Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: Tuo+ed4QF23rGMpTmbGTV93s6B2O1blKoOOCX9ahfOY=
Subject key identifier: FB:77:30:9F:98:B5:51:F5:62:5D:89:BA:14:84:26:A0:BB:28:17:AA
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019F3AF474E3F29550F8346F1DFB8ED7066D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 1001
Signing time: Tue 07 Jul 2026 05:02:06 +0000
Manifest this update: Tue 07 Jul 2026 05:02:06 +0000
Manifest next update: Wed 08 Jul 2026 05:02:06 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: mLYbq4aaf/ZKkeYP1bth4gvkmOI9D6FeVxbyK28GQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 05:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:f4:74:e3:f2:95:50:f8:34:6f:1d:fb:8e:d7:06:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jul 7 05:02:06 2026 GMT
Not After : Jul 8 05:02:06 2026 GMT
Subject: CN=fb77309f98b551f5625d89ba148426a0bb2817aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:60:11:e1:67:44:95:5b:48:fd:0e:ed:9d:
53:eb:c6:03:be:fa:96:c0:54:ac:5e:12:c3:5d:72:
2e:b9:fd:d6:71:ad:04:c4:91:b5:99:d4:13:46:6c:
85:2f:14:4b:33:c3:a3:dd:30:d5:46:26:65:07:97:
43:d2:0a:3e:7c:3a:e3:04:6f:0f:b8:8e:64:93:12:
cd:e8:fd:dc:b3:1e:a1:bb:d0:4e:13:98:3d:6b:ad:
7f:3e:b4:8e:61:83:a3:2a:b9:51:18:3b:d7:f1:2f:
c2:da:10:56:aa:ed:93:ae:5f:77:a1:08:c6:22:01:
4f:1a:9c:75:43:00:da:da:29:c1:15:5f:35:a6:5e:
fc:ad:f5:b3:74:e0:a4:c0:d0:82:fe:17:1c:0a:55:
2a:d8:4f:4c:bc:fd:6c:3b:3d:19:d4:d2:13:ef:06:
a3:68:fe:78:d9:ae:53:8b:87:6c:05:6d:bd:42:2e:
a9:9e:25:76:ef:5c:29:1c:9e:1c:f3:4a:f2:dc:0b:
40:c7:bd:ed:72:41:ec:f1:75:44:26:50:c2:5d:05:
13:7b:e0:91:73:a2:00:59:a4:46:09:79:71:be:85:
ca:ae:81:1e:7d:7f:b3:61:0b:bc:1e:f1:09:c5:95:
4e:2d:d7:37:1b:74:7b:52:33:ca:f8:15:7c:eb:05:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:30:9F:98:B5:51:F5:62:5D:89:BA:14:84:26:A0:BB:28:17:AA
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e6:fe:8f:2a:07:2e:92:87:a4:c1:cd:0f:c6:0f:d3:97:10:
cc:32:81:46:3a:27:8d:7b:7c:67:7f:7d:86:2a:ac:c1:d6:ff:
ef:60:54:88:b0:20:fe:a7:ae:63:6e:b9:95:f6:6a:00:a9:cf:
08:20:97:c0:6e:0b:59:cd:75:f8:7b:33:f5:3b:03:30:f0:e5:
17:24:38:81:43:75:11:d0:a0:58:d5:f4:a8:a3:ef:8a:84:7f:
6b:32:e6:4e:12:c9:b0:58:bb:ca:4f:ec:03:45:6b:36:89:67:
cd:10:b1:42:cd:31:0a:be:ce:fe:26:9a:90:08:64:02:63:96:
75:89:cb:e0:96:7e:86:5f:c9:cd:d2:11:2a:b5:f0:fb:c8:80:
90:1f:51:b2:5f:9f:fa:e6:ec:e1:1c:ab:a9:e7:f6:0b:b6:87:
69:22:f0:3f:32:95:62:ef:84:fa:05:6b:39:f4:61:4e:5f:6e:
e6:85:9b:0c:9a:c4:32:6a:bc:7f:d3:8b:e6:a8:b9:14:f3:73:
2e:8a:a1:3e:d3:19:c3:a6:24:ff:eb:00:f2:f1:9a:92:e6:92:
dd:44:2d:c9:87:4f:87:cd:55:64:73:b4:9d:61:d5:db:49:de:
1f:ac:bd:d7:de:bf:68:c9:4c:81:7c:da:3d:bd:5a:c1:f5:08:
ca:8d:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:44 2026 by rpki-client