Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: lwbpf4/wj7topvJbc8q3wE+v7dCu3ecnMMAYy7YXM24=
Subject key identifier: 9B:8F:1A:36:C0:9E:8B:6C:33:9D:74:8B:6B:7C:B6:0C:93:AD:79:0C
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 019D9961F21A415AF4CD11F38557ECF0E736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 12F8
Signing time: Fri 17 Apr 2026 03:00:26 +0000
Manifest this update: Fri 17 Apr 2026 03:00:26 +0000
Manifest next update: Sat 18 Apr 2026 03:00:26 +0000
Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: Y+JezpnL0xwZYZv/tvrA7meQLDOtjLJ9VjKbypJ0CkQ=)
2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f2:1a:41:5a:f4:cd:11:f3:85:57:ec:f0:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Apr 17 03:00:26 2026 GMT
Not After : Apr 18 03:00:26 2026 GMT
Subject: CN=9b8f1a36c09e8b6c339d748b6b7cb60c93ad790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:22:19:b1:8f:51:f8:aa:3c:f8:53:ad:1f:
73:4e:ec:6a:b9:e3:a9:08:2a:78:0a:3c:fb:fb:75:
ae:c3:6b:4c:47:65:bc:90:48:b5:f4:27:ae:a7:88:
ac:58:14:86:40:0c:ef:3e:4d:6c:fa:76:11:bd:3c:
fc:0c:48:7d:ca:a1:90:df:6e:ce:4b:4b:a4:f8:1b:
4a:e3:9d:dd:d0:91:05:f2:dc:bf:55:2b:31:75:e7:
c5:6e:a6:e5:59:5e:ad:2c:33:46:61:5e:99:e6:b0:
bf:48:b2:f4:f3:10:bb:31:8c:a5:94:31:d8:1a:4a:
95:c7:9c:3b:95:b7:83:a4:07:94:6d:ea:cd:bd:03:
68:e5:19:0d:3b:b2:f1:bc:a6:9f:9e:a9:15:09:5e:
a3:a7:7e:7b:eb:27:fe:a8:5c:75:78:ad:10:fe:57:
a4:37:75:65:f0:c5:d3:e2:95:b9:26:14:85:1c:26:
50:75:8d:89:f8:a5:7f:20:64:49:49:20:c2:01:66:
d2:16:c4:4c:84:7c:30:22:52:58:ab:02:b6:0c:11:
53:7f:a3:19:40:8d:7e:15:ec:ca:d7:e6:63:9e:ef:
72:fc:20:41:99:cc:80:e9:e9:cf:c1:50:bd:50:05:
a8:fa:c3:39:82:36:8c:49:1a:c3:2c:19:70:a7:cd:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:1A:36:C0:9E:8B:6C:33:9D:74:8B:6B:7C:B6:0C:93:AD:79:0C
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f4:75:b1:90:4e:8a:4a:59:d3:e2:59:93:b3:72:ae:23:5c:
bc:1f:93:81:93:8a:02:16:32:e4:f3:7d:32:f3:71:95:34:97:
1d:07:ac:6b:bc:59:93:e5:67:78:d4:63:d2:17:cb:18:bb:55:
4a:e5:a4:de:65:3a:e2:47:d3:ff:1d:a2:38:59:d5:17:dc:eb:
74:57:4b:a0:0d:57:44:e6:a1:ff:a7:17:1f:95:e2:59:cf:0f:
2a:42:f4:cd:3e:54:6b:b5:5a:e1:aa:c7:14:64:18:91:4c:87:
a3:48:1b:5a:e5:33:2e:43:a2:38:19:b7:54:ae:c3:24:87:ae:
e7:62:20:67:ba:bd:a4:c0:95:fd:da:1e:99:e9:4c:d3:8a:67:
5a:1d:99:d5:4b:1e:b3:09:8c:30:e7:bd:cb:ef:d4:5c:7f:5a:
27:fd:8c:51:c8:38:73:60:ab:7b:47:4e:2d:6f:12:fb:c6:4f:
cc:cc:f1:01:6d:d3:30:f0:0d:20:18:1a:b5:6a:3d:5c:76:e1:
36:aa:b3:df:17:b2:fe:f5:34:03:8b:12:e7:a6:c0:5f:3c:ac:
f5:09:61:79:e3:6a:57:a7:18:b8:07:a7:07:08:00:f4:37:8c:
f0:13:87:c2:42:1b:00:1a:9a:4d:45:2a:1a:ed:ba:2d:ba:43:
d0:c2:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:33 2026 by rpki-client