Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: EwUvEQ7tMF5eeKyalwrBe2iqhBxCAGDEXHjQ4k78fks=
Subject key identifier: 7D:05:14:10:E4:D7:80:B8:40:D6:CD:35:5C:87:06:BC:3F:06:9C:EE
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01A13FA7C455460DF7F9F1C37674196F4374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 15D6
Signing time: Thu 15 Oct 2026 13:02:01 +0000
Manifest this update: Thu 15 Oct 2026 13:02:01 +0000
Manifest next update: Fri 16 Oct 2026 13:02:01 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: 0OLn4K6+prgBMUIjBRt8EFr8lUgct2zmGGPdg2bMhRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:c4:55:46:0d:f7:f9:f1:c3:76:74:19:6f:43:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Oct 15 13:02:01 2026 GMT
Not After : Oct 16 13:02:01 2026 GMT
Subject: CN=7d051410e4d780b840d6cd355c8706bc3f069cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:27:11:f5:8a:ae:69:31:ac:28:4b:47:65:
cb:e5:ba:d1:1a:ce:a6:2f:44:3f:e7:db:a8:7e:58:
f7:69:49:c0:31:29:4c:59:36:63:44:83:67:e8:07:
dd:7e:cb:ab:e1:cf:c9:2b:8f:bf:92:73:72:a6:97:
2b:02:b7:e3:b5:40:ac:1f:cc:e2:22:ec:58:df:2b:
f0:43:12:66:41:e5:46:39:48:46:dc:de:c6:8e:b5:
df:8a:c5:7e:4c:3b:c0:c3:26:94:5f:c2:37:34:1b:
07:95:76:a2:cb:f7:a9:4e:95:7f:b0:7e:99:cd:fb:
c0:e0:0a:79:a7:5d:00:47:48:fa:3b:dd:c2:09:82:
da:7f:01:f8:fc:52:b2:10:c6:1e:2f:da:3e:66:06:
7c:75:70:a6:c8:4d:16:08:6f:e5:2d:f5:cd:72:63:
80:98:77:f3:30:85:47:61:2d:7f:14:58:e0:16:be:
e2:04:34:70:05:d5:3f:38:37:be:a4:b8:ff:bd:64:
28:70:e4:63:30:f3:50:f0:59:d9:86:a9:f0:de:1d:
ff:a4:3b:c7:f2:af:ae:11:fb:d4:b5:35:6f:7d:3a:
d4:0a:98:e7:9e:72:8e:89:f1:89:72:50:19:c9:d8:
6a:c3:c8:ca:3d:40:a6:0b:c9:c1:03:be:8a:47:f9:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:05:14:10:E4:D7:80:B8:40:D6:CD:35:5C:87:06:BC:3F:06:9C:EE
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:1b:ce:3b:5a:ec:90:9d:6c:99:d5:b8:fa:a2:ff:f7:24:
e7:9a:15:d5:4b:b4:bc:e0:48:7a:5b:78:e6:b9:e2:63:78:bf:
26:1b:5a:94:6d:d0:b3:6d:5e:3c:7d:28:81:db:a7:39:c4:db:
b2:cf:76:30:cc:ea:8f:36:f5:07:32:38:d6:33:17:88:14:0c:
21:1e:b5:48:85:06:da:98:62:5d:5f:f6:11:1e:13:67:04:fb:
b9:86:76:d6:46:b1:45:96:9f:32:70:6d:54:3f:9d:67:39:68:
26:5e:c9:a1:bf:42:0e:df:60:73:b0:e5:57:52:62:43:80:d7:
45:64:c3:b7:c7:5a:56:ff:d7:73:ce:a7:b3:69:24:3e:c6:c7:
73:61:2c:3c:15:10:77:0b:0c:ae:0b:3e:e4:6e:ab:c0:18:09:
ee:61:32:50:9e:11:a0:ef:1a:a7:9e:2b:8c:aa:13:8a:33:f6:
ba:0e:91:56:75:a0:ee:7d:60:4e:89:be:50:2d:79:64:37:bd:
43:bb:ef:42:13:11:df:a5:83:98:df:c5:f4:fe:40:d4:7f:8f:
cc:fe:4d:1f:62:1f:ae:5a:22:ca:97:72:17:b6:25:06:ad:39:
0a:f4:39:2b:54:b7:2f:c7:35:c9:33:b9:6d:9a:eb:fd:d1:5f:
9f:78:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:33:10 2026 by rpki-client