Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: rOlqDrXPNcwXBD50pUc3kZNHv+gHKDl+ZzchDAWRWBs=
Subject key identifier: D6:C9:4E:94:F3:BA:CD:37:2F:C5:68:DC:4C:4F:33:91:88:B2:17:99
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01A11AF4D43A31762479554E7DA693101747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 15C3
Signing time: Thu 08 Oct 2026 10:00:14 +0000
Manifest this update: Thu 08 Oct 2026 10:00:14 +0000
Manifest next update: Fri 09 Oct 2026 10:00:14 +0000
Files and hashes: 1: 0I00I8J66neTXe4iZZcrlFXaZ8U.roa (hash: coA5RtPDBJN+kY2dT0FgtVFZYsCgYcbOym4tHbbuY/Y=)
2: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: W7ruUQqpNItOHM1xEiIVtJbJtXja3JhHFZpDmsX9cCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f4:d4:3a:31:76:24:79:55:4e:7d:a6:93:10:17:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Oct 8 10:00:14 2026 GMT
Not After : Oct 9 10:00:14 2026 GMT
Subject: CN=d6c94e94f3bacd372fc568dc4c4f339188b21799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:56:b9:45:f1:e8:21:64:51:e4:51:bc:3c:e0:
46:58:62:7b:cb:5f:f3:a4:be:bb:2a:8d:b5:70:8b:
95:5e:1e:4f:4c:de:91:29:38:f9:3c:af:8a:cd:b8:
34:1d:3a:25:42:b5:b0:ff:fe:bb:a5:e0:af:90:fb:
28:53:5d:01:2f:55:ce:9f:9b:bf:e6:6f:2b:e2:cb:
a3:50:f7:7c:65:bb:22:3d:51:e6:df:65:30:19:60:
73:33:9a:91:37:51:c9:e2:2b:a6:14:fb:a2:71:94:
c5:31:f3:52:f2:4d:b1:48:a9:1d:55:0b:a6:bc:07:
f3:60:1c:29:e0:c8:b0:ec:26:73:65:74:48:04:e2:
85:b3:a0:a6:76:30:3c:aa:c4:f2:56:7b:fc:24:10:
28:d6:87:1a:51:ff:fc:6f:dd:f6:8e:94:e8:fd:3b:
7e:7d:74:2f:1b:57:8e:94:06:a6:3d:89:ad:09:09:
af:15:fd:a4:d3:68:85:0c:ca:29:e3:d9:f7:1e:ea:
1a:ea:07:4c:ce:1b:13:64:b8:75:95:b0:c4:2b:1a:
48:c1:8b:80:20:ad:b8:d1:ff:5e:8b:82:7c:bc:d9:
ec:62:52:e2:10:bb:f1:72:0e:36:d3:d5:45:23:df:
7f:a7:56:a0:70:2f:1a:bc:5a:ac:a0:97:b1:32:9b:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C9:4E:94:F3:BA:CD:37:2F:C5:68:DC:4C:4F:33:91:88:B2:17:99
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:ff:30:d1:24:81:27:ee:8c:0f:c0:f2:f3:88:ac:91:23:
60:3c:ce:73:7b:54:07:4c:e4:fd:7b:cd:c0:96:fd:0b:29:53:
f4:6d:88:29:54:f4:3f:5e:28:e6:c9:d1:60:c6:20:d1:cd:fb:
a5:f5:86:10:a5:0a:c4:6e:fc:76:73:1a:7f:5d:9c:30:be:05:
6c:54:05:de:c3:10:54:07:2f:10:76:02:be:1d:54:af:3a:6d:
47:1f:96:fa:85:99:e6:67:02:f4:32:b3:d9:d7:39:c1:83:be:
b3:60:a8:0b:be:d1:05:18:38:ce:b1:ed:ae:bf:88:68:03:c1:
ac:8c:67:9b:05:5d:47:6b:76:a5:88:38:ba:bc:48:03:9f:55:
9e:a5:bd:d2:62:75:50:9b:23:ac:a9:c0:43:ce:d0:56:bb:8d:
f7:71:25:c8:9f:59:80:4c:3f:4e:dc:b3:00:2e:75:a2:cb:0f:
81:e9:a7:d6:bc:68:31:db:d2:e8:af:96:51:f7:7a:4f:d4:d0:
35:f0:0c:39:f8:2f:c0:15:e4:4d:3e:cb:d8:6c:ae:28:e7:8a:
f5:ee:80:46:3d:14:d1:c4:b1:23:18:b3:b5:6f:8d:32:cb:33:
69:23:88:dc:04:61:61:ed:83:9d:41:fe:07:7d:27:14:ee:d7:
7a:07:b6:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9NQ6MXYkeVVOfaaTEBdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjYxMDA4MTAwMDE0WhcNMjYxMDA5MTAwMDE0WjAzMTEwLwYDVQQD
EyhkNmM5NGU5NGYzYmFjZDM3MmZjNTY4ZGM0YzRmMzM5MTg4YjIxNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Va5RfHoIWRR5FG8POBGWGJ7y1/z
pL67Ko21cIuVXh5PTN6RKTj5PK+Kzbg0HTolQrWw//67peCvkPsoU10BL1XOn5u/
5m8r4sujUPd8ZbsiPVHm32UwGWBzM5qRN1HJ4iumFPuicZTFMfNS8k2xSKkdVQum
vAfzYBwp4Miw7CZzZXRIBOKFs6CmdjA8qsTyVnv8JBAo1ocaUf/8b932jpTo/Tt+
fXQvG1eOlAamPYmtCQmvFf2k02iFDMop49n3Huoa6gdMzhsTZLh1lbDEKxpIwYuA
IK240f9ei4J8vNnsYlLiELvxcg4209VFI99/p1agcC8avFqsoJexMpvTwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbJTpTzus03L8Vo3ExPM5GIsheZMB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuz/MNEk
gSfujA/A8vOIrJEjYDzOc3tUB0zk/XvNwJb9CylT9G2IKVT0P14o5snRYMYg0c37
pfWGEKUKxG78dnMaf12cML4FbFQF3sMQVAcvEHYCvh1UrzptRx+W+oWZ5mcC9DKz
2dc5wYO+s2CoC77RBRg4zrHtrr+IaAPBrIxnmwVdR2t2pYg4urxIA59VnqW90mJ1
UJsjrKnAQ87QVruN93ElyJ9ZgEw/TtyzAC51ossPgemn1rxoMdvS6K+WUfd6T9TQ
NfAMOfgvwBXkTT7L2GyuKOeK9e6ARj0U0cSxIxiztW+NMsszaSOI3ARhYe2DnUH+
B30nFO7Xege2Cw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:22:32 2026 by rpki-client