Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: FoXHd7DAjnR6FCZlRmlLnRvXLCLmiLW0hgy9iWWm0T4=
Subject key identifier: BC:E6:70:6F:D5:EE:8E:62:77:66:20:67:88:0E:80:A6:FA:BA:04:80
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019F95804B421A83103D270EDA04E8F9F2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 19:00:40 +0000
Manifest this update: Fri 24 Jul 2026 19:00:40 +0000
Manifest next update: Sat 25 Jul 2026 19:00:40 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: EZDVhC6anrNamSarVzo/g0KSOL7/Z/zXCPICJkHtjwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:4b:42:1a:83:10:3d:27:0e:da:04:e8:f9:f2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jul 24 19:00:40 2026 GMT
Not After : Jul 25 19:00:40 2026 GMT
Subject: CN=bce6706fd5ee8e6277662067880e80a6faba0480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:4e:5d:74:03:9c:46:0f:47:dc:bd:4c:63:
b9:b4:46:b9:2f:23:01:5a:9a:e7:fc:96:32:f6:03:
ba:30:bf:87:ad:74:47:a4:a4:7d:1e:c7:e5:b5:24:
2f:8a:d4:a9:29:fb:2b:d9:67:c6:1c:1c:a6:dd:69:
f3:f2:98:78:73:6a:e4:b0:97:2f:6d:10:9b:dc:63:
6c:ba:67:e6:a2:f4:66:06:bf:34:d8:80:aa:91:02:
e2:23:b0:34:e0:ac:e3:4c:2a:96:3c:59:6e:c5:12:
72:2f:16:9c:9d:b9:02:b4:a1:d5:19:33:18:2b:40:
ed:73:af:85:24:e3:1e:de:b1:e4:79:cd:3e:80:b4:
81:ac:ca:ad:bd:b3:fe:17:6e:83:65:f5:3c:d0:ef:
ac:d3:43:2b:e1:34:93:96:58:86:69:33:e0:62:53:
b9:d4:5b:b8:11:99:15:17:49:da:81:e9:e7:ce:b3:
77:43:c2:6f:52:71:96:49:05:0f:74:24:db:62:4a:
42:a8:da:a3:32:81:56:e1:d0:ec:42:14:de:7a:0f:
34:75:f8:cd:bb:9a:12:a1:a2:60:65:07:ca:2d:78:
36:d2:56:a0:5e:1a:b6:03:53:54:51:05:32:ce:47:
6e:ad:75:b3:a9:a4:b3:04:83:56:61:a5:fb:4c:89:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:70:6F:D5:EE:8E:62:77:66:20:67:88:0E:80:A6:FA:BA:04:80
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ed:b6:af:bd:5b:b8:42:cb:48:8b:1d:97:5e:20:5f:d9:c5:
12:0b:91:86:9b:2d:99:3a:f5:a4:65:1d:e7:d0:bf:68:64:7f:
76:98:5f:37:18:fc:7a:5a:57:d7:85:b2:f3:71:20:8b:d8:f6:
3d:88:ee:b9:38:6e:30:09:1a:9c:97:04:63:28:e8:aa:70:ff:
a1:12:14:2f:5a:19:45:73:ef:fa:43:a1:c2:e0:37:04:36:12:
2a:d3:a9:57:b1:6f:de:17:36:b2:c6:a5:5f:31:a9:2f:9c:b5:
82:97:18:a0:bb:0c:1f:de:f4:d1:26:88:4b:28:05:d8:fb:59:
d8:20:9c:70:64:d0:23:b5:3a:62:2f:4a:2f:e0:8d:0e:0b:ea:
c7:19:5b:88:69:2f:87:f6:0d:e3:96:f1:83:8a:81:b5:99:5c:
4c:58:19:53:18:07:c1:80:1b:11:47:2c:18:39:4a:53:9f:9a:
25:e2:4d:86:5e:c1:22:59:25:d1:cd:5a:85:98:d6:ed:0e:4f:
8e:c4:a3:75:ff:9c:13:6d:05:fc:30:15:a7:35:be:62:32:32:
d3:e9:84:85:c0:36:ae:a2:dc:fd:d8:ca:21:2e:ad:3f:c0:52:
d0:39:2b:d8:fa:86:19:b9:94:e5:f7:04:c2:4b:5f:fa:40:09:
7a:97:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:18 2026 by rpki-client