Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: LyH/Jk5KOEAiY315Cei4rN2+ADeRPAljBCuO0GDwcrM=
Subject key identifier: 18:E6:1C:87:E6:38:5E:66:1A:F4:E4:6C:35:4F:D3:28:1D:F6:B4:7F
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 01A17A3A7CE1A516563692B24A9DBC1FABD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1ACA
Signing time: Mon 26 Oct 2026 22:00:15 +0000
Manifest this update: Mon 26 Oct 2026 22:00:15 +0000
Manifest next update: Tue 27 Oct 2026 22:00:15 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: vx3AYzL4AhY4D16OeU42Q1EWcAF1nDGcJwwhqeKvfCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:7c:e1:a5:16:56:36:92:b2:4a:9d:bc:1f:ab:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Oct 26 22:00:15 2026 GMT
Not After : Oct 27 22:00:15 2026 GMT
Subject: CN=18e61c87e6385e661af4e46c354fd3281df6b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:cf:48:c8:af:f0:19:5b:04:e7:f9:f2:3c:
ee:39:12:82:72:d5:e8:95:a3:82:1d:53:56:62:a1:
a9:ab:4d:76:20:6e:f0:50:08:8e:cc:e7:5d:79:49:
59:75:37:50:98:8c:89:d3:46:08:bd:64:a4:e1:cc:
3c:8d:7f:a4:b4:b1:68:4d:d3:ff:d3:f8:46:d6:15:
97:7a:40:e2:a8:3b:05:0f:f3:e1:43:fb:3a:10:67:
e7:6e:15:9f:c0:7f:37:34:85:2f:53:86:bd:c3:82:
84:47:0a:ce:fd:a7:2b:8c:6d:fe:8b:94:78:af:87:
a8:ed:a7:2c:cd:64:5e:54:61:75:46:39:79:37:b3:
53:76:be:fe:e0:6f:53:ab:d4:09:ca:04:87:96:97:
dc:0c:fe:eb:6f:37:2c:a9:8e:48:0e:f8:3c:be:3f:
7f:fd:b2:f7:06:3d:6f:7c:9b:5b:ea:8b:7a:d8:f4:
f2:88:22:bb:35:09:29:ea:ed:85:70:17:bd:ff:aa:
d9:aa:14:43:f3:58:b7:cf:bf:f2:07:4b:f6:ab:a2:
54:24:e8:ef:c5:b9:fa:5b:d6:68:d8:ac:48:1c:b9:
e7:a9:6d:42:3c:b0:14:4d:3e:8d:1a:ab:a8:e2:d7:
fb:3e:e5:8f:9a:36:b9:ba:2c:24:29:15:58:bc:15:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E6:1C:87:E6:38:5E:66:1A:F4:E4:6C:35:4F:D3:28:1D:F6:B4:7F
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:46:16:72:97:f5:40:39:13:bc:1d:d1:fc:1e:1c:95:bd:1d:
82:a1:ce:9b:b8:36:fe:0b:76:97:0c:53:ae:38:65:68:6b:36:
7b:2d:dd:d2:85:fc:54:6e:80:48:e4:73:0e:ad:9a:c5:5f:07:
23:81:63:da:ae:1c:2f:1d:0d:dc:24:be:8c:4a:a9:e5:3c:62:
16:7b:61:0e:28:c9:c0:e5:d6:8b:3e:ca:d1:dd:1f:09:5e:0e:
f7:00:66:53:49:2e:33:1b:1b:6d:ab:45:75:a7:1e:f8:f2:22:
61:cb:7b:c8:6c:ed:bf:ea:02:18:11:85:49:19:55:f2:08:ce:
70:24:2e:70:65:c5:7b:9f:11:2e:00:5c:62:37:35:57:cd:e0:
e9:a6:90:4b:ae:5f:d8:75:ee:fd:86:61:c9:7d:3c:70:58:26:
f6:ff:37:11:28:80:a8:35:64:bf:1d:9f:e1:e7:a3:30:11:91:
bf:1a:63:42:bd:c7:b8:e4:8d:1c:ab:67:68:cc:76:db:6d:4f:
ac:11:0f:8d:8d:4e:a0:2b:39:90:7a:08:d9:cb:01:4e:de:9a:
10:c3:d2:6d:27:43:61:bf:1d:de:de:ff:08:ef:ce:0c:db:2d:
0f:9f:91:0a:72:92:31:a3:ea:e8:00:67:6c:3e:c7:a5:7a:b8:
ab:b7:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:18 2026 by rpki-client