Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: BBP6LsP/zMcoV/I0DKaMuZd3wf0TEwC2GF0uty1F+Cc=
Subject key identifier: 5B:67:05:B1:99:AC:E5:5D:06:65:1D:AC:18:88:1B:3A:58:60:65:D4
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01A0F83356FCF62F1856F3F995371942A2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 15B1
Signing time: Thu 01 Oct 2026 16:01:49 +0000
Manifest this update: Thu 01 Oct 2026 16:01:49 +0000
Manifest next update: Fri 02 Oct 2026 16:01:49 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: mxV8gSWrZs/Bp6sz/z4+qQQnjnNuQ0k5tynrCdqAzqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:33:56:fc:f6:2f:18:56:f3:f9:95:37:19:42:a2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Oct 1 16:01:49 2026 GMT
Not After : Oct 2 16:01:49 2026 GMT
Subject: CN=5b6705b199ace55d06651dac18881b3a586065d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:13:5d:5e:15:fd:30:94:12:a5:6a:c6:7f:
2a:8b:f4:7e:05:6e:eb:d1:fa:0c:d8:b3:fa:ed:1f:
2d:2e:e6:a4:5e:13:08:35:be:c1:e8:b3:d8:ec:82:
12:2a:8f:83:b0:ea:ec:6f:cf:16:42:8a:33:e2:99:
d1:48:2c:d3:7e:49:98:ff:6f:14:68:16:90:58:7b:
77:d1:90:83:9c:9d:43:46:0c:bf:2e:3b:ba:9b:51:
93:e5:c6:38:3e:89:62:b1:2a:0b:7d:84:1d:45:c2:
7f:67:ec:9c:64:07:96:69:c4:b8:16:f3:33:cb:a1:
91:e3:f4:f1:98:04:0d:cd:b6:19:04:54:b6:06:1d:
67:57:b3:c8:e4:3e:00:6e:a2:f4:5b:00:57:f7:c9:
fe:8b:1d:3f:7a:6c:d9:b4:b6:33:ad:26:f3:8c:e1:
cc:15:96:22:03:9f:1a:48:11:81:26:29:97:db:22:
14:82:fe:7c:2a:d8:9b:d8:d3:a3:13:aa:66:11:43:
cf:c4:11:90:5f:37:69:fe:93:e4:91:d4:3a:4d:d3:
74:62:e2:7f:9d:58:db:42:81:b1:4a:d4:8a:67:f9:
27:5c:d2:da:0d:43:a5:8e:07:7d:d3:31:be:fb:9e:
7d:36:e0:5d:7b:1c:8d:da:ff:db:e8:f9:82:29:6e:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:05:B1:99:AC:E5:5D:06:65:1D:AC:18:88:1B:3A:58:60:65:D4
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:07:01:e3:d9:f5:c9:db:1b:81:e2:8a:a1:29:6e:9b:0b:
7c:c7:09:32:fe:a3:ff:08:e5:33:96:94:36:47:ec:22:2b:4c:
73:0f:13:0f:eb:a7:18:6b:fa:ac:6e:5f:79:30:4a:ec:78:71:
1f:82:ff:0d:df:fa:17:49:ca:91:3d:cf:e1:74:00:94:12:a2:
2f:c0:e1:46:5c:e6:17:ed:2a:f9:84:97:aa:ab:20:69:1e:aa:
c8:2a:41:68:ff:af:c6:96:fe:ce:51:fd:92:19:94:a9:e4:96:
4a:73:40:32:c2:5d:97:f4:61:62:c1:e2:87:56:6b:09:28:73:
e6:68:2f:6d:f7:85:23:20:7e:d5:af:c9:39:bb:99:c6:a1:65:
63:40:26:f9:23:ff:14:77:1a:12:56:3b:84:ea:07:ba:0b:70:
45:98:22:08:02:b3:1f:81:c6:5f:36:ff:c8:de:4c:24:2c:42:
ae:a5:85:c6:a4:5f:b4:82:6a:08:4e:de:63:8b:82:93:52:14:
23:4b:76:01:09:c9:c5:6f:9b:ba:f1:ce:00:65:ea:31:28:80:
42:f1:12:e1:03:09:ab:88:7c:45:7b:72:76:e9:00:32:2c:d1:
7c:b1:91:93:28:5f:c9:ff:d7:d2:66:16:95:5e:be:1e:c7:74:
50:c8:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:14:48 2026 by rpki-client