Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: shlc+d0V0FAXOzh4C0iVhCHBfCoPhDafua/mqB9InmI=
Subject key identifier: FC:78:2F:54:D3:51:67:72:9E:B6:CC:0D:0D:AD:83:59:26:AC:1E:3C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019EB732C6D449EAD90FB271D4EB0930215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 138C
Signing time: Thu 11 Jun 2026 15:00:18 +0000
Manifest this update: Thu 11 Jun 2026 15:00:18 +0000
Manifest next update: Fri 12 Jun 2026 15:00:18 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: 3nYaPm//BEQIJLJgaESreI0eaRWy7c2r3ngtwDDUmPE=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:c6:d4:49:ea:d9:0f:b2:71:d4:eb:09:30:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jun 11 15:00:18 2026 GMT
Not After : Jun 12 15:00:18 2026 GMT
Subject: CN=fc782f54d35167729eb6cc0d0dad835926ac1e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:1c:7b:4e:46:5d:d9:cd:da:7c:96:ab:cf:
97:97:1b:aa:26:fe:2f:d7:f5:ea:09:13:9f:fd:2f:
e6:7d:7b:ef:a9:45:d8:47:41:62:a2:db:0e:d8:0e:
e2:78:2b:07:f0:72:99:e4:00:6f:c5:ab:48:ff:37:
a9:ba:f2:ab:83:78:bf:4a:52:fb:eb:f1:a1:e6:58:
74:b2:0d:e1:20:b2:76:00:11:59:c5:5f:88:5d:91:
40:67:de:0e:e1:ff:0e:78:c3:7b:57:58:1f:51:3f:
aa:0f:de:61:99:cf:13:c4:8d:2a:a5:d7:b9:e0:55:
d3:7a:93:02:f7:a4:2c:12:8b:60:62:5e:29:09:c2:
f4:91:a4:53:e7:09:94:5b:67:43:8c:1a:78:1b:25:
ed:e3:8b:70:ad:0b:a9:24:2b:3a:dc:ac:49:79:d6:
aa:2e:9f:c9:97:54:5d:9c:77:89:74:b8:d8:d3:e3:
64:22:45:c9:08:e6:c3:2d:2e:e1:34:cb:ee:77:a5:
5d:9a:1c:fa:34:b6:40:81:81:43:72:88:d7:00:79:
c9:4c:60:1c:6f:78:68:5b:d6:f5:3a:8c:01:a9:6f:
ec:f8:6c:1b:cb:34:31:f3:91:4c:6b:97:10:f8:4e:
de:83:66:07:c9:9b:df:aa:1c:cf:d0:4e:bc:0e:be:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:2F:54:D3:51:67:72:9E:B6:CC:0D:0D:AD:83:59:26:AC:1E:3C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:ee:68:aa:42:60:17:70:30:cf:27:36:06:6d:2c:75:bb:
ce:bf:eb:0e:c5:60:13:48:5f:71:49:c2:9c:54:01:7d:9d:b3:
13:9b:87:e7:d2:47:76:26:92:59:3d:12:eb:6c:7a:ad:13:dc:
9c:1a:49:59:d7:b2:06:f6:30:d6:93:d2:22:6b:41:34:0d:96:
df:0f:3e:41:be:6a:bd:7e:60:e8:30:b0:68:b6:b5:4a:d4:69:
e9:fc:a8:81:cd:95:4e:63:dd:ad:cc:fb:c8:1b:10:d5:52:35:
ba:b5:06:e8:8c:61:38:f6:b9:89:16:5a:52:f7:e8:b9:53:73:
04:2e:c7:54:67:c2:72:6b:55:02:71:b0:f1:75:0b:22:88:21:
3a:67:af:f2:b8:33:e3:4a:5c:20:fe:44:ee:6e:0c:41:f9:ce:
ca:6e:0e:19:58:6a:eb:20:22:9f:e1:66:45:85:7e:39:3f:e4:
e9:4a:02:79:1e:a6:2e:cf:a3:99:a0:a5:86:e3:c2:70:4f:b9:
9f:d4:78:16:f8:aa:e5:9e:24:2f:55:f7:81:80:a2:21:91:96:
f0:3a:82:71:95:1e:35:d0:62:7c:96:e9:95:8f:2b:b6:e2:39:
94:5f:28:20:63:cf:5b:40:c1:b0:71:6c:60:49:cd:44:8f:1f:
6e:78:5f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:17:50 2026 by rpki-client