Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: cN54ye20BWdnV2BkzJg27NBRjEeNvtIrdio+0N0C5zw=
Subject key identifier: D2:1E:72:85:F3:CA:71:32:87:71:80:3E:82:90:D6:15:13:C2:C6:1C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01A08C7B606F081BD2F2F5C29A62B941E4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 147F
Signing time: Thu 10 Sep 2026 18:01:30 +0000
Manifest this update: Thu 10 Sep 2026 18:01:30 +0000
Manifest next update: Fri 11 Sep 2026 18:01:30 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: 6IHTNth9GPptLmPtDlHNUZTJ88jtjLp/G4KonYCGHIk=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:60:6f:08:1b:d2:f2:f5:c2:9a:62:b9:41:e4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Sep 10 18:01:30 2026 GMT
Not After : Sep 11 18:01:30 2026 GMT
Subject: CN=d21e7285f3ca71328771803e8290d61513c2c61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:e8:44:3f:70:95:6c:6e:de:86:ed:d8:b4:
08:ae:bf:5b:62:72:30:6c:81:d7:f9:de:63:e0:c9:
5e:d0:b7:da:84:a5:f0:f2:d2:4e:82:4e:84:8d:76:
f5:62:ac:b5:84:e8:42:43:91:c2:b3:1b:d5:f4:58:
8d:d0:19:8f:25:65:8a:af:61:e4:6c:6e:52:1e:3c:
3a:3a:8b:9f:50:8f:96:74:46:81:c0:ec:84:16:25:
a2:9d:80:45:f0:76:e9:ab:d1:eb:fe:b6:33:71:06:
b6:41:31:6b:bd:1f:09:25:76:a3:fa:7a:47:09:53:
57:ae:0d:5c:5d:c5:dd:ed:2d:d2:db:f3:2f:e0:70:
33:ab:36:30:03:ba:46:ab:50:86:10:e3:da:35:14:
ec:a8:e8:bb:cf:7c:84:2c:4a:be:e6:64:c3:e3:14:
d7:5b:8b:ff:e4:cb:3d:cc:98:44:fd:ee:dc:38:52:
23:8e:b8:08:19:cf:29:35:cb:8b:47:25:a7:95:47:
a8:81:0b:e2:43:2c:32:f5:8b:ab:d0:ec:36:42:d5:
fc:00:29:71:46:12:95:d4:fd:21:80:c8:da:e2:de:
c9:b8:0c:cb:ea:85:a4:3d:0c:3a:c0:7d:7c:72:71:
9a:b5:c8:cc:6c:bf:a8:a7:31:cf:92:2b:6d:f7:5d:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:72:85:F3:CA:71:32:87:71:80:3E:82:90:D6:15:13:C2:C6:1C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:2e:3a:9c:d8:58:4f:05:93:a1:df:69:25:4f:45:65:9f:
42:1b:67:1e:ed:75:ab:1c:39:2e:a3:98:15:3b:07:cc:8e:93:
76:18:78:77:8b:28:81:ec:48:b1:12:79:21:9e:8f:60:7b:01:
14:4d:4d:cf:ec:24:d0:1d:74:aa:0d:ad:b1:12:86:71:f7:99:
32:19:51:80:09:94:34:d5:b1:0f:2b:3c:5c:39:10:e7:01:41:
33:4d:31:5c:f1:7e:ea:98:a8:5d:b2:70:6a:c8:75:67:f8:c4:
d9:36:6b:42:d7:7f:b1:2b:fc:ee:0a:45:23:06:c9:2c:b8:64:
e5:dd:45:7f:9f:09:8a:90:fe:69:53:bf:5e:cf:f8:88:b2:69:
b2:55:87:e7:87:52:2b:4e:78:bc:9c:0e:53:31:a3:07:ad:8b:
57:b8:64:87:97:5a:4d:1e:36:89:dc:26:29:ab:42:ba:73:a1:
68:87:42:89:34:6d:db:f3:e3:32:7e:17:cd:32:99:fb:06:45:
27:b4:5e:af:e0:40:92:fa:24:8c:c3:e4:f9:d2:82:1c:5e:30:
26:e8:ec:49:a4:fd:0a:bc:9e:b8:3e:a9:ad:ab:ae:ec:98:a2:
b5:ad:43:52:77:72:8c:18:f7:de:a3:cd:ec:e7:55:a6:58:fc:
3d:c4:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:48 2026 by rpki-client