
58:0d:b6:1f:85:45:c9:15:84:3d:98:0c:3b:56:ca:
80:2c:b5:fb:58:f6:7e:41:39:d5:e3:7b:45:f2:64:
5b:38:68:87:ed:b0:39:ca:a3:5c:e9:c6:5d:86:91:
68:d2:90:b0:67:08:75:c2:e4:e3:41:40:36:e7:e4:
55:a0:aa:35:07:b8:1c:d2:6a:dc:ec:b7:43:0b:23:
5c:c9:21:79:28:30:9c:cf:49:78:0f:b7:c2:8f:d4:
92:2a:de:fc:2d:e3:15:70:45:53:f5:c6:d2:de:16:
89:3b:e6:93:7f:06:b1:bd:e3:8e:fa:63:4f:2b:3c:
9f:05:1b:aa:cc:e7:3f:33:d3:67:cc:67:52:7d:11:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:DE:EC:FD:7F:0A:19:50:31:75:07:5E:35:A4:FC:B8:20:6F:20
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:81:f3:ec:51:8d:fd:14:54:41:ed:86:e8:f7:5f:e2:b1:2e:
c4:4d:f6:f7:6e:d7:58:0f:7b:f5:a1:e2:07:98:7f:e2:f8:88:
f9:77:14:a4:66:45:9e:9d:89:be:f5:11:39:e0:15:c6:02:14:
2a:79:12:7f:d0:28:aa:a4:c1:c8:46:3a:18:02:43:b8:c5:5d:
d8:ca:b6:27:fb:cc:24:e1:a0:be:f9:fa:f8:16:f4:e3:5f:fd:
57:9c:b0:61:46:5c:b5:ee:75:3a:db:e3:83:ea:c4:a2:3e:63:
d3:9d:08:ab:90:9a:25:07:a6:54:af:2d:cb:c0:fb:1b:33:39:
24:35:ae:16:31:2a:30:d0:35:62:4e:7a:cb:e6:fd:02:68:37:
a4:fa:9b:76:9e:c6:35:08:ef:81:eb:42:41:7b:08:d4:2f:ff:
3a:98:1d:c1:93:12:98:8d:71:ef:fa:37:8f:24:15:01:36:42:
76:37:a4:fb:5d:07:9a:82:6b:a4:22:c9:74:73:24:22:b2:e9:
5a:ba:b9:9d:48:71:73:c0:3a:35:b9:c2:95:36:3c:4d:1c:60:
09:88:d2:7e:46:94:da:0a:18:ad:e5:b0:80:97:8a:7b:ed:d5:
5f:3f:1b:04:52:0a:b4:84:a2:f3:97:de:21:20:24:d3:ab:0b:
b4:f4:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:09 2026 by rpki-client