Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: Fja8pRNootVTIbANxm410rC02vSDQhPBtBTsfSF4QXw=
Subject key identifier: F6:72:8E:F8:AE:A1:0D:19:FE:F4:BC:F8:03:10:49:33:81:D4:FB:25
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 019F91DA19BCAA177E4C5AB643C71981F92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 124D
Signing time: Fri 24 Jul 2026 02:00:17 +0000
Manifest this update: Fri 24 Jul 2026 02:00:17 +0000
Manifest next update: Sat 25 Jul 2026 02:00:17 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: /VTrNdUKrUYCssZGCNll8hedjyufPUKEKK9+h+EIljw=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:19:bc:aa:17:7e:4c:5a:b6:43:c7:19:81:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jul 24 02:00:17 2026 GMT
Not After : Jul 25 02:00:17 2026 GMT
Subject: CN=f6728ef8aea10d19fef4bcf80310493381d4fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:cb:a6:62:79:70:65:e8:5f:66:dc:22:4e:
33:54:07:b3:91:e8:07:7e:b3:fb:36:ce:db:a8:1b:
67:0b:6f:26:91:2b:97:8e:2d:09:69:66:1e:e4:b6:
5c:1c:31:64:00:01:a1:cb:3c:af:c0:83:0a:9f:c3:
39:04:9b:4d:91:12:d3:1d:ee:d4:d7:33:84:9b:1f:
3b:59:f6:d3:30:a0:a7:6b:08:b2:bb:83:1f:41:a6:
a5:48:88:e2:6f:e1:1c:c0:7e:f7:19:b9:93:50:0f:
22:d3:4f:4c:b2:d7:96:94:e8:51:8f:3b:99:b7:a9:
01:27:52:8f:9f:fc:ed:d0:93:fc:9d:5f:69:74:c1:
30:f5:da:75:df:ea:89:ba:2b:09:a0:7d:38:eb:84:
cd:14:a1:15:a0:9b:6b:c3:33:e5:35:4d:d1:58:dc:
fc:3e:cc:2f:45:9c:2e:46:15:0d:7e:e9:17:65:c4:
61:28:e2:29:70:87:00:d8:44:74:23:57:23:d0:be:
35:63:b5:0f:18:c2:d5:5b:fd:da:03:f4:b4:2a:b5:
a0:a4:62:66:72:e7:bb:9f:8e:21:83:04:e3:a0:50:
f1:f7:5a:b2:02:75:73:c4:3c:46:98:6c:2f:c9:69:
f1:34:ec:3c:06:f6:72:e7:fd:07:f2:b7:39:8c:28:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:72:8E:F8:AE:A1:0D:19:FE:F4:BC:F8:03:10:49:33:81:D4:FB:25
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:78:49:16:e0:b4:c0:2f:f9:8a:c4:d1:c1:fa:44:93:dc:df:
7f:88:bb:35:61:24:0d:57:fa:7d:b4:a3:64:2b:95:f4:7d:3a:
b7:2a:78:0c:91:b0:6f:0a:3a:58:11:f0:9e:04:39:9d:b2:fc:
94:2c:7b:09:a3:71:47:8a:4d:df:57:d3:ed:a6:0a:c0:85:23:
b5:f7:dc:4a:d6:46:95:9f:70:8d:64:35:56:2f:85:d2:cc:a4:
78:49:0d:b9:93:02:73:27:40:be:24:c3:90:e0:ca:0b:a8:2d:
ba:49:ac:5f:66:d6:72:a8:06:ff:ff:08:86:bc:79:db:05:3d:
ed:ad:ff:e6:9e:31:00:70:cc:62:8b:36:26:3c:47:04:87:86:
18:64:23:8f:16:b3:89:5c:a3:85:43:e0:34:8f:da:22:b2:92:
dc:3c:cd:fc:f8:06:bb:d0:30:f0:9e:6d:18:73:c8:ed:08:2c:
31:f8:1c:2b:e9:20:29:b3:a9:47:7c:88:5b:2f:97:d4:70:17:
2c:0d:b1:16:5f:ca:e0:e1:75:60:7f:be:ac:52:24:bb:e1:2e:
f7:60:1d:8b:fd:fe:45:27:76:05:ee:7a:b9:f2:1a:e6:6f:03:
21:c9:ec:6c:56:1e:8e:0e:7f:12:8f:00:a0:93:2f:da:d8:e3:
08:8b:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:05 2026 by rpki-client