Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: YujEvXU+ywzWYawnD7TekOZMAEgiOuJwZ5io8giEY2Y=
Subject key identifier: A1:66:0B:12:DF:FD:67:D3:00:BC:94:5C:53:AF:A0:7B:93:C1:8E:30
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019D2AE0D65222EFFEC2A6F8E7B7C41F9A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 13B9
Signing time: Thu 26 Mar 2026 16:01:11 +0000
Manifest this update: Thu 26 Mar 2026 16:01:11 +0000
Manifest next update: Fri 27 Mar 2026 16:01:11 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: Iq3/Y3UA0HJAvYnx9uRoy/CFpnJnuqLLeE7sPdfkKOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:d6:52:22:ef:fe:c2:a6:f8:e7:b7:c4:1f:9a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Mar 26 16:01:11 2026 GMT
Not After : Mar 27 16:01:11 2026 GMT
Subject: CN=a1660b12dffd67d300bc945c53afa07b93c18e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:16:26:7b:c6:a4:fa:8b:73:52:73:be:ce:
6a:f6:fd:db:59:e2:bb:f1:a2:00:c4:87:82:53:c7:
b3:7b:4d:fb:e6:be:cf:76:b4:75:5f:74:89:28:3b:
9b:d8:2e:64:d3:f7:d2:fd:9c:9b:dc:d2:e6:d9:0b:
23:f0:ad:a5:37:d5:3e:6f:b0:00:b7:5a:cc:09:07:
6d:44:4b:25:f9:dd:5e:9c:95:3d:a1:54:79:33:df:
ae:4e:d9:9f:27:ee:4a:78:ec:d6:c3:af:f9:81:a6:
cf:60:72:93:0a:33:f1:98:e8:8a:12:e6:93:a3:cc:
37:91:7f:c5:16:47:ab:c9:bc:20:e0:b3:a6:f3:45:
b9:a2:37:3c:c2:79:55:8a:01:ee:76:93:fe:bc:42:
52:1d:38:24:b4:14:82:73:dc:19:9c:96:16:58:b7:
59:e0:12:65:79:4d:08:5e:57:f9:50:f2:6e:40:c0:
f1:d7:07:95:08:61:3d:8d:34:59:2b:f2:91:38:8a:
5a:25:f9:c5:5f:f9:52:d8:97:39:25:5e:6e:06:f5:
08:83:ff:05:26:50:95:a4:55:77:5d:e7:67:65:47:
e0:56:da:bd:8f:f1:2e:dd:35:f6:8e:f7:85:fd:46:
ae:59:2b:0d:21:c8:99:30:eb:a3:d5:6b:07:35:52:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:0B:12:DF:FD:67:D3:00:BC:94:5C:53:AF:A0:7B:93:C1:8E:30
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:50:9b:ab:b7:af:52:a4:f2:c0:ec:af:2c:ae:e3:4e:5f:
5f:38:2e:22:37:b8:f2:9b:ab:f5:c5:e9:9b:42:79:c3:dd:b6:
7f:3c:c7:76:3c:69:d2:47:6f:6d:7e:45:8a:79:59:13:52:f7:
6c:40:11:d1:3e:00:0e:fd:2a:a1:3a:32:21:c5:23:69:92:c8:
5d:91:07:83:5a:67:0f:e9:26:7a:65:b2:b1:33:cc:11:02:5f:
f3:81:d6:42:b5:de:ba:0e:71:4a:bc:a4:c0:9c:ee:13:da:37:
0e:5e:3b:e6:39:31:d9:5c:5d:46:a6:25:2e:bc:98:e2:c4:1f:
7b:2a:ce:b7:91:b7:0a:cb:64:fb:9c:f6:01:6d:40:df:10:ee:
08:77:20:a7:58:53:b0:ce:f9:cc:83:a8:41:94:2e:d2:21:f7:
00:94:d6:5c:12:af:1f:0c:1e:e7:f9:62:5d:5d:83:c0:ce:a2:
6f:7f:3e:76:6e:4b:4f:a4:30:3f:15:0d:57:97:94:3e:fd:62:
dc:47:97:55:29:89:40:9f:d5:3c:fe:47:7e:2d:22:94:ae:68:
79:9a:72:57:6e:fc:bd:2f:fa:a2:49:7e:2f:14:72:c2:5e:26:
2b:6f:50:e9:45:d8:39:6e:fc:1a:fb:0b:32:d7:1f:3e:76:ac:
c7:89:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:55 2026 by rpki-client