Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: llWLwzre+si3iqUkMJO23yZpO3MFD6v4U2OiFN7O8Ck=
Subject key identifier: CF:16:03:C0:6E:27:3F:82:76:A9:26:D4:40:76:59:95:C2:9C:31:DF
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 01A0C8587ABBF642B1F6CB0E8772787356EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0D60
Signing time: Tue 22 Sep 2026 09:00:36 +0000
Manifest this update: Tue 22 Sep 2026 09:00:36 +0000
Manifest next update: Wed 23 Sep 2026 09:00:36 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: gYRrUzTwgLxwQSdXkVcU0c0ETDObRYL69x3OU5DwPhQ=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:7a:bb:f6:42:b1:f6:cb:0e:87:72:78:73:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Sep 22 09:00:36 2026 GMT
Not After : Sep 23 09:00:36 2026 GMT
Subject: CN=cf1603c06e273f8276a926d440765995c29c31df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:4d:60:81:1d:2a:9e:73:c4:54:62:a9:d5:
29:65:a0:4a:0d:e4:a0:95:18:e8:2a:21:ed:fe:8d:
15:95:70:3f:f1:e6:1c:df:e6:14:3d:05:74:77:29:
f4:e1:f5:ff:84:cb:21:34:6e:bc:cf:06:2c:f8:84:
43:e2:26:9a:77:0f:8a:e8:00:ad:44:60:4a:13:8b:
02:7a:21:ee:79:c2:77:0c:61:d0:b8:42:da:34:7b:
78:b6:0e:8a:e1:1f:6d:6f:9b:cd:1c:e0:28:4f:f1:
6f:f3:17:85:51:dc:14:4a:e5:cc:2f:28:8a:bd:67:
d5:35:db:52:af:dd:65:cb:46:08:21:cb:e4:54:d4:
25:2d:52:8b:23:d9:a3:61:70:6f:06:87:82:cd:5a:
29:6a:f3:e6:dc:56:d6:09:e7:17:bc:ba:d3:84:64:
25:3a:3d:06:04:c5:1b:fb:8b:76:43:e9:06:97:bc:
9e:c5:eb:c5:a6:68:0c:39:e5:90:60:3c:7b:6b:cd:
cd:2c:a4:a4:f0:61:1f:64:f1:7f:06:a7:39:f8:8d:
de:a3:de:39:b6:13:7f:8d:bc:66:ba:8c:77:2a:73:
ff:ba:03:31:ed:d3:22:d4:12:b5:69:73:03:77:bb:
e1:0a:86:a9:80:bc:97:9e:ac:6f:8a:de:f9:17:e3:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:03:C0:6E:27:3F:82:76:A9:26:D4:40:76:59:95:C2:9C:31:DF
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:84:77:24:68:48:87:27:d8:ce:d6:c2:02:de:be:48:42:
88:5b:d3:c7:19:d0:ad:6f:99:a0:3e:08:95:ad:62:67:8b:2e:
ed:e9:ad:c8:93:1d:1a:2c:ee:91:00:cf:81:e2:21:1d:35:d8:
c5:07:58:dc:9c:76:48:2c:de:a7:b0:1c:9d:aa:70:21:6c:20:
3a:7f:3c:d1:10:c3:db:ce:d6:67:2a:69:b1:45:6c:1a:df:b4:
1d:26:00:a7:36:34:64:0b:b3:cb:f8:25:53:27:0e:87:77:9e:
0a:1f:f2:e9:42:04:0d:0c:67:45:4b:61:51:13:c2:e5:4c:cb:
ec:02:61:2e:ca:ae:45:5c:21:04:ea:55:fc:26:6a:f0:03:2f:
8a:e7:03:53:50:ba:74:cf:c1:d3:4b:98:45:93:5c:5d:8c:15:
48:ec:26:0f:1f:42:87:87:91:d5:68:55:9e:7a:a3:de:69:ad:
cb:c9:11:f0:9f:23:22:2e:43:d5:59:3e:55:c8:83:82:39:02:
db:99:86:08:ef:06:9d:60:f7:7b:c9:e4:2e:d7:7e:a2:b5:dc:
c3:57:00:0c:39:f4:ff:45:b7:cd:d6:57:e2:ce:ab:bf:80:6f:
da:72:7b:00:38:ba:97:91:d2:95:e8:06:d3:6a:ea:dd:9a:81:
32:9b:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:46:08 2026 by rpki-client