Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: fNn7PY9A8F+X1yfAUy95NRaTOOT+PGpkPF/GSuS8n9E=
Subject key identifier: E3:3F:89:DE:F9:CB:FF:00:31:00:8C:F7:C1:64:CA:E4:E8:EB:BF:01
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01A0D011F38AD09F7E02B390CBDDD599AEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 14A2
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: J1BJBrHLUj5RXesoUyj/nD1s41H80NWL+DvYXrf7GmY=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f3:8a:d0:9f:7e:02:b3:90:cb:dd:d5:99:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=e33f89def9cbff0031008cf7c164cae4e8ebbf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:92:b1:0d:70:53:90:04:28:4d:50:ab:66:
c4:36:b3:6b:7a:59:db:01:3d:4c:82:63:a2:6d:78:
be:8e:c7:28:dc:5f:ce:7c:3e:44:6d:ca:53:50:8b:
cd:3d:ba:18:39:c1:10:c7:8a:ce:f4:f0:68:14:08:
7a:d9:bf:46:bd:20:6a:73:81:08:f1:07:0f:4b:ff:
3d:d4:73:4a:19:1c:5b:4d:cd:da:78:61:b6:8c:4c:
53:b7:f8:11:7e:80:53:8e:38:28:79:ac:5f:5a:5c:
3f:e5:b7:82:96:79:76:d3:f9:cf:f7:f9:00:12:48:
04:d5:3d:ba:e3:53:bc:5a:49:d0:58:7f:62:f9:da:
54:42:d5:da:74:86:05:8b:17:8a:a0:b0:3d:cd:f0:
e1:9b:a5:b1:f0:ee:4d:de:81:81:4d:10:0a:75:37:
82:8d:35:79:9a:db:23:3a:9c:e9:69:19:45:6d:ea:
1a:b5:bf:04:a2:58:b9:8d:30:af:9e:98:3e:75:e5:
85:fe:94:81:a3:ad:57:91:77:3c:7c:00:2b:39:8f:
55:b8:09:69:79:55:1b:b4:79:08:10:cb:be:d5:20:
62:b2:6a:80:87:94:b7:1a:26:e7:86:7c:9f:89:4e:
b3:1a:7d:86:2b:ae:18:3d:f2:58:c8:6b:97:fc:88:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3F:89:DE:F9:CB:FF:00:31:00:8C:F7:C1:64:CA:E4:E8:EB:BF:01
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:78:32:b1:f0:5a:d3:3c:f6:a1:91:cb:4d:ed:1f:d7:6c:bc:
a0:1a:ad:de:3a:29:78:6e:a1:40:d3:29:c0:92:26:0d:96:86:
3c:7c:4a:21:1d:9f:8a:66:48:ff:ba:41:f8:25:46:21:27:17:
b3:d9:e1:1e:50:c0:59:a0:0c:8d:1b:e1:35:b9:75:72:92:70:
28:1e:95:27:14:56:bf:8f:62:0c:f4:a6:d6:d9:46:80:57:b4:
ad:a6:4b:6f:f7:c5:18:20:6c:e8:a3:5a:fd:0e:ca:b6:93:62:
9d:5a:06:8c:d4:d4:14:50:89:5c:ba:4f:dc:d6:7d:53:eb:24:
7f:9c:e3:c7:50:59:4a:61:e8:04:36:41:79:ce:9f:85:30:32:
29:43:0d:ed:ae:ea:e0:0b:e7:38:87:af:02:6e:c7:7c:47:89:
8f:d5:57:84:a6:5e:f2:58:17:f0:fa:8e:83:20:82:d4:d1:5d:
7a:00:3e:cc:b6:53:3c:47:7f:c8:5d:7d:4d:27:ef:58:6f:66:
0c:bd:67:1c:e2:af:07:5e:5b:03:d8:de:f0:fb:d9:e7:86:32:
59:bb:e7:49:7e:96:fe:13:3e:93:73:40:2d:71:6f:71:75:bc:
2e:8b:44:37:b3:15:fd:97:44:e7:30:9a:f6:fe:0f:b9:5b:7e:
01:3e:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:55:43 2026 by rpki-client