Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft (raw, json)
Hash identifier: KRAaTBdC2NmvjbZKt/eeivSRg7O16TVcMJh8PCwb7mk=
Subject key identifier: E8:82:54:7D:4B:D5:B0:DE:3B:C9:28:EF:46:3F:AE:A4:9E:80:88:FE
Authority key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
Certificate issuer: /CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Certificate serial: 019FA14E3178F23422C64A85654D2E988303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
Manifest number: 1255
Signing time: Mon 27 Jul 2026 02:01:24 +0000
Manifest this update: Mon 27 Jul 2026 02:01:24 +0000
Manifest next update: Tue 28 Jul 2026 02:01:24 +0000
Files and hashes: 1: cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl (hash: 2CZBR8TlNUKOhVbIQViYFA+6WuXEgsDVrF8n8vzzYnM=)
2: thl2RE_JpLIO2mZf1Zc6EgC8dOQ.roa (hash: cb2EuVgJX6TpW/+TNEBCoHYPEE6QUOMfau0NLwCzClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:31:78:f2:34:22:c6:4a:85:65:4d:2e:98:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c
Validity
Not Before: Jul 27 02:01:24 2026 GMT
Not After : Jul 28 02:01:24 2026 GMT
Subject: CN=e882547d4bd5b0de3bc928ef463faea49e8088fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:db:81:80:7c:07:f1:13:85:ad:ee:e3:58:
72:51:45:e9:bb:ac:0b:64:ed:fa:3d:c3:85:d0:4e:
53:f5:b2:60:46:4c:c6:db:63:a4:fb:89:22:65:5d:
c4:72:f3:65:9d:03:08:17:6b:fa:b1:0a:64:7d:d1:
f4:70:06:cb:10:cd:35:c0:fb:33:79:28:48:35:41:
b8:a2:c5:87:95:a1:b4:60:f9:d9:ec:ef:9b:f4:bf:
0f:3c:31:49:20:91:de:c8:8c:75:19:ae:3f:21:36:
23:f1:ac:3a:60:99:c2:1d:f6:b5:d7:11:eb:d5:fd:
e0:86:9f:df:eb:30:73:65:83:12:c1:f3:2b:e4:ba:
a2:a0:43:46:c9:dd:d6:7c:3f:be:59:44:aa:87:a0:
06:af:d7:4d:18:fb:2b:83:f6:c8:c8:44:97:03:44:
38:91:c9:c2:97:ac:94:28:6d:08:c4:cc:4c:b1:ad:
01:a2:e1:95:a7:18:22:2e:10:f9:09:f8:bc:9a:1c:
64:5d:ac:88:dd:7c:eb:7e:59:8e:72:18:eb:1d:c3:
0c:9c:81:74:e6:0b:6c:b6:2f:9f:39:98:63:42:1e:
5a:29:b7:4d:60:fa:0e:bf:57:8b:ba:62:58:ae:e3:
f5:cd:c2:e7:0e:6e:95:60:7d:40:95:d3:a7:32:63:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:54:7D:4B:D5:B0:DE:3B:C9:28:EF:46:3F:AE:A4:9E:80:88:FE
X509v3 Authority Key Identifier:
keyid:71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:20:9b:31:85:2b:cd:0b:dd:a1:29:9c:45:95:ee:8d:3a:53:
79:a2:7c:07:97:aa:0e:e5:12:87:74:83:45:45:04:3b:b1:6e:
8d:c8:53:e0:e5:10:69:e6:ad:fd:90:2b:16:45:c4:aa:38:ff:
8c:a7:c3:d2:5f:27:21:9c:41:bc:5f:0f:87:cc:01:88:33:24:
ce:3c:2e:25:0f:33:31:9e:38:c0:3b:39:44:8e:35:f0:56:eb:
48:13:1a:39:3e:a4:1b:4e:91:26:91:c5:5d:c2:f6:6a:be:3c:
10:0b:ea:26:a6:34:9e:ff:d1:55:9b:69:02:70:0f:23:59:e4:
ca:e5:80:f5:18:73:e1:e3:8a:a1:8b:75:28:1f:3f:ce:32:70:
02:68:b9:da:0c:38:52:5f:b8:76:5f:58:4b:c0:38:8f:3b:e1:
86:96:2c:72:aa:5a:b2:dd:f4:63:53:5e:03:24:3c:75:15:ce:
74:14:2a:ee:83:9d:86:e2:40:91:cb:79:ba:d6:84:77:3b:11:
e6:96:db:eb:9e:6e:13:69:e4:8d:85:10:ce:16:b6:23:8e:9a:
6c:15:21:30:5b:94:c7:46:11:2a:87:19:95:e0:e6:c6:4d:2a:
8b:ce:19:66:41:c4:d2:64:d5:42:23:92:ee:0d:31:9f:13:8e:
92:97:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:00:16 2026 by rpki-client