Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: X+pQ9zojkxFM6+9GXdfneT53KRP1tcQgY95gjmXq2kw=
Subject key identifier: F0:C6:55:FE:B2:79:B9:16:38:4F:51:0B:5C:11:C9:C4:56:D6:F2:D2
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 019E1F111F2395D1A317FEECE656E63F89CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 118D
Signing time: Wed 13 May 2026 02:01:16 +0000
Manifest this update: Wed 13 May 2026 02:01:16 +0000
Manifest next update: Thu 14 May 2026 02:01:16 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: IQbT0uR9L4WfyzcfoX18ElatRw1im1FU08hzIM4/gHk=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1f:23:95:d1:a3:17:fe:ec:e6:56:e6:3f:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: May 13 02:01:16 2026 GMT
Not After : May 14 02:01:16 2026 GMT
Subject: CN=f0c655feb279b916384f510b5c11c9c456d6f2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:09:b0:3b:87:ce:c9:4c:ec:f1:5a:b9:f7:
3d:3b:d3:73:38:58:55:1e:36:e3:20:ef:a1:23:1a:
e6:02:ce:19:58:61:72:ce:5b:b2:dc:bf:03:77:84:
77:e1:43:57:6b:90:6b:c9:3a:a0:44:17:c7:7b:97:
e4:d0:55:d5:f5:ad:b3:ea:42:43:8e:c7:7f:7b:af:
cf:63:5c:be:7a:bd:79:64:ba:16:71:a4:15:ec:ab:
80:12:d4:7e:db:7d:58:8c:29:85:cf:60:4c:c4:9c:
2f:ff:04:90:20:d8:eb:11:7c:fe:89:37:74:43:21:
79:1c:f9:07:4c:11:4f:11:f7:03:c5:ea:3a:05:7e:
77:0a:06:c4:b2:10:fb:a6:1f:36:0e:9d:a2:2a:10:
55:5d:69:4c:eb:1a:03:63:f4:8c:a0:f6:80:35:8d:
4b:65:38:e6:ee:62:2a:70:5c:9c:67:f6:0b:94:b9:
51:63:ad:47:4d:d2:76:9a:3d:64:80:75:1d:34:74:
82:c7:54:ea:6c:1c:56:0d:b1:49:0e:0a:c5:b9:06:
41:99:a3:3a:01:15:fc:19:be:27:56:1e:e5:8f:f0:
1c:02:91:71:35:ac:33:e4:9d:3d:75:bd:7c:a0:cc:
e4:9c:46:59:67:f8:bc:bf:53:54:d1:27:23:4e:a9:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C6:55:FE:B2:79:B9:16:38:4F:51:0B:5C:11:C9:C4:56:D6:F2:D2
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:12:bd:f2:4c:23:e0:c2:04:01:15:fb:3b:ec:ba:9e:0d:07:
6a:ef:5f:22:64:d9:21:78:fa:64:dd:c0:4c:d9:a0:dc:4b:20:
59:af:f2:e4:c3:fa:23:4a:7a:a2:c7:ec:1b:4b:d6:a7:0f:f6:
f7:a5:06:c0:ba:77:a0:1f:c2:f6:1d:43:4b:c5:dd:7c:17:0f:
a8:c6:b6:49:2b:7d:7f:6f:6f:13:7d:c2:2e:eb:5e:a0:b5:ce:
2e:21:7c:ee:70:9c:6e:3b:b3:fb:7b:5d:13:1b:c6:21:e2:c7:
f5:65:ae:27:5d:49:6e:b1:9a:ab:93:00:e9:7c:dc:97:5c:a3:
15:0c:7f:cc:e3:bf:c5:89:25:aa:29:ce:ff:fd:62:73:41:ef:
cd:88:7c:19:7e:06:2b:3f:08:c6:c3:ea:10:44:b4:82:1f:cc:
92:3a:f3:37:50:b3:a7:6a:da:5b:34:79:30:86:8d:75:52:7b:
65:be:c0:bb:83:a5:4d:1b:3f:88:7e:0e:5c:43:81:95:93:f9:
6d:89:1a:bc:44:75:22:18:4c:6e:80:ef:d6:1c:18:ca:7e:39:
ae:61:24:29:06:de:38:b1:9f:e4:c1:a3:52:ab:32:83:ea:22:
1c:8b:65:1e:5d:5a:ca:d4:b8:db:c4:f6:4a:32:e6:5c:92:f6:
8e:a0:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:33 2026 by rpki-client