Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: WBQIkBpDzOsp3cZqok/3vSL15HiBPZ4lXanOMzd/HTc=
Subject key identifier: 6C:21:91:D4:69:6D:FE:61:EA:65:C8:9F:63:AA:A0:0A:E6:E2:C2:3E
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 019FA116A1505A35E362D1E05338F1B339EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 01:00:42 +0000
Manifest this update: Mon 27 Jul 2026 01:00:42 +0000
Manifest next update: Tue 28 Jul 2026 01:00:42 +0000
Files and hashes: 1: 97l7MGbvOiMok3nWxOUqvp1AJKE.roa (hash: rOmBwyT877IrMrjHW8F2g/Q8btDoyhvkzdLOTyIG+FA=)
2: CUTOGOeFs0gWQuIN9nGgo3nSgWo.roa (hash: KYflTNM3tjBYLQ/bNFbmP51W7O+D4SNuLCoNBLDu2B0=)
3: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: T8D9923mjAGvwp6Vbdejtyy6I3km5tJQykeUUUp6N8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:a1:50:5a:35:e3:62:d1:e0:53:38:f1:b3:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Jul 27 01:00:42 2026 GMT
Not After : Jul 28 01:00:42 2026 GMT
Subject: CN=6c2191d4696dfe61ea65c89f63aaa00ae6e2c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:31:2a:d1:12:81:c8:13:4d:e9:ef:a3:6f:
b6:d3:db:76:1e:74:9d:73:fd:b3:e3:16:0c:50:f5:
8b:e3:d2:da:e8:93:c7:12:38:eb:2c:0b:43:44:70:
fa:e2:cf:71:bf:78:ae:85:f7:0f:7c:a4:db:89:2f:
05:d2:a0:5b:0c:0b:ae:6a:e5:3f:bc:bb:91:56:1c:
8c:38:16:1a:42:f5:8b:97:72:5f:94:0e:1d:87:97:
2b:53:8c:1b:40:11:ee:67:4c:7c:f1:ee:e1:92:bc:
bf:1b:8c:cf:96:2b:07:bc:67:44:e1:eb:16:b5:02:
58:57:35:e6:63:bf:b7:52:72:98:fa:54:7d:10:3c:
6f:89:e3:c2:99:a9:cd:14:81:4d:51:18:ae:fa:a2:
b3:11:52:e1:f8:f1:23:16:d0:ac:5f:13:60:5a:34:
a7:d0:61:a4:f7:30:44:52:31:96:7c:e8:ea:13:19:
15:d7:98:40:45:98:84:5e:89:cc:5a:dd:29:5e:ae:
c8:7e:02:ab:13:a1:dd:da:1a:cf:eb:e6:fc:40:57:
8e:f9:df:15:19:8a:fc:38:1d:78:a0:d3:00:8f:e8:
01:73:11:d8:d7:7c:14:82:30:dd:6c:7b:99:5f:72:
13:8a:39:7c:6d:f8:86:78:5a:fd:a6:4e:c8:88:ae:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:91:D4:69:6D:FE:61:EA:65:C8:9F:63:AA:A0:0A:E6:E2:C2:3E
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:cd:80:78:ee:65:d3:72:11:ae:b7:ea:f7:23:8a:31:e2:b7:
cf:a2:d2:4f:75:03:aa:46:8e:fe:2b:ca:ba:27:6b:98:bd:97:
fa:5b:36:71:0b:cf:c6:2f:ce:52:ef:b0:1c:1c:a0:64:e5:9f:
52:d8:64:9c:b3:c1:cc:08:7a:56:a3:03:ab:26:76:19:7a:b5:
a7:13:4c:e4:f7:dc:6e:e7:9d:3b:ab:c0:88:a1:f7:02:a0:6f:
d5:cd:8a:b9:e1:d7:dd:51:e6:fa:30:a3:c5:d3:56:3f:6d:e3:
4c:33:7e:81:21:e4:d0:fb:9e:7d:eb:2b:90:25:59:65:98:fb:
b0:31:b4:8c:a2:bf:54:d8:64:82:72:e0:59:0e:8e:0c:94:81:
b7:13:d2:c3:8a:79:55:ec:72:27:74:c3:14:25:8c:8e:04:19:
66:07:f2:b9:a8:b6:ea:01:8f:45:d0:8d:13:6f:e9:7c:1c:a5:
77:90:e9:06:ba:ee:f3:f0:cb:aa:88:55:5a:ae:d2:3b:d7:99:
e0:92:cb:ba:ed:6a:58:dc:e5:37:ee:77:0e:d9:4e:32:fd:85:
43:62:40:5c:74:bd:ef:7a:dc:e3:41:f5:c9:3d:27:8e:53:52:
db:8c:10:fa:2f:d0:5e:3f:43:83:93:6b:cb:ab:97:ca:07:57:
0d:e3:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:47 2026 by rpki-client