Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: QhLif3pSckYeOVXIgTySO/2jPImJcgdOzwd5ZSabkkE=
Subject key identifier: 25:34:94:3F:99:8B:6A:A9:C2:E3:7F:30:B9:6D:C4:F8:F3:BE:B0:87
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019FAA50EC5590F8C58F423337FE6B7E1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 06A6
Signing time: Tue 28 Jul 2026 20:00:57 +0000
Manifest this update: Tue 28 Jul 2026 20:00:57 +0000
Manifest next update: Wed 29 Jul 2026 20:00:57 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: bftHnI5NHt1II92hmr3VMt+7tv3zWOm8MqF7H3UXKsw=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ec:55:90:f8:c5:8f:42:33:37:fe:6b:7e:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jul 28 20:00:57 2026 GMT
Not After : Jul 29 20:00:57 2026 GMT
Subject: CN=2534943f998b6aa9c2e37f30b96dc4f8f3beb087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2d:cb:9b:55:61:2d:23:91:df:f6:bf:70:69:
47:e4:88:47:e2:b0:25:66:20:64:32:95:f0:80:52:
c6:71:08:7d:a7:bd:5b:3e:60:b4:9b:15:3b:b0:76:
a6:02:7b:83:c7:10:1b:ec:ea:70:34:27:87:12:b2:
d3:86:70:27:8d:59:63:d7:46:06:7a:9f:2e:20:9d:
fa:a6:43:a7:09:fc:fd:66:0a:1f:7c:0c:63:6d:87:
c6:9b:1e:c8:7a:06:23:f6:62:da:d4:04:66:93:9e:
62:c4:70:a0:73:a0:3c:52:e6:18:e2:9e:0e:75:05:
67:6e:b4:14:72:7a:e9:0a:fb:16:7f:72:49:e2:02:
fd:41:79:c5:16:0c:81:7a:10:57:83:fb:b6:de:67:
c7:c7:71:ce:c6:f3:a4:30:93:70:8d:65:78:5a:cb:
72:8a:c7:0b:35:09:dc:4c:31:03:7b:03:e3:32:c9:
0a:e6:31:7c:97:58:00:d0:05:81:a4:e5:6b:21:94:
17:4f:d4:b2:ad:52:f8:e0:12:93:94:73:08:36:ae:
67:39:fa:2b:df:30:0a:12:52:2f:69:ea:7b:ad:61:
ab:4f:95:cf:cc:09:82:53:3f:26:7c:60:f3:60:13:
71:f6:75:5c:a1:bf:33:19:40:83:0f:d2:c7:26:cd:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:94:3F:99:8B:6A:A9:C2:E3:7F:30:B9:6D:C4:F8:F3:BE:B0:87
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:49:24:6c:72:fe:99:c3:c4:47:fa:a5:ba:cf:d7:48:30:08:
33:e7:19:4c:c2:33:be:2e:55:c4:e6:f8:b1:64:3a:c6:bf:54:
96:64:ae:95:f5:1a:3c:d1:c3:16:67:c5:dc:22:fc:ac:7f:1a:
e5:f7:87:e5:6a:93:de:14:67:a5:6f:61:ca:8a:75:43:5c:3f:
ab:f7:a9:df:78:bd:3f:8e:57:7a:5c:d8:6d:d9:55:99:7a:02:
fd:ef:45:2d:33:83:2c:51:16:2f:14:8e:e4:5a:fe:72:dd:2d:
54:c4:2e:e5:fe:01:e8:17:ea:13:a2:06:7a:6f:fb:56:2d:8d:
44:ef:0d:5d:fb:3f:bb:11:ae:28:76:db:90:85:c4:f1:1f:e0:
ec:92:e7:d9:04:b7:9a:65:1b:c6:20:ff:49:61:b3:27:c5:3f:
83:15:16:08:62:15:da:84:0b:06:54:e2:93:3a:4f:32:8a:e1:
13:12:cc:bd:22:28:b6:54:64:31:17:ba:d1:37:c4:24:a0:87:
47:0a:9d:e3:ba:03:d4:6f:45:7b:0f:f0:8a:3b:e7:aa:2e:2c:
1a:5f:26:26:c6:a3:c7:d4:90:5f:f6:6c:be:3f:35:0f:2c:19:
71:65:0a:42:1a:4c:8a:4f:b5:c6:fd:93:99:f2:b7:06:b4:d9:
7d:f7:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:15 2026 by rpki-client