Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: UWc0r7mK3tYjtUOgcg+w2JhSs+AEDIkuDo0yJJ9nyKg=
Subject key identifier: 31:86:91:61:06:B2:E8:CD:9D:34:49:EC:C4:52:A6:B4:FA:3A:1F:3D
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019D984FA577CBBAF3EB7C80AE282494CDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:49 +0000
Manifest this update: Thu 16 Apr 2026 22:00:49 +0000
Manifest next update: Fri 17 Apr 2026 22:00:49 +0000
Files and hashes: 1: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: 0yiXUJemO1xWicRun+IPAskGIVcjZPzDFqu/N3/+KPA=)
2: OPxxAaI36wOXDoRWNJH9zygfaP4.roa (hash: mH7ZBf8wX4Ac93dknyYTB0ar56IBtyzBP1/i72VCE+U=)
3: TKG6JIO5NTaXTUbXfBu90s4mtRE.roa (hash: U2QEQxBIuCigDglAujNTXtIh1vUVB2LqzesEEmT2csQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a5:77:cb:ba:f3:eb:7c:80:ae:28:24:94:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Apr 16 22:00:49 2026 GMT
Not After : Apr 17 22:00:49 2026 GMT
Subject: CN=3186916106b2e8cd9d3449ecc452a6b4fa3a1f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:d9:00:ec:6b:1b:50:29:46:60:3e:d1:6f:
fc:a2:00:65:ef:7b:56:e8:86:fc:b3:ff:05:f3:25:
7e:bf:2e:cf:ce:62:30:16:46:8e:0f:ca:6a:86:c3:
2e:d4:59:0b:80:4a:78:c0:8e:d4:a5:1a:7e:dd:8b:
64:c2:f4:fe:8e:7e:50:2d:4f:bc:aa:1c:93:33:9b:
c5:17:c0:72:92:a4:94:bc:8d:53:9e:e4:24:9a:fe:
44:5c:dc:2d:cc:6c:45:31:88:26:93:5c:fb:4c:ed:
0e:40:90:e4:b3:fd:da:7b:6a:76:87:27:5c:b4:cf:
c1:c1:69:5a:b8:a9:36:52:fc:d7:50:11:90:32:a5:
06:07:99:1d:2a:d5:57:93:88:c9:96:16:a0:60:9f:
b6:ad:68:c4:8f:2c:2a:ae:4c:5d:e7:06:15:88:51:
46:58:bc:c4:d0:5d:ae:fd:a6:c6:69:16:61:47:af:
87:ea:5e:b0:7b:b3:37:6c:d0:03:56:c7:c2:f4:c9:
9d:51:a9:58:30:de:40:c4:2e:c0:dc:2c:8a:a8:d3:
d3:94:d6:c7:86:59:1e:5b:40:e7:be:f5:4c:58:4d:
11:52:9e:2a:73:fc:ec:b7:6d:5b:7b:34:8c:52:a5:
3f:af:17:61:af:14:fb:d5:b6:6e:7a:a3:e0:54:9b:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:91:61:06:B2:E8:CD:9D:34:49:EC:C4:52:A6:B4:FA:3A:1F:3D
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:22:b5:3e:a3:12:24:15:36:32:6c:6f:b0:0b:ef:9e:87:3b:
66:25:f2:1b:ed:b1:a4:e1:9a:0e:a5:8a:23:a5:4e:cd:6b:a8:
22:f0:84:d0:35:3c:1f:ba:76:b8:59:5d:fb:64:0e:2b:9c:ef:
46:ed:38:69:3c:50:25:1c:d9:ec:3c:d3:95:b5:e1:ce:d7:9f:
ee:e5:88:d2:d5:c3:3d:8c:52:41:cc:08:8e:75:d5:9e:ee:cb:
4d:bc:8c:61:88:95:75:e6:a0:7e:21:dd:01:bf:d5:2d:3f:e0:
f1:85:80:61:e0:6c:10:90:15:73:ec:ba:c3:44:dd:8c:70:a4:
3a:50:86:ce:9a:a4:63:44:30:61:69:5c:0b:b6:6c:a1:4e:7d:
66:5d:1b:37:98:68:64:3c:f0:32:ae:e2:c9:4f:b9:27:d5:5b:
0c:1a:6c:61:4a:2b:4e:1f:d9:93:3c:e5:e4:29:5d:9c:04:89:
bf:29:ef:34:31:f0:ae:15:0d:4e:20:63:10:e9:81:41:92:08:
60:11:ee:b4:e2:98:fc:1a:ec:df:09:9e:bf:40:5b:1a:39:3a:
6f:31:a1:a9:bc:58:9b:0a:c1:f9:12:89:32:a5:54:f3:9a:79:
69:3c:55:9d:84:4b:d4:88:37:f9:44:44:e4:c2:33:72:8d:cd:
01:d6:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:26 2026 by rpki-client