Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: 3Z+wK1w6/Pm5x7xfTF9FeyT/frMXqVBNVvm/7QUqv7E=
Subject key identifier: FB:AB:91:51:C8:71:00:FD:E0:8F:97:5C:D1:FD:5F:CF:62:E6:90:20
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019EC1B76D27D5B9B08B49F3B5D13BE6D36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 1649
Signing time: Sat 13 Jun 2026 16:01:24 +0000
Manifest this update: Sat 13 Jun 2026 16:01:24 +0000
Manifest next update: Sun 14 Jun 2026 16:01:24 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: XOJQ1w+nytsObaBrKX/3KIm+ENycNJFThNvJdkGTBP4=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:6d:27:d5:b9:b0:8b:49:f3:b5:d1:3b:e6:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jun 13 16:01:24 2026 GMT
Not After : Jun 14 16:01:24 2026 GMT
Subject: CN=fbab9151c87100fde08f975cd1fd5fcf62e69020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:98:84:03:51:ac:c5:78:1a:fe:ea:29:de:
01:4d:ea:1e:26:11:6a:fb:43:80:fa:bb:13:67:ff:
2f:83:da:fe:4d:e4:5b:e2:45:19:f3:2f:31:d0:73:
02:d5:55:aa:ac:f9:71:2d:ff:e2:f1:56:93:73:39:
5b:a4:fa:01:3e:7d:74:f3:c8:b3:39:f7:0a:c0:30:
21:d5:36:63:7a:b2:12:ab:ef:63:55:b6:e8:59:84:
ca:6d:41:b7:8e:41:be:55:3c:ec:60:39:83:7d:24:
3b:87:72:34:d1:fb:a7:3f:96:43:18:e1:5d:85:98:
78:95:57:55:86:d4:67:ad:34:b3:ed:81:42:1d:c5:
6a:7c:34:98:37:d7:44:34:b8:fa:f8:84:d6:10:70:
60:93:87:df:6c:98:bd:06:7e:5b:ff:13:50:a6:0b:
8f:ca:c8:65:d4:4b:09:c5:00:d6:ca:46:0b:d7:83:
ce:8c:0d:cc:7b:59:62:cc:c5:80:83:b3:0c:19:e2:
88:19:0d:00:d1:dd:5e:f3:b1:2a:16:60:04:36:63:
7f:13:ce:50:74:b8:d8:98:15:8f:23:57:0e:f8:d8:
46:e5:4f:fa:17:58:a2:8d:c2:8f:59:2d:4c:d3:c0:
78:20:58:1b:16:04:e1:99:0d:f9:f9:d0:cf:25:f7:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:91:51:C8:71:00:FD:E0:8F:97:5C:D1:FD:5F:CF:62:E6:90:20
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5b:ba:a5:1c:2b:4c:ed:40:a9:41:a2:56:a5:a8:ef:ab:e2:
b5:cb:0b:fa:4c:3b:45:1c:48:63:c0:87:70:50:f4:1f:39:88:
77:b8:40:79:c8:1e:27:c6:38:fe:8a:91:55:aa:0e:ad:85:3a:
2e:94:47:1e:fd:0d:3a:ae:87:41:7c:45:a0:53:af:9d:9e:67:
9a:e5:cd:d7:e9:cd:c7:33:b2:d7:83:5b:68:14:aa:65:61:4e:
ab:5a:25:12:d3:86:00:59:cc:f6:ab:6e:f9:30:80:f1:df:90:
96:dc:e2:cd:29:f4:3a:a6:d3:a1:a4:21:d2:67:bc:1e:79:28:
7f:15:20:6f:58:06:2a:19:28:b2:a2:ef:2c:af:98:b2:d6:71:
39:5c:c9:85:f3:f8:69:7e:ae:07:83:fa:ab:92:a9:68:7f:30:
95:b9:cf:eb:36:a4:8b:9f:b9:86:c2:98:ab:2b:f6:86:6e:a1:
27:2c:76:2a:23:f1:0c:50:5f:1f:37:bb:84:e8:48:c5:42:dd:
3b:a3:54:30:d7:04:e1:29:81:94:6e:8d:1a:62:ef:f6:59:18:
15:a1:4b:37:b9:e6:df:26:e5:65:6e:6a:ad:71:d4:e6:26:bc:
3b:4e:27:23:ef:d4:fd:d7:a7:d9:1f:45:cf:98:8e:c8:93:c2:
e3:30:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:50 2026 by rpki-client