Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: vJ1MLsnVxd/UqhetFEL6UZ1XjBWi6KDS8iqBGx3jmec=
Subject key identifier: 7B:46:8C:9D:04:C2:6F:29:08:72:E3:99:AB:CB:42:C4:E1:5A:D5:E1
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 01A102B668CF19F91716BC98FAC5E0C85EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 130C
Signing time: Sat 03 Oct 2026 17:01:10 +0000
Manifest this update: Sat 03 Oct 2026 17:01:10 +0000
Manifest next update: Sun 04 Oct 2026 17:01:10 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: PCAQ20sLoI9IxyBzmsAA7KRFgseRQ8ShxzhGkUGOgVY=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:68:cf:19:f9:17:16:bc:98:fa:c5:e0:c8:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Oct 3 17:01:10 2026 GMT
Not After : Oct 4 17:01:10 2026 GMT
Subject: CN=7b468c9d04c26f290872e399abcb42c4e15ad5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:c6:88:cc:d5:83:e6:9e:ed:34:93:22:14:
2d:b4:b0:e6:4f:a5:55:59:24:7f:e6:7e:29:25:db:
dd:bc:92:4d:1c:4a:d2:b5:b3:93:d9:aa:e2:35:87:
f8:d0:1c:3d:43:24:9f:9b:8b:f9:dc:c3:e6:2a:c5:
a3:6c:d7:a3:fe:73:9c:68:08:08:b1:fd:d1:df:b2:
14:a0:16:05:46:60:08:d4:76:9d:7a:09:92:c6:23:
bb:0b:1b:e6:2a:d2:9b:3d:da:c5:c4:7b:13:da:d3:
12:3e:f5:77:92:00:46:f4:69:8b:1d:02:16:ba:5a:
a6:5b:92:39:e6:af:0c:fe:cb:5b:62:45:ff:c2:8f:
e3:9d:fe:ad:70:d1:03:b8:e6:38:fe:47:57:02:df:
b4:ba:01:72:5e:7d:a7:87:f6:8e:2f:16:60:a1:9d:
44:51:1b:5a:6a:ba:6b:6a:79:5f:34:b0:7e:02:3e:
50:09:7f:47:ef:04:33:50:4e:b8:f0:15:1a:22:e7:
52:f0:73:76:53:39:7e:1e:8b:1b:b6:49:aa:22:53:
fa:06:4f:a3:7b:69:ac:86:25:3e:54:77:af:07:e2:
f8:69:d3:da:74:0e:77:43:a0:d8:7c:c7:d3:86:54:
1d:2f:11:d9:28:ce:d3:45:65:e5:ca:32:87:b6:ab:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:8C:9D:04:C2:6F:29:08:72:E3:99:AB:CB:42:C4:E1:5A:D5:E1
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:1e:5b:48:b3:08:1b:e1:aa:6b:cd:0f:bb:71:15:4e:65:
87:13:51:bc:d2:8b:2a:75:cf:4a:bd:4a:1d:09:a6:0a:3d:5d:
0b:47:f3:2f:98:7b:e9:c4:ad:b4:93:53:e9:22:af:13:00:e3:
98:c7:bc:45:1e:f9:95:7a:79:d6:93:42:fc:ea:b9:2a:57:ec:
e8:de:68:ff:89:7b:42:49:bd:04:b9:35:85:90:8e:59:25:c3:
0d:c1:c1:34:e5:aa:c7:6c:a0:99:ef:d1:a1:8a:f0:2d:5f:26:
fa:73:27:44:6b:7c:52:31:ee:f9:39:08:ec:1e:a2:4c:16:cc:
00:6d:b1:ea:69:ab:43:9f:81:ea:5c:4b:51:8d:f5:14:56:08:
1d:9f:d9:24:eb:59:88:1b:80:bc:ed:89:bd:c7:71:4a:ee:e6:
f9:67:21:1c:95:40:ca:24:95:38:4b:1d:b1:7a:cd:9f:77:75:
0f:51:e0:7b:da:08:43:48:59:36:56:fe:0e:e6:59:41:53:62:
4a:2d:6e:ef:46:f2:48:21:dc:2e:ab:6f:e9:1e:d3:88:39:2c:
4f:19:25:52:27:61:47:a9:1b:04:99:92:a3:ed:51:04:17:49:
25:8f:77:28:ac:05:3a:f1:0d:7b:6e:e9:e3:bf:bd:0f:17:ba:
2b:0f:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:47:17 2026 by rpki-client