Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 1nCxxTpdj9ceA9cwqfyZCITbqnO/2Crj0oHuHdYykpI=
Subject key identifier: 40:22:03:D2:3F:CA:7A:39:19:AB:29:34:15:FD:A2:64:39:9F:6F:50
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019FA90760536BE576795DEB8AC8674ADA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 103A
Signing time: Tue 28 Jul 2026 14:01:00 +0000
Manifest this update: Tue 28 Jul 2026 14:01:00 +0000
Manifest next update: Wed 29 Jul 2026 14:01:00 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: 3gKTTCBBKxY99lZWQGN0z9VJVKa/B05xKBAr+vMjPv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:60:53:6b:e5:76:79:5d:eb:8a:c8:67:4a:da:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jul 28 14:01:00 2026 GMT
Not After : Jul 29 14:01:00 2026 GMT
Subject: CN=402203d23fca7a3919ab293415fda264399f6f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:cc:b6:cb:13:1b:5a:62:ec:48:89:c4:53:
dd:56:ec:c7:8d:3f:c9:15:8d:68:af:c5:bb:54:fa:
de:60:68:3b:94:84:51:1f:0a:7d:72:65:82:66:d4:
89:d2:df:b8:44:fd:0f:53:4d:35:8b:2c:21:8d:3a:
78:c6:97:bb:e4:ee:60:ff:cc:36:8a:76:5a:ce:8c:
09:2b:8c:ad:bb:96:64:8d:fc:a5:2b:f5:6b:fc:f4:
1f:74:cb:ba:eb:fd:ed:ca:1f:50:b8:f2:4b:eb:c2:
38:30:04:65:a5:d6:a8:b2:59:e7:a0:14:73:5d:2a:
b8:0d:5a:90:48:4b:c1:d3:5f:fd:8d:81:7f:05:a8:
12:bb:8f:c3:47:0d:2e:2c:26:25:c5:cb:ac:c6:3f:
af:a9:1f:5d:ee:36:0b:d5:17:fe:a3:a5:66:3f:2f:
61:ba:15:e4:1c:68:fe:d2:df:8d:fb:82:39:36:9b:
d5:95:8d:c5:dc:32:d7:39:23:b5:48:da:c8:e0:a5:
0a:04:41:45:fd:ec:e2:a3:82:23:82:ee:16:fe:3f:
bc:ae:9d:8d:81:d0:25:22:c9:81:d9:63:e6:79:97:
98:65:42:b2:90:4b:83:4a:64:41:5b:27:13:42:b5:
23:93:81:0b:d7:f8:6f:e6:28:4e:81:1b:41:bf:2f:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:03:D2:3F:CA:7A:39:19:AB:29:34:15:FD:A2:64:39:9F:6F:50
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:ca:94:db:cb:6d:21:cd:8d:53:43:02:4c:be:46:2a:bf:
59:60:bc:95:17:49:6f:68:5f:fc:a9:9b:fe:6b:2a:db:92:40:
e5:51:23:2d:ff:e6:f2:c1:d7:f2:23:d7:a9:5f:65:ff:57:4b:
1c:ac:7e:b0:4f:8b:29:32:02:70:1f:11:6e:99:87:92:3f:50:
2e:0b:14:22:91:f9:ae:68:b5:96:69:33:fe:35:40:8d:b3:25:
8c:bd:90:4d:fc:cf:de:c1:d8:69:91:6c:77:02:68:00:ee:6d:
1f:58:52:07:e5:12:34:ed:9d:99:a2:a4:ae:31:31:f7:65:27:
23:df:f4:4c:fe:9c:97:72:ab:f6:ac:08:38:24:57:c6:00:c3:
95:58:ea:2b:76:10:cb:e1:16:da:93:28:50:44:57:a8:1e:39:
dd:dc:d0:dd:bb:b1:81:1b:d8:9b:47:ed:82:28:d2:00:e7:19:
4d:ef:0f:7a:8d:c9:9f:68:1b:c8:13:b1:e4:20:bd:7f:99:e3:
56:08:c2:d8:3b:09:8a:2a:93:82:ab:42:13:b8:c3:66:1c:1c:
a0:6d:0f:1e:e1:1c:b5:22:68:08:d3:ce:38:9d:8d:ae:e5:21:
5b:97:74:5d:51:af:19:70:8f:49:1e:0d:4d:fb:b0:d1:6a:f1:
e1:00:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:08 2026 by rpki-client