Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: rz7jFGM6GKfeE+5FF+Sv3YCshs8lbMuJH7Refc3uBxU=
Subject key identifier: 40:FE:E3:CD:42:B7:F7:E6:34:4D:A7:28:31:A7:02:F7:E9:93:F1:32
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019E1ED9B79EAD2216689FD165E5F783FA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 01:00:45 +0000
Manifest this update: Wed 13 May 2026 01:00:45 +0000
Manifest next update: Thu 14 May 2026 01:00:45 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: jbc5+RttkiIzgBlmAN+BfHZvl8wsCsrvky4kj7A73Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b7:9e:ad:22:16:68:9f:d1:65:e5:f7:83:fa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: May 13 01:00:45 2026 GMT
Not After : May 14 01:00:45 2026 GMT
Subject: CN=40fee3cd42b7f7e6344da72831a702f7e993f132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:62:af:1e:13:66:95:69:2f:aa:27:88:61:
75:21:f1:b5:20:8b:c6:ee:fb:c8:45:28:1f:23:40:
be:e7:4a:fe:39:77:68:c7:49:fd:fc:d4:eb:3d:4d:
12:32:4d:cb:4c:a4:ca:8f:0c:25:20:2d:b7:7e:e6:
b2:16:1f:ec:be:32:8e:34:6a:4c:8f:77:14:40:83:
ea:08:b2:52:aa:35:ac:50:0f:9f:40:ee:2d:ff:f8:
87:36:e5:b9:b3:23:f3:32:69:d6:2b:4b:70:39:2d:
f2:b2:27:39:e6:93:dd:98:6e:6b:bd:ea:d7:e6:39:
c8:81:56:61:f1:d4:26:3e:67:56:82:52:c5:01:26:
32:88:12:1d:4c:fe:fd:f8:4e:a2:0a:9e:67:88:51:
11:45:b3:91:46:2d:85:7c:fa:f2:ce:26:f7:17:13:
c8:2f:29:3b:6e:e5:02:05:73:0d:f9:d9:eb:85:98:
f7:15:e2:56:fa:43:d5:a5:bb:44:21:a4:07:8b:23:
ca:ef:d6:bf:84:f4:90:e9:a8:4e:c2:96:78:48:eb:
c5:10:20:19:bd:54:a4:ae:b1:47:4c:21:88:ac:83:
5b:ea:87:43:84:a9:f0:95:93:ed:67:27:0a:3d:cc:
ef:a3:ba:db:15:ef:fc:e1:c7:0f:89:8d:9e:52:e2:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:E3:CD:42:B7:F7:E6:34:4D:A7:28:31:A7:02:F7:E9:93:F1:32
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bb:8d:2e:4a:5e:08:12:a6:34:03:5b:de:4a:61:fc:61:11:
bd:dd:d3:78:64:f2:d7:88:3a:bc:0a:a3:c3:e1:89:36:41:fa:
2f:22:c9:c5:8f:7d:59:88:bc:66:40:4a:19:69:b0:9b:3e:36:
20:00:4e:48:7d:da:db:e3:f5:43:58:93:66:17:c7:79:38:59:
a3:d7:31:02:2e:1a:53:98:87:48:f6:3c:05:7f:4e:7f:18:0e:
73:3b:75:8f:1d:ec:74:7d:46:52:d9:90:d4:9b:a8:48:9e:ca:
2a:a8:c1:eb:62:af:34:ca:8c:9a:d3:36:39:45:3b:59:a9:ed:
83:aa:d2:79:45:83:cc:1c:27:a7:b2:ad:9c:2e:56:e6:11:31:
0e:b2:90:3f:4b:17:35:d6:b4:a6:e7:a7:6e:42:42:18:8c:36:
e7:4f:1f:5e:f4:19:fc:70:b5:f1:54:4c:07:4c:cb:50:2b:e9:
23:1b:78:91:e8:e7:04:84:ba:bd:ce:44:a5:27:f6:f0:f6:3c:
df:e8:b0:62:91:7b:28:57:5e:3a:fe:45:56:3f:52:d4:07:8f:
71:b0:dc:69:e0:1f:5b:a3:9b:ab:af:70:42:84:64:66:0f:37:
70:54:46:61:57:f9:82:3e:73:01:32:e7:4a:7d:76:38:47:1a:
f5:cb:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:32 2026 by rpki-client