Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: GX/hYMt5da6v4KtjbSGpByEevqt3rWL06MLrRN5vGUc=
Subject key identifier: FE:01:70:F2:EA:9C:8B:93:76:81:EE:8D:7D:58:CC:79:39:12:3F:30
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019CABA1E745FC95100F3D8BECE2343B1E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 0519
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: f26zSiAQ4NUcAEvmCAXio2a5ZeteJ71x9lZqBjsRWCU=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e7:45:fc:95:10:0f:3d:8b:ec:e2:34:3b:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=fe0170f2ea9c8b937681ee8d7d58cc7939123f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:ca:60:14:7e:e5:1b:fb:f8:6a:3c:4a:ca:
59:20:bb:20:fd:96:f4:38:8e:e8:cc:af:c9:72:e3:
9a:d3:b0:15:75:db:80:eb:06:c0:71:db:33:fe:ad:
ef:96:f8:a3:61:20:e2:03:5f:75:d9:5d:3a:ab:18:
09:88:aa:3b:a7:de:33:e6:97:b8:b0:54:84:da:2a:
be:79:c8:31:73:c1:13:7f:c6:e4:85:65:76:75:e4:
07:36:be:74:45:27:9b:a4:e9:06:14:dc:22:eb:89:
80:86:2d:47:24:e6:f5:ca:ca:66:2e:4f:85:32:b1:
02:a6:d4:08:21:9c:6b:d0:fe:1e:cc:bb:4b:7e:a6:
87:e2:f3:0d:3b:a9:c2:28:e6:0e:ce:6b:db:d2:24:
d8:28:10:60:6c:d0:14:73:b1:13:3b:ce:2e:62:4a:
5d:94:49:97:00:06:31:19:aa:60:9c:91:00:ff:73:
d2:08:3b:19:5c:eb:fe:d6:47:35:05:57:fa:f8:e2:
65:e5:7c:a8:75:1f:df:aa:dc:a6:48:60:72:b5:68:
9d:c0:49:7f:6a:f2:86:c4:10:ce:b3:a6:87:44:d8:
30:82:0b:5a:52:64:83:59:a6:4b:5f:a9:15:40:22:
79:bb:0c:bc:81:f8:e2:46:8c:3d:46:63:cd:a2:33:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:01:70:F2:EA:9C:8B:93:76:81:EE:8D:7D:58:CC:79:39:12:3F:30
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a5:6f:15:58:2e:88:1f:d6:d4:9f:c0:f3:35:e3:8b:b1:a3:
ac:a2:40:58:ce:f4:70:89:60:95:7b:5a:69:d9:b9:08:3d:93:
6b:1b:06:36:91:b5:56:1d:35:f8:86:8a:42:4a:c4:8b:bc:26:
9d:27:5b:84:19:c3:a5:42:46:3d:cb:be:61:80:de:39:4c:0a:
e4:3c:6b:f9:f0:f3:5e:34:c5:f7:5b:1a:61:dc:ea:77:2a:b9:
77:01:08:3f:04:da:fc:61:29:c0:f9:b7:9b:ee:db:3f:71:9b:
46:7b:31:20:bd:84:63:1c:bf:ac:36:e8:3c:96:f8:d6:6a:aa:
89:e2:3f:a6:ac:1c:c2:91:6e:a8:6e:d1:54:39:61:50:8e:55:
29:07:e8:ff:17:c6:b5:03:c4:87:5c:af:cd:c3:08:01:51:a0:
8d:4a:59:f8:d8:86:3c:79:c2:c5:cb:f8:53:7b:17:34:4e:56:
59:ad:01:a0:73:df:0f:a4:5c:da:bd:e1:26:15:6e:69:5e:d0:
b4:a5:0e:e6:9d:9f:13:ea:c6:a5:2e:66:18:bc:d0:25:d7:db:
d5:5a:4d:9f:22:32:45:0e:e1:32:cb:35:0d:c0:68:45:14:52:
3d:8c:51:14:78:00:2d:61:9f:fb:a2:a9:f6:1d:d5:c9:61:c5:
ce:aa:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client