Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: AcVBZpaEJKlBqu7ENULyN3iTULhCdWhg6Rc62Xw5vlQ=
Subject key identifier: 5A:5E:4D:71:53:DE:1F:A9:8F:7B:C5:31:CF:49:4D:34:C6:EB:2D:E7
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019D27A92334EE32D6C9E7A9829A32C69E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: 66fOCCOrWGDpUA5+Q0KY9mPBBUcDPRrMMst5wxF1rFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:23:34:ee:32:d6:c9:e7:a9:82:9a:32:c6:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=5a5e4d7153de1fa98f7bc531cf494d34c6eb2de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:55:a9:67:4a:c7:7d:cb:69:1c:e5:21:51:
5c:f4:f4:b2:c1:2b:a8:85:e0:14:77:fd:5a:b5:53:
d6:d2:81:59:fc:a2:8e:32:e1:b1:7f:b6:3e:11:8b:
ad:cb:6e:e9:99:74:cd:b2:52:33:42:a7:6e:71:bc:
6a:05:ee:9a:30:18:2d:dd:59:c9:8c:49:4a:15:92:
e0:84:b7:35:96:11:5d:c6:fe:0b:5f:ba:cc:bf:ab:
2a:fb:83:eb:c6:4c:dc:55:4e:31:e7:d5:37:9a:22:
78:04:c7:77:70:b1:1d:c4:e5:87:d8:56:6e:e1:9f:
f2:54:23:90:15:a9:83:3e:6d:67:ab:d6:5c:3a:ec:
31:21:29:57:86:c7:33:46:87:a4:53:39:4b:87:14:
ac:93:81:fc:03:bc:20:8c:7f:cd:ed:46:20:42:51:
81:db:73:95:4e:10:e2:42:00:d6:3d:af:c6:7a:e1:
9e:30:bd:85:3c:e5:88:25:dc:f0:8c:d4:73:58:04:
f0:14:06:dc:6c:96:eb:64:db:66:a5:46:67:38:63:
33:3a:a2:7c:75:05:ac:73:49:75:a1:75:47:e2:a3:
d4:0f:d9:7d:a4:5c:f0:17:5e:8f:09:ad:a6:49:7c:
25:ed:c1:a5:7c:f6:fd:12:c5:f1:bc:91:41:bd:e9:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:4D:71:53:DE:1F:A9:8F:7B:C5:31:CF:49:4D:34:C6:EB:2D:E7
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:89:24:50:37:ef:f8:b7:91:90:82:98:80:a7:74:b4:2b:61:
31:16:82:5e:ee:f1:52:74:93:32:55:45:60:3a:67:2e:3d:2c:
0b:de:f2:df:53:66:09:10:b5:d7:6d:96:f2:a8:3c:c8:38:7e:
12:57:2d:5f:ac:96:c7:fc:3f:0a:fc:e9:3a:f2:44:9b:34:49:
1f:02:f5:7f:e0:d0:40:2e:3e:4d:02:1b:09:78:38:c1:09:c3:
e9:e1:38:9d:2d:88:2d:37:fe:b7:17:51:12:77:b0:e7:6a:c5:
7e:10:92:aa:29:35:13:17:41:fd:c2:fc:02:ae:3d:f8:a8:d6:
6f:22:e5:f4:86:48:0c:30:53:3e:7e:48:21:3b:7b:e0:0a:94:
73:c3:94:fe:95:43:65:97:f1:3f:09:fa:ec:68:79:22:f6:7f:
d4:8c:43:a0:fd:15:09:64:1c:fd:73:fc:02:6e:78:dd:46:6c:
c0:7c:07:c1:b7:90:7f:a9:c9:70:6f:6d:f9:ae:01:b4:4a:86:
8c:19:a3:04:4a:7d:62:a0:6c:21:aa:9d:8a:70:f8:7d:67:80:
aa:d8:b2:ce:00:9a:f9:17:0d:6a:25:67:07:c7:1f:2c:e5:91:
be:47:ce:2e:11:f8:d5:63:3a:22:f4:52:6c:53:e6:dd:02:da:
16:6c:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:44:03 2026 by rpki-client