Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: RIBGvtbQBIYBt8PydJMzQKBh/i3q0TQiqB07t1IVcyg=
Subject key identifier: F7:79:3E:68:D3:A5:FB:6E:DA:4C:18:83:39:94:C5:92:D9:01:25:CE
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01A0D1C90456B10EE0FC2E08CE036C1430E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 073F
Signing time: Thu 24 Sep 2026 05:00:06 +0000
Manifest this update: Thu 24 Sep 2026 05:00:06 +0000
Manifest next update: Fri 25 Sep 2026 05:00:06 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: 4p3KWiPsRU9V5w50yHAm6z36HEzlCnvSol4IaauLvco=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:04:56:b1:0e:e0:fc:2e:08:ce:03:6c:14:30:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Sep 24 05:00:06 2026 GMT
Not After : Sep 25 05:00:06 2026 GMT
Subject: CN=f7793e68d3a5fb6eda4c18833994c592d90125ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:c0:36:d4:2f:54:7c:ee:be:06:d4:e7:58:
df:73:5c:e8:f1:5c:74:bb:be:fd:dc:e1:cd:37:93:
dd:0e:6e:6e:17:b9:69:7c:41:bd:c1:88:1c:4d:d6:
2f:0f:22:62:99:be:29:3b:60:6b:56:01:05:65:ba:
a1:05:08:af:87:8c:a9:6a:ae:8b:31:23:1c:22:99:
48:1d:36:16:9d:71:f6:49:9a:a4:e8:7c:75:9d:61:
27:c3:45:30:ba:2d:49:33:5e:8a:54:f5:1a:ee:a2:
e9:ca:a2:27:c1:0e:f4:c4:d4:23:13:14:dc:fa:78:
a4:8b:3c:1c:dc:db:d3:52:33:34:7e:27:a8:2b:28:
f7:0e:3e:9b:94:e5:f5:35:80:ee:91:9c:8a:56:6a:
42:88:f6:fc:51:82:db:5b:fa:33:a7:fa:8c:87:c8:
69:af:86:77:35:71:91:b0:7e:b1:2a:76:47:6f:9f:
a6:1c:7a:59:f7:3c:d8:e3:e5:27:cb:c9:8a:d3:3b:
13:e3:67:f0:1c:d5:eb:66:dd:0f:d7:7e:96:96:22:
f5:11:71:dc:f0:49:12:a5:1d:b6:4a:ab:e4:ea:8f:
58:5b:78:18:2e:94:61:ae:1f:b3:19:cc:6e:48:22:
88:cd:5f:07:3f:d8:3a:97:77:85:c8:1b:a1:d2:3c:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:3E:68:D3:A5:FB:6E:DA:4C:18:83:39:94:C5:92:D9:01:25:CE
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2a:c9:d6:67:72:1e:0d:be:6a:02:71:23:c7:f1:7b:ae:c6:
12:db:f1:1b:17:47:19:5f:28:46:04:6e:84:7d:77:93:a3:b2:
81:45:2d:21:d2:a4:e0:a6:4c:a9:c7:bf:16:da:b1:4c:56:03:
59:be:f2:75:b1:86:b0:63:98:9b:2c:a1:a7:3a:59:3b:69:c0:
b8:7c:dc:5a:ed:13:c0:c1:09:a3:b5:b5:26:0d:dd:38:20:54:
66:a7:80:d9:31:95:bd:de:bb:94:a9:1f:c1:12:11:62:9a:5b:
98:69:08:af:4c:eb:08:3b:6d:78:7b:dc:32:a1:56:d0:47:a8:
c1:24:80:90:10:2d:81:b9:64:a0:31:c3:10:d1:b5:10:19:53:
78:1a:cf:e1:85:b6:a7:d6:26:9c:8c:33:bf:86:55:11:2e:28:
fb:be:b6:11:3a:2d:94:6d:72:ce:11:df:80:03:d2:ce:7e:a5:
00:7c:d9:b7:ad:1a:2c:19:4b:95:c7:a1:77:34:e1:38:62:97:
f4:32:1f:0e:7d:6f:d6:12:db:eb:93:84:af:71:74:ae:9a:09:
a8:c8:61:85:a0:79:d5:5d:41:18:3c:b1:ad:70:c0:9d:90:f2:
e9:93:d6:49:bf:c4:21:d0:2b:c5:1a:50:90:c8:ff:3c:85:36:
3f:76:ee:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyQRWsQ7g/C4IzgNsFDDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjYwOTI0MDUwMDA2WhcNMjYwOTI1MDUwMDA2WjAzMTEwLwYDVQQD
EyhmNzc5M2U2OGQzYTVmYjZlZGE0YzE4ODMzOTk0YzU5MmQ5MDEyNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/TANtQvVHzuvgbU51jfc1zo8Vx0
u7793OHNN5PdDm5uF7lpfEG9wYgcTdYvDyJimb4pO2BrVgEFZbqhBQivh4ypaq6L
MSMcIplIHTYWnXH2SZqk6Hx1nWEnw0Uwui1JM16KVPUa7qLpyqInwQ70xNQjExTc
+nikizwc3NvTUjM0fieoKyj3Dj6blOX1NYDukZyKVmpCiPb8UYLbW/ozp/qMh8hp
r4Z3NXGRsH6xKnZHb5+mHHpZ9zzY4+Uny8mK0zsT42fwHNXrZt0P136WliL1EXHc
8EkSpR22Sqvk6o9YW3gYLpRhrh+zGcxuSCKIzV8HP9g6l3eFyBuh0jwmjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPd5PmjTpftu2kwYgzmUxZLZASXOMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCrJ1mdy
Hg2+agJxI8fxe67GEtvxGxdHGV8oRgRuhH13k6OygUUtIdKk4KZMqce/FtqxTFYD
Wb7ydbGGsGOYmyyhpzpZO2nAuHzcWu0TwMEJo7W1Jg3dOCBUZqeA2TGVvd67lKkf
wRIRYppbmGkIr0zrCDtteHvcMqFW0EeowSSAkBAtgblkoDHDENG1EBlTeBrP4YW2
p9YmnIwzv4ZVES4o+762ETotlG1yzhHfgAPSzn6lAHzZt60aLBlLlcehdzThOGKX
9DIfDn1v1hLb65OEr3F0rpoJqMhhhaB51V1BGDyxrXDAnZDy6ZPWSb/EIdArxRpQ
kMj/PIU2P3bu0w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:47 2026 by rpki-client