Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: nR7EDfP93AEDfGdqa4nw9VRwMod+CzAwIiII1QlRJSA=
Subject key identifier: D1:44:27:D2:6B:CC:D3:3D:59:A8:C4:58:C0:C3:E1:AF:07:B4:8D:0B
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019D992B7351C9036DBF80F7C3E262DF708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 0594
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: 19JH5xKDeOIm8C05sgKuQLK4K3nQQiu1Di+2WitQWIw=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:73:51:c9:03:6d:bf:80:f7:c3:e2:62:df:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=d14427d26bccd33d59a8c458c0c3e1af07b48d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:40:b9:4a:7d:63:f8:f4:a4:e7:d5:55:ae:
76:47:68:b5:e0:b1:d3:a6:f6:a4:14:3a:db:95:55:
87:cf:12:f8:f6:b8:9d:00:f8:f7:9c:98:ce:e7:79:
c4:2e:f0:cf:8f:bd:2c:0a:73:bf:1f:b7:a8:10:64:
a4:4f:0b:8b:bd:1d:16:b0:75:35:15:24:43:04:dc:
4a:1f:9b:8f:8e:ab:ef:cf:cc:9d:14:e8:84:28:8a:
0a:d0:97:91:32:a5:f8:1f:99:fe:bc:c7:23:aa:b7:
7a:cc:2f:61:b2:fc:c3:53:60:db:16:54:d5:01:34:
70:b7:75:06:db:91:3f:bf:19:e4:ca:15:66:3e:25:
d3:fa:0c:c4:d5:71:4b:94:a6:4e:29:45:4a:f8:67:
eb:db:39:09:b6:91:e3:98:42:42:c6:ef:18:ff:46:
8b:57:1a:2c:93:46:68:51:d2:cd:bb:dc:79:27:d0:
fb:8c:db:6f:84:a2:75:23:fe:cc:9e:eb:bc:37:37:
fd:f8:d0:84:40:7d:cd:28:b9:87:2b:0a:7d:15:e8:
06:f5:1c:cb:1d:70:89:d5:3e:fb:27:ba:ea:e1:bd:
76:fd:57:31:dd:9b:05:7a:84:7f:8c:b1:14:a4:83:
a5:00:31:df:1e:03:c2:e7:30:1c:99:52:5a:8a:01:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:27:D2:6B:CC:D3:3D:59:A8:C4:58:C0:C3:E1:AF:07:B4:8D:0B
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:31:2a:d8:26:b3:c1:34:1a:e4:ce:1b:b8:c4:39:f8:b4:a1:
da:1a:36:bd:be:3c:81:c3:6a:f8:50:44:89:f0:44:b4:a6:71:
84:06:0f:30:1e:91:85:47:c2:4e:aa:fc:2e:42:b5:1b:ac:61:
2d:c5:92:b1:ea:b1:08:40:ea:c9:58:e4:70:27:ae:e1:e6:96:
30:43:f2:4c:3c:97:31:46:a2:f8:e1:1e:f1:3a:06:d1:01:f5:
b1:a0:93:50:08:6f:ed:ce:8f:88:3f:38:52:89:a5:70:0c:4a:
54:6b:20:cd:df:57:36:87:69:a1:04:10:3e:39:b9:59:5f:1f:
4b:a5:18:ad:c8:5b:ab:fc:ea:37:7d:69:28:80:62:87:59:ce:
71:61:b7:ee:90:df:72:71:6a:27:ee:85:ac:e3:9f:30:29:dc:
04:06:17:38:c6:5d:60:7e:57:46:b7:03:24:c5:d7:73:16:e7:
b4:93:af:83:a1:0f:0d:81:44:55:76:49:5b:ce:e9:34:3b:32:
12:33:b4:37:6a:0f:6c:d9:1d:df:08:ad:09:90:6e:14:f1:1c:
11:bd:bf:6c:e9:c0:4e:57:bb:de:aa:8d:83:a3:f6:76:33:0c:
6a:83:8b:dc:7c:aa:66:b6:5e:42:b8:56:aa:bf:fb:54:b4:31:
be:8c:12:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3NRyQNtv4D3w+Ji33CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjYwNDE3MDIwMDU0WhcNMjYwNDE4MDIwMDU0WjAzMTEwLwYDVQQD
EyhkMTQ0MjdkMjZiY2NkMzNkNTlhOGM0NThjMGMzZTFhZjA3YjQ4ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoThAuUp9Y/j0pOfVVa52R2i14LHT
pvakFDrblVWHzxL49ridAPj3nJjO53nELvDPj70sCnO/H7eoEGSkTwuLvR0WsHU1
FSRDBNxKH5uPjqvvz8ydFOiEKIoK0JeRMqX4H5n+vMcjqrd6zC9hsvzDU2DbFlTV
ATRwt3UG25E/vxnkyhVmPiXT+gzE1XFLlKZOKUVK+Gfr2zkJtpHjmEJCxu8Y/0aL
Vxosk0ZoUdLNu9x5J9D7jNtvhKJ1I/7Mnuu8Nzf9+NCEQH3NKLmHKwp9FegG9RzL
HXCJ1T77J7rq4b12/Vcx3ZsFeoR/jLEUpIOlADHfHgPC5zAcmVJaigHZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFEJ9JrzNM9WajEWMDD4a8HtI0LMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3DEq2Caz
wTQa5M4buMQ5+LSh2ho2vb48gcNq+FBEifBEtKZxhAYPMB6RhUfCTqr8LkK1G6xh
LcWSseqxCEDqyVjkcCeu4eaWMEPyTDyXMUai+OEe8ToG0QH1saCTUAhv7c6PiD84
UomlcAxKVGsgzd9XNodpoQQQPjm5WV8fS6UYrchbq/zqN31pKIBih1nOcWG37pDf
cnFqJ+6FrOOfMCncBAYXOMZdYH5XRrcDJMXXcxbntJOvg6EPDYFEVXZJW87pNDsy
EjO0N2oPbNkd3witCZBuFPEcEb2/bOnATle73qqNg6P2djMMaoOL3HyqZrZeQrhW
qr/7VLQxvowSVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:56 2026 by rpki-client