Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: gv6QrIHqtX06OBmAKVmIB0MYsKAnJMi5GMpJJEK2Ln4=
Subject key identifier: F4:2C:D4:BE:CF:F9:45:36:82:35:89:6B:14:C8:5E:01:C6:63:FF:B2
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 019D25F1A0B74AC8D65AB20F0D00A6BAA513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 110C
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: i1V1RapuMNssRpy0v32vUfBOg8moPglG034xNie9VZ4=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a0:b7:4a:c8:d6:5a:b2:0f:0d:00:a6:ba:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=f42cd4becff945368235896b14c85e01c663ffb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:14:e6:99:52:c5:f8:3f:67:b3:45:11:d7:
a2:2d:97:e0:dd:5f:c7:ad:d0:8d:6c:e8:5c:73:fd:
88:00:ef:9b:05:b6:e1:30:02:2d:c3:a0:fc:c6:21:
22:98:13:9c:e2:cd:10:5e:36:88:f4:85:66:84:6b:
00:5a:29:40:cd:3d:53:e4:2c:6b:bb:7b:41:bc:0b:
49:a0:3f:e8:fb:b4:ad:9f:f1:50:61:8f:9f:1e:81:
36:00:2d:a2:06:0b:24:f0:5b:57:cd:9c:e5:c8:1c:
08:b6:0a:5f:3f:8c:21:0c:9c:90:95:01:90:45:83:
49:74:ed:cf:dc:d7:91:62:47:cf:58:d9:08:4f:d8:
4e:ff:16:99:69:60:13:0d:e5:df:ea:84:07:c2:0b:
99:7f:fa:db:bc:63:ce:b0:fb:a5:87:1f:18:47:50:
00:3f:07:60:4e:c9:01:0f:8e:8e:9e:70:df:0c:71:
5e:c4:52:1d:47:da:f7:d9:ab:0c:ec:4c:d8:aa:a3:
97:00:c5:a9:d7:e7:5f:6a:9a:d1:8b:17:ca:85:f7:
fb:48:f2:06:fb:03:b6:1a:86:c2:de:05:74:cd:43:
76:c9:b6:c8:99:ad:9e:86:11:9a:7b:75:a8:5f:fa:
8b:0a:1c:58:7b:ea:0b:63:2d:dc:a4:e9:3f:d9:03:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2C:D4:BE:CF:F9:45:36:82:35:89:6B:14:C8:5E:01:C6:63:FF:B2
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:55:51:1d:b6:f2:85:92:41:9c:2a:21:9c:5f:c6:15:8e:c5:
db:a1:ed:b8:87:4f:ff:0d:69:ac:bf:43:8f:cd:c7:ec:d4:1e:
d8:56:04:9f:bd:d2:aa:78:df:80:bf:86:76:99:1d:23:55:11:
b3:a8:2f:2d:4d:4d:42:fc:5f:a2:8b:0c:53:4e:38:a9:f3:f0:
c2:86:22:de:c9:73:23:05:fe:d1:9e:c5:05:a4:3e:f6:25:fa:
93:ed:6f:ce:10:84:5c:00:2f:8e:cf:8d:ae:a3:da:eb:af:da:
19:1e:e2:6c:ce:a9:11:e7:09:58:05:68:8e:b2:e2:f0:6e:71:
b5:0f:9d:08:82:2e:0b:14:74:f6:36:e8:a2:78:90:95:9b:ec:
ad:60:3c:b0:00:bd:f7:4b:2e:bc:ce:57:e8:6d:ed:20:f5:f4:
78:5e:d9:2b:d1:b6:6c:32:a8:79:76:1b:f6:b0:35:8c:91:43:
d2:3b:36:7f:3c:d7:97:ee:ac:11:26:35:56:58:b5:f1:30:92:
28:27:c3:31:0b:f2:7f:0a:50:38:47:73:ec:e3:ef:c0:96:1a:
20:06:58:c1:87:1d:a4:63:30:a9:87:1b:25:cd:83:20:bd:a8:
a2:ba:5b:27:77:9a:55:20:48:2e:2c:7d:82:f2:d0:2b:a2:c1:
83:f2:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:09 2026 by rpki-client