Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: c6YPDK4j7b4vjBFq3l6yMmecuqo7II8vx2SUFjwh9co=
Subject key identifier: 39:22:BA:BC:FC:8D:ED:E8:CD:28:B7:D0:EA:F5:34:78:05:E9:C9:BB
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019CAC0FCD7968439DA02EE7AA38E7E9A152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 1241
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:42 +0000
Manifest next update: Tue 03 Mar 2026 01:00:42 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: pt3Sr0SiI19lL48z/Ln4ws/ennq1Mz3zY8+tjGDc4UQ=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:cd:79:68:43:9d:a0:2e:e7:aa:38:e7:e9:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Mar 2 01:00:42 2026 GMT
Not After : Mar 3 01:00:42 2026 GMT
Subject: CN=3922babcfc8dede8cd28b7d0eaf5347805e9c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:2e:98:af:d3:ea:62:07:c0:45:40:69:42:
80:78:bb:4a:8f:fc:41:4b:05:f6:9a:35:cb:9f:e9:
e7:a5:ea:3a:5a:bd:7e:c5:18:9f:c8:0b:8f:62:5c:
90:c3:51:61:88:53:39:ad:a3:85:53:00:c6:68:f4:
25:eb:f0:7e:9e:ec:0f:c1:34:4a:e4:9d:55:85:89:
ff:6b:d5:5b:ef:e7:37:e8:33:25:73:2e:e5:1f:db:
c9:56:00:03:e1:8b:59:8b:bc:ec:71:4f:14:e9:1d:
bd:8b:c6:ec:e1:7c:8c:f2:14:63:ec:23:92:d9:1d:
19:0c:d5:c3:7b:c2:6f:e2:6a:b7:8e:f8:d5:3c:6c:
de:bf:99:87:e5:b2:31:41:a7:e7:b1:76:9c:b8:5d:
a6:07:71:61:38:1d:6f:52:fc:1f:30:18:f4:42:7a:
92:c1:b2:92:ce:12:bf:1a:27:69:18:e6:6b:aa:9d:
e2:04:d3:01:04:8d:8c:44:2e:43:0d:e6:0d:7e:d7:
70:9b:36:b8:20:09:74:d3:7a:f7:0b:55:17:0e:e0:
31:3c:b6:ab:87:c7:87:e1:37:d4:17:e6:28:f4:07:
b3:e2:73:b8:6c:63:40:5f:06:ef:d5:d5:11:07:26:
c7:55:b9:19:f6:15:28:f2:72:3b:9f:05:ee:4c:e8:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:BA:BC:FC:8D:ED:E8:CD:28:B7:D0:EA:F5:34:78:05:E9:C9:BB
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:0c:df:79:67:ed:f4:40:22:a8:b0:50:2f:6b:80:79:30:
eb:b8:e4:0a:b0:db:48:54:61:a1:57:b2:4a:7a:f5:79:da:61:
10:48:9b:74:76:95:86:b6:c2:1c:ec:e1:38:45:d2:d1:cd:56:
8a:f1:b9:70:f4:fd:a1:c5:79:d2:e9:8b:75:90:0d:81:ed:68:
93:51:fb:ed:40:8b:1c:fb:c2:22:5c:58:09:c2:0c:f1:ad:73:
e2:09:aa:69:16:12:46:29:b5:31:00:6d:52:42:f7:32:9e:9e:
30:3a:a6:6b:21:43:58:95:56:24:b9:b5:37:32:0f:a0:99:1e:
78:8c:3b:86:26:67:50:73:d2:a1:56:9d:23:68:e1:c6:e0:21:
8c:70:99:e7:4f:78:0d:b1:e8:ee:62:cc:d0:0d:a7:d6:d0:b3:
d2:3a:83:21:2a:da:fb:7c:a6:af:62:60:82:28:0d:b6:75:99:
3e:04:74:88:da:52:7b:ff:8f:dd:cc:27:e9:06:1b:cc:21:92:
45:f5:f3:50:bf:10:39:d3:e3:f8:73:59:52:6d:8d:d2:04:d6:
43:5e:8b:99:41:3f:cf:19:1f:28:78:b2:63:8a:3a:5c:a2:95:
b1:ac:c0:39:d2:42:2f:d2:a5:e7:2f:e5:10:1a:5b:6e:a8:e1:
02:75:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:43 2026 by rpki-client