Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: z5dqnnvUMevSbqJEMBnR3hfh8W112UMkygtJ4tZ7m0o=
Subject key identifier: 41:6F:51:9A:70:36:C7:96:91:61:42:05:04:2B:2F:AC:37:A4:75:FB
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 019D9AE35CD701095A5035B66EB52A3B8358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 13F3
Signing time: Fri 17 Apr 2026 10:01:24 +0000
Manifest this update: Fri 17 Apr 2026 10:01:24 +0000
Manifest next update: Sat 18 Apr 2026 10:01:24 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: eWbFwIpeo2qiNiJX8O9EHSBQ0XBuQBaVTrn2QmJqyWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:5c:d7:01:09:5a:50:35:b6:6e:b5:2a:3b:83:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Apr 17 10:01:24 2026 GMT
Not After : Apr 18 10:01:24 2026 GMT
Subject: CN=416f519a7036c79691614205042b2fac37a475fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:91:cf:15:ab:be:d0:1f:af:e8:1a:8e:e9:
50:d7:6e:7d:bd:61:c9:ab:94:18:cf:6b:21:3a:ad:
59:c2:42:0a:85:aa:13:53:b4:f6:e7:33:d0:65:d6:
ad:d0:25:1c:49:df:3d:a2:61:04:61:05:e3:b4:e0:
29:b4:eb:6d:bf:ad:71:d6:37:76:c8:7a:d6:05:a1:
81:d0:2b:fe:b9:63:70:fc:36:06:67:7f:22:9b:ce:
3d:c8:5e:57:ce:d1:2f:32:a0:27:aa:51:63:c0:17:
6d:39:60:de:f7:1d:9e:02:38:76:31:45:65:9e:a3:
41:e5:2a:cc:f7:b2:c5:cf:17:b1:4c:10:0f:6f:0b:
48:14:c7:d4:58:e1:6b:f3:61:9c:78:96:03:fe:1d:
11:0c:7f:74:63:8b:28:1e:b9:9a:ff:7e:c5:54:d1:
d6:58:40:18:0a:31:84:3f:27:79:0a:26:0a:b7:e3:
e4:7f:e2:fc:91:83:de:55:94:84:b3:87:a2:19:56:
73:0f:2b:7d:56:18:75:6f:13:71:cd:1f:bf:e0:96:
10:18:6f:9c:3f:b4:72:b9:70:86:c7:e3:9f:3a:c3:
a8:4f:43:b9:4a:0f:39:06:49:28:36:59:2b:13:bd:
f4:6b:19:f4:15:e5:be:3f:91:4d:57:f6:bd:8c:15:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:51:9A:70:36:C7:96:91:61:42:05:04:2B:2F:AC:37:A4:75:FB
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:b6:a8:d3:39:b8:6b:17:df:11:3a:66:6c:e6:61:41:7f:
3d:01:b8:08:85:96:61:48:23:f4:69:f9:75:1b:b5:71:94:63:
15:08:b1:90:3f:17:a0:2c:1c:fc:e9:0f:2e:bd:4f:95:6c:eb:
51:e4:7d:80:ca:5b:bc:d6:c1:23:2b:6c:a2:64:d4:cc:56:a8:
69:79:53:16:29:77:bd:6c:f8:56:f2:f7:86:d4:43:84:0b:ee:
7a:ca:a7:b4:4c:1d:40:6e:43:d3:50:e8:33:0e:21:eb:92:e8:
85:a4:7f:aa:71:26:b8:e7:fb:7f:ca:9b:1f:77:72:45:73:15:
b4:3d:26:0e:f7:4a:4f:31:01:93:a3:30:8d:06:b3:02:f8:29:
bb:a1:48:bc:43:f7:16:24:38:f6:67:b3:bd:cc:33:06:e3:01:
7b:a5:f0:d9:e2:c0:9c:f4:8d:90:2b:a0:12:39:eb:ae:6a:4d:
f2:ff:b2:16:56:df:cd:a8:4b:fa:66:6c:ba:95:ed:b1:37:99:
8b:8f:9c:c7:1a:c4:45:1a:a6:ef:08:c7:54:75:dd:65:5b:b1:
9d:41:10:59:6a:79:6f:73:15:d3:2c:db:8a:4a:1f:c4:a0:4c:
75:2a:57:99:a0:15:95:46:0b:cc:62:6f:0a:7c:3c:31:ae:59:
2d:da:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:28 2026 by rpki-client