Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: 2DXKZwDz5W2LcGVlXUOOkqVaOxf4v2ei09AXqQiDZLE=
Subject key identifier: 74:62:87:7A:C6:C4:AF:11:75:0C:F8:33:1C:A0:B5:5B:EE:F6:FD:90
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019F9391E3A54FFB358AB7FD83D5981E5B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 10:00:39 +0000
Manifest this update: Fri 24 Jul 2026 10:00:39 +0000
Manifest next update: Sat 25 Jul 2026 10:00:39 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: pmn/5PKnLPb9hCfPfCGOzEp8ZtPSMy+RXhNeL8A7Gjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:e3:a5:4f:fb:35:8a:b7:fd:83:d5:98:1e:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jul 24 10:00:39 2026 GMT
Not After : Jul 25 10:00:39 2026 GMT
Subject: CN=7462877ac6c4af11750cf8331ca0b55beef6fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:e9:a3:70:cb:b1:38:07:db:03:71:82:b1:
00:98:71:8b:e3:42:7f:47:05:38:13:c3:0b:9c:22:
c7:c2:f2:34:3e:77:5a:f3:b4:6c:b2:93:0a:38:6f:
40:c3:73:9c:53:67:25:9a:77:b8:de:92:92:7e:59:
fa:ee:97:62:c2:76:f5:3f:32:02:55:06:d0:d1:3b:
55:86:ec:b3:40:79:f6:6a:3b:17:f5:46:b4:3a:b1:
cc:fa:1c:ed:d9:af:fc:2d:2c:48:e1:ee:c6:97:42:
0e:70:1d:94:00:e1:6a:5d:04:2c:72:c7:7a:b4:b0:
ff:d3:3c:37:93:c1:c5:35:54:a9:89:f7:29:41:76:
75:2d:59:78:27:64:32:66:b9:6a:3b:8b:a4:a5:14:
68:82:3e:12:7a:ce:08:da:ee:01:3b:e2:c6:e2:4f:
5a:ba:fe:ff:60:d4:46:37:2e:15:97:78:bb:9e:22:
da:23:ac:36:ef:a1:77:63:36:de:90:bb:de:02:3b:
97:b6:01:50:e4:c6:20:25:d5:21:8e:d5:a0:84:58:
f6:2d:88:cd:d1:6f:d8:ef:8f:b6:93:3e:20:1a:da:
39:4c:af:e5:a6:77:29:82:e5:9f:90:c1:7c:51:ea:
2b:53:21:a2:27:86:72:c0:3f:fe:48:3e:c4:31:8e:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:87:7A:C6:C4:AF:11:75:0C:F8:33:1C:A0:B5:5B:EE:F6:FD:90
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:5c:52:4d:6b:6e:24:21:5d:39:1d:11:fb:82:5d:93:45:
b9:ed:bb:10:22:e7:7d:8c:8e:04:7f:9b:6b:21:92:82:dd:86:
23:97:ae:6f:8e:ac:5a:bd:0e:60:2b:cc:fc:fc:dc:b6:76:cc:
9f:63:b8:2f:c8:8c:5f:46:3a:6f:3e:19:6c:85:fa:93:79:af:
7d:a0:da:47:db:68:ff:ba:15:69:0f:72:df:35:4b:9a:47:1d:
81:98:2d:4c:23:19:af:3d:85:a7:ee:71:c0:c7:f5:f4:e3:88:
47:f3:9a:2c:21:b4:d5:f8:f3:28:ce:5c:61:dd:4d:26:1e:e0:
58:fd:ea:c5:76:6f:5b:83:7f:40:4a:5c:47:15:2e:78:e3:d7:
22:d0:a5:90:1e:7d:82:99:30:15:b0:4a:ff:58:a1:04:e8:86:
e4:98:25:67:01:44:dd:c3:b9:a4:a7:d5:ce:72:00:c7:c6:7e:
3f:b2:56:2b:e0:59:0f:4f:5d:37:5d:73:57:9e:52:34:be:65:
8b:7e:0a:97:0b:30:e0:7e:23:c0:b5:c4:b9:82:26:b2:30:1a:
7c:ea:be:92:4b:9c:5d:00:23:07:5a:4a:40:3b:53:dc:ca:a4:
37:c8:00:04:1f:fd:c8:2e:0c:c2:c3:8a:2e:dd:65:b7:a0:1d:
ff:1b:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:48 2026 by rpki-client