Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: 5NNxllZFFcclesGCrwvlMbLA4GSevarfKods0rAx0Xs=
Subject key identifier: 42:5D:F0:F9:7A:9E:CF:7E:07:4C:F6:42:CB:C0:56:31:64:E4:B1:B0
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019CAAC618526683A23473397B852E9BCF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:34 +0000
Manifest this update: Sun 01 Mar 2026 19:00:34 +0000
Manifest next update: Mon 02 Mar 2026 19:00:34 +0000
Files and hashes: 1: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: 0IVWzJY1Ggqnx4d/C2cW//Hy4F397LBa5bp1w9SaHSo=)
2: OPxxAaI36wOXDoRWNJH9zygfaP4.roa (hash: mH7ZBf8wX4Ac93dknyYTB0ar56IBtyzBP1/i72VCE+U=)
3: TKG6JIO5NTaXTUbXfBu90s4mtRE.roa (hash: U2QEQxBIuCigDglAujNTXtIh1vUVB2LqzesEEmT2csQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:18:52:66:83:a2:34:73:39:7b:85:2e:9b:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Mar 1 19:00:34 2026 GMT
Not After : Mar 2 19:00:34 2026 GMT
Subject: CN=425df0f97a9ecf7e074cf642cbc0563164e4b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:e2:bb:02:93:d8:7e:dd:21:fb:6d:5e:28:
0e:e3:88:c0:ee:a6:07:6a:59:ef:f0:df:30:fb:ad:
4a:e5:e5:db:c1:af:56:a2:59:cd:c0:22:54:6c:a3:
4b:c4:84:5b:ae:9e:03:d0:63:2a:f4:d3:38:a8:38:
57:e0:7f:a3:f4:f1:b3:23:58:17:b4:cc:8d:bb:fb:
c0:8d:be:5a:76:73:6e:ac:d5:7c:22:22:dc:e4:7e:
f1:b8:0c:fd:c7:26:7a:37:b8:f4:dd:ee:8c:cc:ee:
e6:82:64:47:95:21:69:dd:5c:6b:d3:0f:ed:96:e3:
28:6a:bb:4f:5a:c3:04:cd:0c:d3:5a:7a:f6:7d:37:
c2:4a:3c:fa:cc:44:75:a5:6a:3b:f9:9c:cc:97:ee:
93:c3:9f:d1:49:ba:be:1f:d5:f6:49:fa:df:82:9b:
24:f9:c6:14:08:c1:af:15:e0:59:a0:55:ca:51:4e:
d2:70:39:12:6d:a6:a2:36:91:f0:46:2d:2b:bb:6a:
e9:e2:bb:cd:56:b1:d0:d0:9e:01:53:d6:40:64:ea:
88:0c:53:68:31:7d:40:75:c4:20:11:f1:f8:07:ff:
06:67:29:15:86:47:aa:94:66:de:5d:8b:bf:bd:3f:
a6:79:a4:a7:01:ff:21:28:86:f1:41:b2:d5:e2:f8:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:F0:F9:7A:9E:CF:7E:07:4C:F6:42:CB:C0:56:31:64:E4:B1:B0
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:61:a4:3d:8b:19:bb:23:5d:eb:be:6a:ae:49:06:1e:f6:ce:
58:eb:09:ac:ec:5c:94:da:4f:1a:e8:2f:22:f8:b7:d7:f3:ad:
7a:f7:71:84:8c:92:17:18:7c:f1:0d:0f:2b:80:ac:0a:71:78:
a4:e0:ac:62:0e:51:2a:36:71:3b:23:35:f6:c1:ed:d6:f4:0f:
87:8d:79:ba:12:c5:9a:8b:b6:b1:b7:ee:2f:1b:36:0a:8a:14:
17:31:5b:51:0a:4b:77:18:e4:80:29:fd:c4:ea:bb:07:9a:c9:
2c:03:87:69:ee:93:77:29:e7:67:49:af:6f:00:f1:ba:33:72:
90:c0:90:41:42:e3:64:77:d7:b1:50:0d:ce:3f:09:e6:5c:b8:
84:5d:d6:a4:59:1a:59:e9:aa:19:24:24:fb:a0:f9:6b:a8:80:
e1:d6:e6:95:1b:46:ae:61:ef:d4:df:b0:ae:a3:c7:c3:c4:39:
fc:fa:b7:35:1a:11:c1:58:b2:9b:8b:a0:77:24:27:1b:fd:8d:
65:57:88:a7:a6:93:77:23:f7:a3:4d:0f:1b:ef:be:c7:0a:77:
90:4f:dc:ad:63:58:41:e9:35:86:5a:e0:e8:9f:7e:48:6b:20:
e4:3d:b1:76:80:25:d7:83:8b:85:1b:fb:34:78:19:b1:bc:f3:
b9:41:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:24 2026 by rpki-client