Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: MTeIuLfY5eITDBRn6J+YTsWGpoisVKmoi1IoTaY9sgQ=
Subject key identifier: 84:64:6B:A1:EF:9B:45:83:FD:85:BB:2D:72:B8:22:EB:FB:F4:92:AA
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019EC0DB41C392C49DB0FCC997F9ED6FFF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 1391
Signing time: Sat 13 Jun 2026 12:00:55 +0000
Manifest this update: Sat 13 Jun 2026 12:00:55 +0000
Manifest next update: Sun 14 Jun 2026 12:00:55 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: uVRxsy7VOMLBInj8iFm9/FOFGhpoeJ0Tq/A/MyZo754=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:41:c3:92:c4:9d:b0:fc:c9:97:f9:ed:6f:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Jun 13 12:00:55 2026 GMT
Not After : Jun 14 12:00:55 2026 GMT
Subject: CN=84646ba1ef9b4583fd85bb2d72b822ebfbf492aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:71:89:6e:70:7d:3d:ca:75:dc:1b:34:f2:
ac:77:6e:3e:0e:bc:63:03:bd:a8:d6:9d:99:01:41:
49:91:b1:d9:e1:55:1a:f1:28:d2:0c:91:d8:a8:2f:
c8:1e:bd:ac:68:93:41:45:a9:fa:3e:94:bd:98:b9:
e4:02:dd:c7:75:bb:e7:4b:84:94:c8:ee:0e:77:ba:
dc:de:1f:10:e2:56:72:8a:1f:e4:a9:8d:27:d7:af:
d6:5d:0c:a9:90:b7:bc:58:70:ef:d0:35:2f:cb:a2:
7e:e3:2e:ab:df:f9:cb:07:75:7e:14:ab:8a:93:d2:
3f:30:3b:7d:69:60:39:e9:6c:2d:92:b3:55:2c:2e:
b7:1e:12:28:53:17:a5:09:0a:f3:61:aa:18:40:25:
37:10:3c:73:d9:d4:d4:0a:ef:ed:2b:bd:3a:5e:1e:
53:c9:fc:e3:7f:b7:62:22:53:7f:46:6e:a5:a3:53:
96:33:61:85:83:22:37:84:ce:10:fa:51:4e:06:a8:
cd:60:ef:a2:1b:fa:66:d4:ab:f7:29:ed:54:9d:3e:
62:5e:8c:d9:d2:48:54:21:75:14:29:43:1a:e4:f1:
2d:32:63:73:04:9b:7d:f1:ac:35:37:8b:e5:b7:4b:
64:4b:e0:e8:54:20:30:d5:1e:25:f1:eb:6e:ac:e9:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:6B:A1:EF:9B:45:83:FD:85:BB:2D:72:B8:22:EB:FB:F4:92:AA
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:50:92:7f:dc:ee:df:71:66:ed:e1:91:5d:72:f2:85:99:a7:
d4:87:fa:d5:65:fb:d4:77:70:93:3c:49:77:3b:98:cc:f4:44:
17:d4:e0:d6:38:02:e4:32:c3:c2:79:40:3b:58:34:28:ef:5a:
90:31:c8:ac:6c:77:80:8f:89:8c:46:56:99:2f:4a:14:7b:66:
71:06:0e:ef:b3:03:17:14:a4:ca:d4:2b:15:df:3f:30:49:6a:
0b:5a:94:27:f9:cb:ba:4f:25:6c:fd:fc:ea:e6:1f:43:c9:aa:
92:ac:f1:2a:62:7f:67:3a:5f:40:eb:6b:3f:76:84:71:e9:68:
45:05:77:de:fb:77:0a:47:e6:94:a3:94:08:58:bc:45:f1:30:
2e:33:ee:aa:e2:67:78:a4:dc:be:12:fe:ab:2c:62:3a:a3:ea:
c4:74:1d:79:2a:95:f8:8c:61:7a:98:1e:13:1c:d6:17:07:ab:
f8:e8:52:64:df:92:0f:ba:ad:c8:9a:d9:de:de:6b:cb:fe:c0:
49:cb:c9:72:ea:64:3b:1a:a9:57:f0:bb:07:b2:d5:17:31:04:
df:ab:fa:9b:67:2d:6a:c9:30:f7:a5:ac:92:65:5a:9b:6e:5f:
3b:88:bf:e0:e5:6e:15:85:4a:f0:9f:cf:e5:da:28:6c:6d:1c:
7c:3c:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:41:42 2026 by rpki-client