Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 10RRMl2i7/kR6EF5cZJyWZmtDldz6LyYxrC4BGJnBso=
Subject key identifier: 46:B4:DB:21:67:31:FF:95:15:B7:47:9C:B4:08:6B:ED:A1:E0:79:41
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 01A12767AC8C4A16ED6E785B625F9A405CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 1100
Signing time: Sat 10 Oct 2026 20:01:08 +0000
Manifest this update: Sat 10 Oct 2026 20:01:08 +0000
Manifest next update: Sun 11 Oct 2026 20:01:08 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: AyOL0jg2uiOSuJAlKi5GWLS7OT+YT03oqJjBPrT/Gq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:ac:8c:4a:16:ed:6e:78:5b:62:5f:9a:40:5c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Oct 10 20:01:08 2026 GMT
Not After : Oct 11 20:01:08 2026 GMT
Subject: CN=46b4db216731ff9515b7479cb4086beda1e07941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:91:a5:32:89:8a:62:74:38:56:5a:2e:6f:
dc:94:1e:64:8a:17:42:8d:99:a2:ec:49:e3:34:8b:
8c:36:8a:a2:48:49:a2:c3:36:01:ad:d4:79:17:d9:
a5:3a:a4:cc:a5:47:e7:f1:37:c5:e6:b8:c4:4a:20:
98:39:fb:08:30:3f:3f:e2:17:67:e7:7a:55:5c:28:
8d:e0:f4:cc:4e:46:98:af:67:0e:dc:e1:7a:a3:dd:
f4:e8:a2:b4:cb:20:f3:a6:1e:c0:8e:75:50:6f:23:
a8:cd:ef:04:36:da:63:72:68:46:b1:b2:41:d9:2d:
c5:71:65:4c:e7:82:45:72:ec:99:39:f5:e6:04:ec:
b1:7b:96:d0:37:a0:4d:7a:9f:9a:2a:02:95:40:cc:
43:34:66:05:05:ee:3d:d0:d3:15:b9:bb:c6:dc:d3:
b6:98:1e:a3:0c:1d:8d:a2:f7:c0:ae:be:f2:a9:08:
d7:18:8c:a7:7c:e5:3f:07:78:50:23:2c:f9:1c:20:
65:1b:e4:d2:25:32:3b:dc:ce:68:1a:79:62:73:fc:
0f:8e:df:f8:9d:11:b3:30:13:f6:2e:52:7c:9b:b8:
68:57:c1:03:64:d3:e4:b9:5b:c0:5c:98:c8:b4:3c:
a5:29:03:cb:58:5c:61:cb:b7:37:85:de:c3:c6:42:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:DB:21:67:31:FF:95:15:B7:47:9C:B4:08:6B:ED:A1:E0:79:41
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:56:42:65:78:13:e4:f5:8c:de:67:65:58:ef:bb:d6:0c:
f9:3f:33:d5:b9:41:e0:64:24:e9:a1:65:da:56:d8:4c:1c:42:
9e:a7:f1:a6:79:ec:20:d7:9f:73:22:29:93:b3:f8:48:7d:ff:
29:77:83:37:ef:d9:82:c3:8b:86:70:c3:8e:c8:f5:89:12:3c:
87:70:80:89:10:f5:83:3d:7c:dc:57:58:9e:3f:ef:cd:70:82:
bf:54:f8:d6:eb:cb:c1:1d:ba:2f:cc:c4:75:ff:19:4d:e6:8b:
9a:11:de:6a:9e:41:ba:12:d1:9d:91:f3:6c:99:b1:44:a2:bf:
ed:63:c9:47:72:f4:42:e0:0d:a9:72:a1:88:aa:92:5b:b5:48:
52:9b:13:1b:d3:9e:99:39:c4:e9:ab:b6:e8:ac:0f:de:26:c7:
1d:04:49:c7:b3:98:59:0e:d7:33:52:d3:d5:e2:5c:2e:d4:11:
61:9b:cb:3c:8b:75:bf:d0:dc:5f:d6:8b:40:8a:44:52:84:95:
39:77:1c:1e:7c:d2:d8:17:8a:ec:e5:5a:8f:29:73:8b:47:52:
cf:52:29:9f:56:fe:26:f8:0b:03:3c:39:40:70:0c:88:0b:13:
5d:ea:b3:29:b9:b4:1b:31:6a:57:55:d4:20:20:74:50:b2:f1:
96:21:95:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:53:31 2026 by rpki-client