Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: hJO1iP/L7AqTMsj16IRz4Grhis7QwuK1TtTIlRLtsgc=
Subject key identifier: 1E:37:B0:02:3B:6B:9F:06:C2:B9:5E:70:8B:EE:A7:C0:4A:24:1A:84
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019EBF5A3AC13AAFE70B815DF23FF78689CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 0FC1
Signing time: Sat 13 Jun 2026 05:00:21 +0000
Manifest this update: Sat 13 Jun 2026 05:00:21 +0000
Manifest next update: Sun 14 Jun 2026 05:00:21 +0000
Files and hashes: 1: EG39daLgR9HPpte0Senzayfzwe0.roa (hash: hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=)
2: YkNR8BEJgfCCtECoPe3BJgi2rfY.roa (hash: kasrWGvKXSrU/ofaa2EPKbGSVhq0XeiVGZU6XO8huwQ=)
3: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: +2WjXKzjYW/2/k7y3rpfJZGH6lysXSGccpmOj8yPggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:3a:c1:3a:af:e7:0b:81:5d:f2:3f:f7:86:89:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Jun 13 05:00:21 2026 GMT
Not After : Jun 14 05:00:21 2026 GMT
Subject: CN=1e37b0023b6b9f06c2b95e708beea7c04a241a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:c7:80:cb:21:5c:44:1f:17:35:f4:54:b2:
1c:f0:b8:1c:e9:56:8e:04:63:bd:64:50:a9:af:db:
12:f0:d8:37:37:81:89:2c:19:aa:86:04:35:04:73:
c7:a1:27:34:05:61:45:d9:55:c8:57:88:93:df:b0:
d5:63:b3:9d:39:65:a9:e4:99:d5:24:98:a1:01:ea:
86:a8:66:c5:79:ab:f9:3f:65:bc:23:f7:05:b1:6f:
f0:8c:90:82:70:e1:b2:04:b0:b0:ee:cb:24:39:e5:
a7:d2:cd:34:66:d3:55:37:0a:70:9e:89:f5:db:76:
a2:9d:27:6b:de:76:2c:a2:4f:33:fd:8f:78:cc:b1:
0b:b6:1c:be:85:45:c8:45:94:99:8f:09:8a:fe:82:
87:2e:d4:0d:61:19:78:e6:7e:3f:a2:5d:29:bd:83:
96:e6:1e:40:0a:b7:1c:43:e4:0f:5c:84:a1:a6:ff:
43:f3:d4:99:50:56:9a:be:a0:df:9c:7d:62:a5:4c:
79:72:e3:44:7a:47:3c:09:07:0c:6b:e3:78:e9:ef:
bc:6a:ba:f5:61:40:9e:32:27:51:c1:0a:51:ec:08:
11:98:fa:5a:b7:ea:8f:16:b9:14:0d:cd:f5:0b:73:
65:14:b4:2e:ed:55:89:fd:7d:c4:88:00:a6:46:dd:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:37:B0:02:3B:6B:9F:06:C2:B9:5E:70:8B:EE:A7:C0:4A:24:1A:84
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f2:6b:73:b8:1f:49:cd:e2:be:c5:1a:a0:73:54:85:c0:71:
fe:c4:31:a2:89:1b:32:83:8c:fc:23:54:16:3d:9b:9d:55:95:
db:49:8c:f1:1b:59:7e:19:79:60:3d:39:a2:cf:20:fd:e9:f5:
83:9f:4c:ac:79:c2:f6:a3:04:48:2c:7a:bb:95:87:64:0f:50:
20:b4:f2:9b:d4:f6:30:5f:c7:08:1c:ba:6d:ce:37:aa:4b:fe:
51:d7:53:cc:79:9c:d1:a2:f5:81:fd:01:db:36:54:fc:62:c6:
19:d9:b3:56:55:a5:8c:dc:46:6b:9b:16:0f:84:60:24:8a:af:
e7:8e:bf:48:41:3f:eb:b1:dc:5b:73:78:22:94:42:51:e0:2d:
8b:2e:89:59:d2:9a:c0:f2:00:05:0c:4b:c1:6b:95:b9:26:19:
38:b7:45:a3:a6:5c:71:9e:fa:64:11:72:22:33:cc:87:ce:d2:
bc:2e:bb:73:b7:df:4b:53:bc:00:37:9b:a5:4a:23:0b:ef:77:
0d:73:aa:63:17:16:37:58:6e:60:17:76:26:4e:01:7e:e3:cd:
5e:e8:5c:45:6d:ba:fc:6f:e5:6c:2e:0f:17:73:6f:31:5e:e9:
79:08:14:e3:d8:ae:93:4c:32:4a:60:da:58:ca:bb:84:13:3f:
f8:f9:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:23 2026 by rpki-client