Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: 4WBy7TKHtQ98E+MD9tZveGSkKe/vL+/Oh8WbNsRlLDk=
Subject key identifier: AB:D9:98:18:DC:19:AE:15:8E:29:76:29:A8:62:C1:9A:14:77:37:3A
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019CAD595B4C381BC677956030CCFD6A0612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 1378
Signing time: Mon 02 Mar 2026 07:00:40 +0000
Manifest this update: Mon 02 Mar 2026 07:00:40 +0000
Manifest next update: Tue 03 Mar 2026 07:00:40 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: l5ocD61htIthxHKJEIyvtLmCQ1nz4PCcuejUJSTiOi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:5b:4c:38:1b:c6:77:95:60:30:cc:fd:6a:06:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Mar 2 07:00:40 2026 GMT
Not After : Mar 3 07:00:40 2026 GMT
Subject: CN=abd99818dc19ae158e297629a862c19a1477373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:f8:b0:09:fe:85:48:ed:22:1f:5a:cd:f2:
d4:17:07:6f:82:92:78:63:ca:43:12:7e:85:84:24:
f7:08:57:37:34:02:4c:56:f7:e9:58:7c:fd:ba:dd:
e2:1b:5a:af:7d:c1:4f:72:78:22:d5:f7:7a:dc:70:
d6:e7:37:62:64:01:be:6b:b0:27:1a:40:09:85:f1:
be:6b:1f:5c:0d:27:f1:c0:c4:8d:e5:d9:80:8d:09:
f2:8a:93:54:6f:a0:93:92:9c:b2:a0:75:74:9a:f2:
e1:ab:45:8f:c9:da:6a:42:ab:16:6a:45:7e:9b:b3:
30:6f:83:14:50:e4:b8:ec:8f:56:0c:65:28:47:3d:
73:ac:c5:13:23:ac:ee:33:58:b9:b7:71:b8:29:dd:
49:11:3d:12:11:7f:ff:d3:7d:85:d9:c3:e1:e5:1f:
da:b5:9a:f9:3e:14:e3:eb:e1:3f:57:3e:78:c7:3c:
74:30:2f:63:a7:6b:38:3d:7d:99:0d:a8:4a:58:16:
d1:25:3f:6c:ca:46:6e:54:10:0d:46:ef:6d:fc:40:
5e:e8:43:8a:bc:30:64:06:b0:9a:65:48:14:a1:e4:
7c:7f:2c:e4:be:ac:f3:cf:f5:4a:f3:5a:6e:7f:9f:
59:64:2b:9c:56:ab:1a:55:1b:0f:50:1f:53:15:ab:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:98:18:DC:19:AE:15:8E:29:76:29:A8:62:C1:9A:14:77:37:3A
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:45:c0:84:2b:cd:6f:66:06:2c:88:df:05:73:e5:12:d2:01:
bf:86:10:b3:77:a8:35:47:d7:dd:b4:a9:a8:c8:3d:e4:03:3b:
c1:a6:6e:8b:51:11:2f:4d:f6:ed:98:e1:de:f2:26:7a:d8:7b:
8d:7c:07:d3:3c:4a:97:13:13:39:75:3c:bc:50:37:97:ff:ed:
1d:a3:61:ba:17:66:84:03:c3:f1:51:cb:c0:86:3a:8a:7c:cb:
1d:40:20:8d:75:7a:25:50:18:d9:85:d9:80:79:b2:cc:5a:6b:
3d:17:a3:08:8c:9c:96:ef:16:85:ff:f8:18:aa:e2:8e:4f:fb:
32:66:de:48:02:5a:b8:8f:c1:8e:d9:b1:30:78:d9:b7:6d:8b:
b2:f0:db:9b:28:b3:e0:ee:02:30:e8:84:5d:99:d6:74:af:08:
1d:97:f9:b1:e0:d6:99:cb:2d:3a:21:34:7b:dc:97:8c:9b:0f:
61:b1:1c:f7:ff:7f:31:74:3f:9d:1a:bd:20:e3:fa:c8:ed:d0:
c0:28:ae:ec:9d:0f:a4:9b:ac:27:42:b9:1b:3e:de:99:80:42:
c1:3d:4e:b4:36:f5:03:ad:ee:07:96:48:ff:c8:b0:9c:17:e9:
de:df:d5:29:8a:51:9b:3e:eb:81:df:64:c8:86:29:30:ea:77:
20:53:09:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVtMOBvGd5VgMMz9agYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjYwMzAyMDcwMDQwWhcNMjYwMzAzMDcwMDQwWjAzMTEwLwYDVQQD
EyhhYmQ5OTgxOGRjMTlhZTE1OGUyOTc2MjlhODYyYzE5YTE0NzczNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotn4sAn+hUjtIh9azfLUFwdvgpJ4
Y8pDEn6FhCT3CFc3NAJMVvfpWHz9ut3iG1qvfcFPcngi1fd63HDW5zdiZAG+a7An
GkAJhfG+ax9cDSfxwMSN5dmAjQnyipNUb6CTkpyyoHV0mvLhq0WPydpqQqsWakV+
m7Mwb4MUUOS47I9WDGUoRz1zrMUTI6zuM1i5t3G4Kd1JET0SEX//032F2cPh5R/a
tZr5PhTj6+E/Vz54xzx0MC9jp2s4PX2ZDahKWBbRJT9sykZuVBANRu9t/EBe6EOK
vDBkBrCaZUgUoeR8fyzkvqzzz/VK81puf59ZZCucVqsaVRsPUB9TFavCiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvZmBjcGa4Vjil2KahiwZoUdzc6MB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUXAhCvN
b2YGLIjfBXPlEtIBv4YQs3eoNUfX3bSpqMg95AM7waZui1ERL0327Zjh3vImeth7
jXwH0zxKlxMTOXU8vFA3l//tHaNhuhdmhAPD8VHLwIY6inzLHUAgjXV6JVAY2YXZ
gHmyzFprPRejCIyclu8Whf/4GKrijk/7MmbeSAJauI/BjtmxMHjZt22LsvDbmyiz
4O4CMOiEXZnWdK8IHZf5seDWmcstOiE0e9yXjJsPYbEc9/9/MXQ/nRq9IOP6yO3Q
wCiu7J0PpJusJ0K5Gz7emYBCwT1OtDb1A63uB5ZI/8iwnBfp3t/VKYpRmz7rgd9k
yIYpMOp3IFMJwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:23 2026 by rpki-client