Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: +B8r7C9tdfNLq5sNBeTMmqSlox1MnCACNhTMoh60bQM=
Subject key identifier: C1:FB:00:B8:4E:A5:35:46:59:BD:7C:73:FD:BC:DF:23:28:4A:CA:71
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 01A0C2FB0DF581C8F32781262C5347ED6B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 040C
Signing time: Mon 21 Sep 2026 08:00:28 +0000
Manifest this update: Mon 21 Sep 2026 08:00:28 +0000
Manifest next update: Tue 22 Sep 2026 08:00:28 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: /uKA1fsAJQXjXP7DktlCLAGIfMQ3F8GW1MXsL6Mcy4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:0d:f5:81:c8:f3:27:81:26:2c:53:47:ed:6b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Sep 21 08:00:28 2026 GMT
Not After : Sep 22 08:00:28 2026 GMT
Subject: CN=c1fb00b84ea5354659bd7c73fdbcdf23284aca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:53:a1:c3:f4:0b:a8:3a:0b:d4:24:85:87:
9d:da:7f:f2:a9:1d:29:7d:6a:80:34:f3:f2:38:24:
fd:47:c1:20:3f:d0:f0:a5:91:0a:05:67:24:6f:90:
7a:80:71:4f:6c:78:f8:23:4d:7e:4f:b2:b5:f9:59:
92:34:69:d5:28:be:e7:ce:ec:bb:59:5f:77:d2:02:
d9:c5:17:54:d3:73:4f:55:4f:8f:8f:c2:e2:34:01:
11:70:89:65:ea:8d:5e:99:aa:42:f9:73:1f:67:aa:
37:c8:c7:75:e4:85:8c:cd:f4:1b:f7:bb:34:46:1c:
c4:3e:1c:5c:b3:b8:7f:16:ca:2b:bc:67:a1:e6:c6:
16:84:ea:71:10:8e:cd:64:e2:58:19:48:d5:e1:c6:
53:18:79:31:dd:d2:92:fa:04:94:c2:7b:cc:bd:15:
cf:73:0f:62:a9:21:26:b3:63:80:55:1e:92:ee:1f:
fd:71:86:30:fc:ba:cd:d1:a5:91:c5:1f:0b:82:55:
1e:e0:ab:0c:86:1e:a3:df:61:ae:ec:9f:15:4e:75:
23:ae:ac:8d:08:70:b0:c0:fa:9b:ad:cf:b1:1d:e6:
8a:93:b3:45:33:5c:a9:fe:4a:39:4c:17:6c:f5:a3:
7b:51:7e:99:e9:36:94:c6:c4:8c:ff:13:d3:96:52:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:00:B8:4E:A5:35:46:59:BD:7C:73:FD:BC:DF:23:28:4A:CA:71
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:59:eb:fa:bb:41:7c:6e:bc:14:61:e8:25:12:81:de:57:77:
79:ba:6a:cb:8b:0b:87:01:ba:ca:99:ed:a1:9c:1a:7e:99:41:
4f:49:94:a3:76:3f:db:d0:60:3a:2d:df:53:b9:2c:75:9d:70:
d3:6f:be:47:02:57:33:77:1d:1f:bc:9a:73:27:e4:3b:e8:d1:
35:b8:b9:cc:9b:e3:45:f6:1e:c2:eb:11:2c:79:a8:36:a7:75:
b7:4f:41:75:c2:bd:ec:9e:e8:77:fa:6d:65:d1:3d:c6:2b:52:
4f:de:df:2c:97:ed:ef:23:2d:60:38:79:30:47:3e:3f:fc:6e:
1e:ac:0a:f3:61:0f:19:3e:75:dd:dc:10:11:4a:51:10:d4:64:
d2:6f:ab:79:5c:bd:45:9c:6d:a3:58:60:11:e3:28:65:7b:ce:
82:44:b4:8d:17:9c:e0:dd:d3:98:51:4f:3b:6d:27:40:51:0c:
a1:08:23:bc:f0:f5:25:1d:d4:cb:d0:2a:61:d0:50:77:8c:51:
87:be:15:ab:c5:5e:d2:dd:78:a1:81:7b:a6:8c:8a:29:c9:b5:
ad:27:f2:7a:3a:c2:e5:2c:59:e0:1f:19:57:69:d5:e6:61:05:
1f:b8:50:58:a5:69:6b:dc:23:f5:e7:19:48:56:0e:a4:ff:8f:
34:d4:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:43:00 2026 by rpki-client