Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 0FoOufysgJdqSH0T2f8O2IurFV3nVEvmW5c1qHRJ2g0=
Subject key identifier: 25:01:55:D3:28:23:47:8F:14:97:0A:AF:16:26:43:39:5E:F2:D0:F1
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019D99996C1077E0F7A5F90C2C3F2C4CF8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: nOATuBBpPrzSXXz/UF1hrC6BWZua5Z6+3V9ej+B5D8M=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6c:10:77:e0:f7:a5:f9:0c:2c:3f:2c:4c:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=250155d32823478f14970aaf162643395ef2d0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:78:bd:2b:5a:01:9d:5a:6b:04:60:8b:b9:
05:d7:8f:cf:96:87:56:87:88:c4:20:f3:dc:48:31:
9c:c6:de:84:8b:c4:c0:50:c8:63:3c:23:be:a3:d2:
9a:b8:a4:1a:f4:61:7b:1e:c2:7f:ec:45:bc:53:be:
08:d5:29:20:e8:55:0b:a4:81:0c:3e:7e:d5:3b:96:
05:99:b4:c7:66:a2:e0:f2:9f:2d:00:9f:b2:73:3f:
01:7d:52:f1:f0:ff:34:10:23:b8:f6:75:55:2b:09:
46:0b:5f:ba:a9:2c:d2:af:db:fe:3a:81:fd:d6:06:
16:82:e0:b0:c5:5c:7f:d4:7f:c7:a5:3f:a9:6b:17:
8f:df:89:77:df:13:17:ca:10:1a:cc:bb:11:ce:c8:
a0:6b:32:36:b1:04:6c:a7:42:20:f6:96:a0:2d:94:
1f:fc:39:a5:90:6e:c9:f2:81:a9:f2:d3:b0:ef:3f:
dd:f1:8f:f2:02:9b:7b:fc:08:0c:62:6e:34:a5:29:
49:e9:34:99:3f:e4:76:aa:88:f2:30:77:52:e5:bc:
64:32:cd:de:19:d9:03:51:2e:d9:40:e4:f5:80:25:
60:a7:27:61:9b:b2:7a:e6:03:70:0d:45:ba:7b:61:
35:66:ce:e6:0a:7c:76:17:6a:06:2f:ea:19:bb:14:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:55:D3:28:23:47:8F:14:97:0A:AF:16:26:43:39:5E:F2:D0:F1
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:d1:05:4c:76:36:7c:60:97:e8:3a:3d:6c:17:3a:ff:a0:
73:77:44:9f:1a:01:d6:9e:71:bf:10:39:cd:0e:66:cb:9b:e6:
ce:02:e2:bb:f5:57:4d:38:fb:55:bf:44:7e:be:c6:93:12:32:
37:7e:65:d1:e6:2c:f1:d7:70:29:2e:3c:f3:d1:5e:cf:10:93:
e5:06:cc:b7:1d:ed:da:fa:7b:93:6d:00:92:96:ea:9f:a7:02:
99:6e:44:f3:9b:55:39:97:e7:29:53:04:68:a9:0d:f9:82:5f:
29:ef:b4:c2:0e:db:f1:2f:1d:95:da:71:da:7a:85:0c:df:cd:
20:cc:19:f4:b1:ef:ed:eb:fa:c9:2c:7a:73:63:5f:67:69:fe:
f5:27:86:63:15:36:31:6b:75:f4:8d:a6:ff:f9:3b:b7:ce:2d:
55:d8:0f:4b:09:87:66:ba:15:20:89:93:07:74:5e:4a:b0:e8:
67:6b:14:6a:8c:09:ee:64:23:1c:b9:cc:02:05:02:41:b2:49:
17:2b:44:91:c9:34:30:75:45:a5:e0:c3:25:38:30:13:91:5e:
f3:6e:e4:33:1a:54:31:06:f3:45:6d:2e:b8:49:c9:e7:5a:72:
c7:8d:a1:3c:f3:1b:d8:b9:db:7e:3b:c3:a3:4c:b4:0b:c7:9f:
51:09:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:41:23 2026 by rpki-client