Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: qjpml6x7D4ITydl7PEPACgtfpe+SDOSlU6ZRQLNeTRQ=
Subject key identifier: 42:05:93:D2:3C:97:B9:7E:14:E4:8E:07:76:DE:86:E7:BF:52:1E:E6
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 01A1046DACDD6B7A80377C260A9AD1A0E701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 01:00:58 +0000
Manifest this update: Sun 04 Oct 2026 01:00:58 +0000
Manifest next update: Mon 05 Oct 2026 01:00:58 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: dyxW7hnP++oWi6BGcEQm/hL5dsK+SuRUt2gQJaG4Enk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:ac:dd:6b:7a:80:37:7c:26:0a:9a:d1:a0:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Oct 4 01:00:58 2026 GMT
Not After : Oct 5 01:00:58 2026 GMT
Subject: CN=420593d23c97b97e14e48e0776de86e7bf521ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:0a:e5:de:1f:0d:32:f1:c4:cf:d1:43:3a:
d3:37:82:05:c9:6f:a4:33:f2:79:03:ef:93:c5:9d:
02:b7:f1:f8:71:ec:08:09:3b:a3:fd:c1:bb:87:35:
0b:e1:4b:89:e4:19:ce:29:87:7b:db:4f:b6:97:83:
ec:d7:8a:97:1d:73:ff:ff:84:03:3b:08:0a:c2:71:
a5:11:30:9e:39:f0:60:67:85:e5:d2:32:e8:95:7b:
5b:1a:b0:90:3a:21:86:a1:f5:c3:88:9d:17:98:48:
29:0a:7f:af:86:23:d5:23:9c:9f:9f:68:74:95:f7:
42:95:22:c5:ff:10:e6:43:4d:22:49:58:a9:ce:05:
56:f1:a2:37:f6:75:60:d5:30:55:e1:07:57:e3:01:
67:69:05:e2:ab:c7:9c:35:7d:d2:fb:fe:1b:68:04:
4c:58:d0:16:b4:ed:6b:40:5b:18:61:dc:36:72:a8:
f7:9a:1b:80:de:42:cc:f5:8c:44:70:61:b0:ab:74:
cd:88:79:e2:4c:2a:18:8f:42:f7:81:56:16:cf:20:
8f:cc:9d:b0:5e:6b:23:7d:7c:6e:25:4c:c7:d9:f3:
09:a2:40:d5:51:b5:94:cc:b2:02:58:78:15:95:1e:
95:ad:17:6c:56:cd:93:2c:4b:b2:ad:c4:bd:4d:f5:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:05:93:D2:3C:97:B9:7E:14:E4:8E:07:76:DE:86:E7:BF:52:1E:E6
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:67:94:14:c0:f7:aa:3a:39:a6:91:4e:e9:e1:ca:9a:67:79:
bb:c6:12:8d:0c:ac:c9:c7:c1:5d:42:00:61:3a:ba:87:f3:68:
74:35:56:10:40:d0:46:a5:9b:f3:40:14:94:0b:b4:5b:87:1e:
ac:44:d7:3a:9a:a7:60:97:2c:25:10:2c:e6:11:d6:35:c9:82:
45:84:1e:30:58:2a:c1:3a:82:10:95:cb:35:47:24:2d:65:b6:
1b:98:39:50:85:c5:ba:3b:18:8f:72:9a:ec:d5:21:7c:35:8b:
b5:d0:16:8d:71:71:44:0d:1c:b9:d5:77:b2:56:2d:7a:43:84:
36:ab:9c:19:a6:b4:29:5d:a5:fd:c2:6d:f4:a4:60:ed:05:47:
4b:99:64:8a:e3:6e:23:c5:b0:79:b9:5c:06:bb:ec:cc:a0:1f:
47:27:f0:53:fc:30:cb:ed:63:58:6e:9d:33:17:3d:e0:99:d1:
5b:93:a3:79:e2:f1:37:03:10:9b:1d:08:b1:2f:5a:ee:f0:27:
5a:dd:7c:e7:3e:f2:8e:52:f4:a8:c0:fc:67:21:78:53:e0:66:
79:04:e8:81:09:ee:c7:69:b7:07:27:36:9c:f8:49:1d:68:99:
f4:ad:5e:e0:ef:0c:95:87:6e:12:f4:42:a5:45:c5:2d:dd:ee:
84:40:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:56:36 2026 by rpki-client