Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: oauqUpX7GVKrgL2yhGLGMMMn4qrGVeoPZyOb4Z/N9Mw=
Subject key identifier: 71:CB:4D:C2:99:8D:7C:EF:C9:17:57:86:22:E6:4A:C6:56:95:02:6D
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 01A18419BF2B5886100E7CFDCEF4CEFAA909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 134F
Signing time: Wed 28 Oct 2026 20:00:42 +0000
Manifest this update: Wed 28 Oct 2026 20:00:42 +0000
Manifest next update: Thu 29 Oct 2026 20:00:42 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: cBKGWLAG+F7ne45F6g2Z6WRTTBOyeF7VJye547NKPu8=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:bf:2b:58:86:10:0e:7c:fd:ce:f4:ce:fa:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Oct 28 20:00:42 2026 GMT
Not After : Oct 29 20:00:42 2026 GMT
Subject: CN=71cb4dc2998d7cefc917578622e64ac65695026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:53:e6:f3:7b:ed:c3:ca:11:1b:35:84:e2:
22:da:4f:54:10:92:2c:79:41:38:d3:d1:83:0d:c7:
0f:4b:e1:fe:0b:9c:5f:1c:e2:9b:c9:58:1a:97:e4:
06:27:78:53:99:b1:07:68:48:98:cf:ff:08:7b:4a:
75:86:5c:b8:c5:d0:9f:66:e7:d7:f9:b5:50:00:fb:
0c:17:ce:0b:3c:05:93:f4:c8:89:ad:f6:f2:6d:ef:
e3:07:28:b4:35:e9:b6:a9:7b:aa:b7:6f:5a:26:e0:
f8:ee:06:b3:a9:5d:d3:5e:fe:03:96:12:77:76:35:
0d:20:7d:fb:fa:bd:97:88:b5:73:52:97:23:61:ea:
4f:c9:7f:27:d5:b9:f2:5b:b9:d7:88:d5:30:5b:ba:
9b:75:6e:bf:94:28:aa:68:b7:9a:0d:2b:ef:69:43:
19:f0:4f:29:4b:d0:60:f8:33:b1:3c:93:71:b1:f1:
4d:8c:6f:a2:26:f3:bb:67:dc:a7:60:5d:a3:69:1a:
6c:dd:b9:b3:c4:74:1c:6c:06:1e:49:0c:dc:85:e5:
18:fd:42:0a:43:8a:2e:59:a1:f2:7c:ba:e9:c5:24:
88:31:9d:fd:67:a3:1d:99:3a:e2:5a:48:3d:d9:c2:
3f:2d:70:28:59:ba:df:bb:1e:c5:f8:a8:90:0e:36:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CB:4D:C2:99:8D:7C:EF:C9:17:57:86:22:E6:4A:C6:56:95:02:6D
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:07:f3:91:19:44:30:30:a3:ab:c2:aa:35:6c:32:46:31:
68:27:aa:0a:5d:8d:1a:4d:d7:c5:e9:68:ae:4c:4e:02:2c:5f:
0a:ed:a4:b7:98:00:87:d9:49:1e:3c:6c:16:15:a5:64:5c:46:
5f:36:e5:b3:0d:37:92:d3:c1:88:c6:eb:ed:79:90:05:85:6e:
7d:f2:5a:5d:10:e8:9c:0f:d3:9e:4f:da:b0:a2:5e:ba:95:45:
a9:1f:48:e7:02:e0:a5:85:b9:3f:9d:3e:62:7f:1f:a5:6a:b0:
e2:f0:67:1f:d1:93:dd:0c:5a:74:9e:cd:86:c9:b6:9a:ae:f0:
f2:7e:df:78:60:51:b9:5b:1d:10:8c:7b:09:42:44:d8:25:4e:
23:a7:bd:f5:96:b0:30:d4:18:be:84:5e:4c:d1:f8:f9:f8:40:
3a:aa:89:80:c7:35:66:fb:3b:79:4d:2a:16:f6:d0:03:50:0f:
3d:dd:98:f8:a7:11:6c:bf:41:9a:be:fd:dd:56:b5:e7:55:ad:
ef:48:9c:a5:c8:f7:3a:d8:08:0f:9e:e2:cb:15:4b:de:97:7d:
72:69:b6:ab:77:88:d5:03:88:a9:9f:73:9f:01:6c:48:d1:7b:
ba:63:5a:42:93:15:52:77:b0:db:ec:2c:82:1b:a5:c7:23:0b:
94:4c:19:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGb8rWIYQDnz9zvTO+qkJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2Y4M2RlZTkyZDhkM2UyOGQ3MzYyZGZjNzE4NzU1M2Q4
OGM3NWMwHhcNMjYxMDI4MjAwMDQyWhcNMjYxMDI5MjAwMDQyWjAzMTEwLwYDVQQD
Eyg3MWNiNGRjMjk5OGQ3Y2VmYzkxNzU3ODYyMmU2NGFjNjU2OTUwMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEFT5vN77cPKERs1hOIi2k9UEJIs
eUE409GDDccPS+H+C5xfHOKbyVgal+QGJ3hTmbEHaEiYz/8Ie0p1hly4xdCfZufX
+bVQAPsMF84LPAWT9MiJrfbybe/jByi0Nem2qXuqt29aJuD47gazqV3TXv4DlhJ3
djUNIH37+r2XiLVzUpcjYepPyX8n1bnyW7nXiNUwW7qbdW6/lCiqaLeaDSvvaUMZ
8E8pS9Bg+DOxPJNxsfFNjG+iJvO7Z9ynYF2jaRps3bmzxHQcbAYeSQzcheUY/UIK
Q4ouWaHyfLrpxSSIMZ39Z6MdmTriWkg92cI/LXAoWbrfux7F+KiQDjZlFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHLTcKZjXzvyRdXhiLmSsZWlQJtMB8GA1UdIwQY
MBaAFHE/g97pLY0+KNc2Lfxxh1U9iMdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAt
NzkxNDM4MzM2M2Y3LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzMxY2YtYjNmMC00N2Q5LTllNDAtNzkxNDM4MzM2M2Y3
LzEvY1QtRDN1a3RqVDRvMXpZdF9IR0hWVDJJeDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElMH85EZ
RDAwo6vCqjVsMkYxaCeqCl2NGk3XxelorkxOAixfCu2kt5gAh9lJHjxsFhWlZFxG
Xzblsw03ktPBiMbr7XmQBYVuffJaXRDonA/Tnk/asKJeupVFqR9I5wLgpYW5P50+
Yn8fpWqw4vBnH9GT3QxadJ7Nhsm2mq7w8n7feGBRuVsdEIx7CUJE2CVOI6e99Zaw
MNQYvoReTNH4+fhAOqqJgMc1Zvs7eU0qFvbQA1APPd2Y+KcRbL9Bmr793Va151Wt
70icpcj3OtgID57iyxVL3pd9cmm2q3eI1QOIqZ9znwFsSNF7umNaQpMVUnew2+ws
ghulxyMLlEwZmw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:41 2026 by rpki-client