Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: 8Gu+QOF37JTsiD/EQ/ewSMM+rT/NPgViOWLAbk+at48=
Subject key identifier: F1:42:D6:F9:8F:D8:16:19:AB:69:50:5A:C7:61:FB:E0:70:0D:32:D0
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 01A17E17F0566176F751FF585431C03F652F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1ACC
Signing time: Tue 27 Oct 2026 16:01:00 +0000
Manifest this update: Tue 27 Oct 2026 16:01:00 +0000
Manifest next update: Wed 28 Oct 2026 16:01:00 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: ibDMiXMpdZyJQAisAa3loIkHCssdOxy8uGPgiU5sP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:f0:56:61:76:f7:51:ff:58:54:31:c0:3f:65:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Oct 27 16:01:00 2026 GMT
Not After : Oct 28 16:01:00 2026 GMT
Subject: CN=f142d6f98fd81619ab69505ac761fbe0700d32d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:35:f8:f0:d9:ad:7f:02:5a:39:db:77:72:
cd:0d:14:b0:78:03:4e:00:a8:68:be:5c:90:23:4c:
64:5a:5f:67:2e:2e:4f:46:8a:60:92:68:fb:8d:0f:
02:56:31:08:64:6e:74:6f:7a:ca:e6:db:5d:84:bf:
34:38:73:c8:f5:5d:38:a3:cc:c7:2b:d9:6d:58:c0:
20:8c:f9:58:88:5c:61:54:40:8b:b9:20:84:73:44:
75:90:9a:22:9b:88:74:c1:9c:4d:18:c7:f9:10:f4:
e0:9a:c6:ab:0e:74:02:5f:2b:e3:95:ae:b2:2c:3b:
6e:9e:aa:16:f2:cc:a5:64:25:c0:2f:09:19:d7:10:
1e:f4:7a:aa:a2:0a:40:e6:57:87:ab:8e:db:4d:ab:
41:b3:d3:fa:a4:4f:ac:26:66:80:ac:99:0a:59:6f:
9a:7b:f7:7c:51:dc:0b:ea:f7:9b:3f:73:fc:e0:87:
19:21:71:95:90:ef:ae:8c:7c:57:3d:2c:59:a0:00:
8b:61:3a:36:50:91:4c:40:dc:1a:41:05:1f:34:4b:
10:7c:8c:5d:d3:0e:69:19:07:ab:f7:7d:0a:9f:af:
14:aa:43:d3:8b:4d:3e:4f:05:e3:0f:4e:7c:d7:b6:
fa:77:52:25:e0:a8:17:f7:d5:04:e4:5a:eb:dd:49:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:D6:F9:8F:D8:16:19:AB:69:50:5A:C7:61:FB:E0:70:0D:32:D0
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fd:49:b2:82:f1:52:ea:ff:16:20:e6:5e:09:bf:99:06:ce:
e3:d1:ac:90:c5:31:44:c5:5b:16:90:26:8a:17:6b:a5:f6:0c:
3c:80:91:07:57:e9:73:c8:3c:d7:2d:db:29:09:76:07:04:20:
eb:e2:53:88:28:21:12:5d:d5:65:be:65:1e:26:e1:e8:2e:7b:
ec:46:e5:f1:23:b4:60:ec:5a:db:30:7e:21:13:3e:a9:2a:89:
49:1c:fb:42:25:36:3b:f8:85:80:f0:77:a8:73:4d:3c:d6:b8:
b3:10:1e:d4:fb:b3:74:20:bb:5d:26:61:c8:1b:de:4e:0d:00:
c9:cd:f0:04:70:ef:c2:41:d6:d1:e8:f5:ac:18:d6:fa:7c:f4:
20:24:39:c2:66:b2:e8:fc:32:21:e1:41:8b:2a:0e:98:46:c4:
88:28:ea:8a:41:9a:fc:62:29:e7:53:77:43:79:e5:c2:ea:d3:
45:95:da:91:a6:a6:70:6d:64:3a:09:67:8c:9f:3a:b1:e8:0f:
13:fe:67:40:3c:6b:6d:c9:84:e5:8d:c6:a4:7f:af:c9:b3:78:
cb:db:f7:68:aa:4d:4e:b3:6f:87:68:4d:4b:08:60:35:3a:c7:
99:e2:b6:b8:0c:47:4b:c0:13:0f:e7:c5:29:81:e9:47:f3:97:
75:3e:55:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+F/BWYXb3Uf9YVDHAP2UvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3
YTJhMDEwHhcNMjYxMDI3MTYwMTAwWhcNMjYxMDI4MTYwMTAwWjAzMTEwLwYDVQQD
EyhmMTQyZDZmOThmZDgxNjE5YWI2OTUwNWFjNzYxZmJlMDcwMGQzMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uU1+PDZrX8CWjnbd3LNDRSweANO
AKhovlyQI0xkWl9nLi5PRopgkmj7jQ8CVjEIZG50b3rK5ttdhL80OHPI9V04o8zH
K9ltWMAgjPlYiFxhVECLuSCEc0R1kJoim4h0wZxNGMf5EPTgmsarDnQCXyvjla6y
LDtunqoW8sylZCXALwkZ1xAe9HqqogpA5leHq47bTatBs9P6pE+sJmaArJkKWW+a
e/d8UdwL6vebP3P84IcZIXGVkO+ujHxXPSxZoACLYTo2UJFMQNwaQQUfNEsQfIxd
0w5pGQer930Kn68UqkPTi00+TwXjD05817b6d1Il4KgX99UE5Frr3Ulv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFC1vmP2BYZq2lQWsdh++BwDTLQMB8GA1UdIwQY
MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt
N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3
LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv1JsoLx
Uur/FiDmXgm/mQbO49GskMUxRMVbFpAmihdrpfYMPICRB1fpc8g81y3bKQl2BwQg
6+JTiCghEl3VZb5lHibh6C577Ebl8SO0YOxa2zB+IRM+qSqJSRz7QiU2O/iFgPB3
qHNNPNa4sxAe1PuzdCC7XSZhyBveTg0Ayc3wBHDvwkHW0ej1rBjW+nz0ICQ5wmay
6PwyIeFBiyoOmEbEiCjqikGa/GIp51N3Q3nlwurTRZXakaamcG1kOglnjJ86segP
E/5nQDxrbcmE5Y3GpH+vybN4y9v3aKpNTrNvh2hNSwhgNTrHmeK2uAxHS8ATD+fF
KYHpR/OXdT5VEg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:38 2026 by rpki-client