Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: dQe4UFNdDHbAiqhMsalSp88m8EE2Q8yscM59XUYIatI=
Subject key identifier: C3:9C:72:30:0B:53:E3:A6:9F:5D:C6:C8:A9:D9:1C:FC:CA:76:77:39
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019EC25BE80B998866D817821590510D74D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 148C
Signing time: Sat 13 Jun 2026 19:01:03 +0000
Manifest this update: Sat 13 Jun 2026 19:01:03 +0000
Manifest next update: Sun 14 Jun 2026 19:01:03 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: myBCHUimErqRfFdEVj3jt+HZtVQjS5XAxJPdsphertE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:e8:0b:99:88:66:d8:17:82:15:90:51:0d:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jun 13 19:01:03 2026 GMT
Not After : Jun 14 19:01:03 2026 GMT
Subject: CN=c39c72300b53e3a69f5dc6c8a9d91cfcca767739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:9f:d2:c2:85:ee:25:c1:b1:10:9e:a8:ea:
a7:a6:56:a7:d7:51:de:d5:4b:a5:b1:0c:3e:4e:64:
4e:a6:08:26:63:78:90:41:f3:d1:23:d1:0d:17:af:
03:c3:b2:6b:f1:14:64:70:25:74:a1:b4:48:1f:02:
a7:cf:58:b1:3f:9b:8f:90:66:e3:a7:aa:7e:a8:0c:
c8:b7:88:83:47:dc:d1:a5:fd:c7:fb:b8:68:73:ac:
72:1a:52:0c:1c:30:a0:58:5f:53:fc:ed:cf:da:e7:
06:83:2a:f2:e5:c7:82:d3:09:2d:3e:6e:07:64:1e:
9c:cf:90:a0:5c:21:e3:f9:be:b1:05:89:8c:bc:45:
99:67:d0:42:97:7d:b1:54:40:f0:25:41:f6:89:06:
7c:ad:f7:eb:9e:41:76:5f:58:b7:6a:00:66:3d:0d:
2b:65:83:18:a1:00:6d:8e:42:2f:99:69:74:96:5a:
e0:ee:0d:9f:30:bc:a5:c7:fb:df:2e:a9:b0:45:8e:
26:d8:1e:b7:5b:db:c2:7a:36:8e:69:3b:ee:84:06:
69:47:e9:90:b4:4e:ca:4c:bc:36:4a:ad:31:7d:a1:
b1:35:b5:b8:47:ff:ac:51:e9:94:52:32:ff:3a:55:
f3:5b:c9:2d:87:a5:63:3a:62:cf:9c:9f:82:18:6e:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:72:30:0B:53:E3:A6:9F:5D:C6:C8:A9:D9:1C:FC:CA:76:77:39
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:de:0a:a3:9a:46:ba:5f:c3:32:fc:61:98:a8:dd:83:c8:c0:
e3:fe:2c:0f:02:8d:41:63:aa:2c:55:b6:46:1b:22:5f:8e:ef:
d6:7b:41:68:25:3d:a5:d4:ba:03:a2:45:e2:a7:d9:9b:b8:70:
0a:9c:25:02:63:00:d4:9b:58:20:55:97:66:20:d9:79:b3:16:
95:76:2b:20:9d:af:da:15:e4:f1:da:cc:ec:01:b8:b6:7e:0e:
a2:78:e8:1e:78:9d:d2:8d:7c:88:fd:62:10:a0:dd:e9:75:b0:
be:7b:c7:a9:d3:b3:a4:75:29:4e:d0:0d:13:ee:27:c3:61:aa:
cc:34:2b:0d:80:14:c4:ef:64:c7:9a:76:b0:ee:df:ad:f4:70:
27:9f:ea:5c:a9:fa:53:65:9b:b0:de:14:10:6e:59:1c:e4:24:
d3:56:cc:e1:eb:56:ce:fe:57:0a:11:6f:f1:03:70:97:ff:4c:
f8:38:9c:fc:48:ca:8a:a1:5b:23:29:57:6f:84:de:59:4b:b5:
8f:48:66:04:6c:0e:64:4a:96:5d:ad:c6:17:4a:8b:94:95:01:
45:e8:72:87:a7:dd:6c:30:f0:30:58:62:50:a8:4f:3c:27:b2:
35:e4:59:f9:ba:35:f1:44:ce:94:40:2a:2f:3d:37:d9:46:41:
ec:bd:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:24 2026 by rpki-client