Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: 19XA6mI/wNfhLogNiH+wo6VWNWGi+UEv2uPiiL5wyXc=
Subject key identifier: A5:4F:8C:FF:40:B4:4C:1A:EF:1E:00:DF:BD:31:37:75:F9:9A:85:F4
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019E20240DAF4CBB3EAA628C6BC5B46409A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 1438
Signing time: Wed 13 May 2026 07:01:34 +0000
Manifest this update: Wed 13 May 2026 07:01:34 +0000
Manifest next update: Thu 14 May 2026 07:01:34 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: J3Witt8E5psOtRY/21RKikDUYwMCI1CiRiHLS0lU4L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:0d:af:4c:bb:3e:aa:62:8c:6b:c5:b4:64:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: May 13 07:01:34 2026 GMT
Not After : May 14 07:01:34 2026 GMT
Subject: CN=a54f8cff40b44c1aef1e00dfbd313775f99a85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:a6:17:ac:0d:55:68:24:6c:c5:2e:bb:9d:
6f:90:bc:63:8e:17:bd:e1:8e:da:b2:8c:0c:a0:48:
e3:07:94:d7:ba:fa:8a:09:d6:47:3c:8e:97:bf:61:
a9:14:ef:2b:95:18:03:f3:89:7b:4d:7f:51:98:36:
cb:6b:45:e8:c6:53:9e:6f:83:51:e3:f1:fd:a6:8a:
b3:62:e1:90:2b:0e:51:72:59:06:eb:bd:59:6b:8b:
5f:05:10:c5:ac:2b:25:81:9a:c1:d5:35:bb:3e:81:
cd:2a:6c:75:0a:ed:7f:f7:18:79:21:72:b4:61:da:
89:08:00:3a:ce:68:d4:93:0e:da:ff:25:60:24:c7:
a2:1f:87:29:cd:d9:f3:93:89:d0:00:23:ba:43:76:
63:94:80:5c:4d:83:ed:43:22:3c:68:40:d1:f3:f5:
eb:49:94:67:f0:f2:07:cb:b6:1a:e3:4b:49:c5:f1:
6a:86:22:1e:7a:32:38:2e:8b:9d:c9:86:1c:cd:20:
ae:5a:30:fb:c2:90:3f:b6:3f:b2:c3:a1:c0:b9:c5:
b2:9c:80:99:18:6d:ea:57:45:c3:a0:9e:cc:3b:f5:
50:1a:67:a2:53:63:69:50:94:29:94:32:09:47:09:
e8:36:52:ae:f8:fb:24:c9:87:2a:2a:17:a0:2e:64:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:8C:FF:40:B4:4C:1A:EF:1E:00:DF:BD:31:37:75:F9:9A:85:F4
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f7:91:9d:c6:52:65:2d:f9:3c:b0:3b:24:2a:f3:17:5f:9f:
ef:9c:cc:61:da:ce:97:5e:dc:48:1c:91:32:c7:b8:3e:68:10:
53:4c:32:4a:11:f5:a1:ed:c1:3a:6b:f9:db:46:7f:3c:c4:24:
19:6a:5f:0e:8f:41:e3:ca:7f:52:c6:b0:09:0e:22:92:13:6a:
bb:f7:57:47:63:d2:41:e4:42:33:b5:fa:96:eb:c9:ce:ce:99:
a6:1f:b1:05:e0:4a:32:af:45:81:40:73:93:e2:a3:99:46:9a:
b9:fc:35:7f:84:34:07:be:c0:15:87:8c:20:c7:28:0b:74:5c:
a6:9a:d2:5d:69:41:f6:f0:82:7f:a3:87:5a:f3:78:e0:38:0d:
bf:62:af:f7:85:99:e5:1b:61:16:66:52:5b:fc:28:86:9c:64:
5d:76:a7:0d:c3:9a:56:22:55:3f:1b:c4:f3:9d:9d:e4:77:e1:
cc:64:7c:d4:0c:75:4b:c3:d8:e0:14:b3:fc:ee:e4:d5:4a:a5:
4e:01:b5:12:c1:6d:05:3b:62:fd:8a:fd:6c:85:46:9d:df:be:
4c:f9:5d:76:23:e1:e4:87:2e:7e:f0:03:ee:76:4b:69:7c:c4:
72:05:de:a9:d1:df:10:f7:da:8f:90:a1:29:1a:bc:32:78:b0:
35:a2:05:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJA2vTLs+qmKMa8W0ZAmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjYwNTEzMDcwMTM0WhcNMjYwNTE0MDcwMTM0WjAzMTEwLwYDVQQD
EyhhNTRmOGNmZjQwYjQ0YzFhZWYxZTAwZGZiZDMxMzc3NWY5OWE4NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s+mF6wNVWgkbMUuu51vkLxjjhe9
4Y7asowMoEjjB5TXuvqKCdZHPI6Xv2GpFO8rlRgD84l7TX9RmDbLa0XoxlOeb4NR
4/H9poqzYuGQKw5RclkG671Za4tfBRDFrCslgZrB1TW7PoHNKmx1Cu1/9xh5IXK0
YdqJCAA6zmjUkw7a/yVgJMeiH4cpzdnzk4nQACO6Q3ZjlIBcTYPtQyI8aEDR8/Xr
SZRn8PIHy7Ya40tJxfFqhiIeejI4LoudyYYczSCuWjD7wpA/tj+yw6HAucWynICZ
GG3qV0XDoJ7MO/VQGmeiU2NpUJQplDIJRwnoNlKu+PskyYcqKhegLmRsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVPjP9AtEwa7x4A370xN3X5moX0MB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADveRncZS
ZS35PLA7JCrzF1+f75zMYdrOl17cSByRMse4PmgQU0wyShH1oe3BOmv520Z/PMQk
GWpfDo9B48p/UsawCQ4ikhNqu/dXR2PSQeRCM7X6luvJzs6Zph+xBeBKMq9FgUBz
k+KjmUaaufw1f4Q0B77AFYeMIMcoC3RcpprSXWlB9vCCf6OHWvN44DgNv2Kv94WZ
5RthFmZSW/wohpxkXXanDcOaViJVPxvE852d5HfhzGR81Ax1S8PY4BSz/O7k1Uql
TgG1EsFtBTti/Yr9bIVGnd++TPlddiPh5IcufvAD7nZLaXzEcgXeqdHfEPfaj5Ch
KRq8MniwNaIFhA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:53:02 2026 by rpki-client