Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: PkwNzigWU7rvidEsQRWRYM2cZHrshEmlLE61I5BHwnE=
Subject key identifier: 87:E5:28:8A:F2:FB:1B:41:71:14:39:A5:1A:85:97:40:41:22:F8:17
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01A0DB3B9A5248E5D0D9DF93AA35EAA54F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 01:01:51 +0000
Manifest this update: Sat 26 Sep 2026 01:01:51 +0000
Manifest next update: Sun 27 Sep 2026 01:01:51 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: x3OIpHGObqJ6RogXp6Il6qxAc3dvAbwKvgiYQB+q7mk=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:9a:52:48:e5:d0:d9:df:93:aa:35:ea:a5:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Sep 26 01:01:51 2026 GMT
Not After : Sep 27 01:01:51 2026 GMT
Subject: CN=87e5288af2fb1b41711439a51a8597404122f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:62:73:bd:99:09:3b:a5:53:7f:c3:88:b3:
c5:b6:e6:fd:ee:a1:39:9c:61:01:cb:41:38:63:cc:
40:6c:5c:66:51:67:e8:dc:f1:d7:b3:b3:56:f7:15:
ba:58:b2:85:01:19:1c:8a:11:7a:cb:09:ab:df:49:
b9:1e:dc:b7:50:18:9d:98:09:21:f9:cf:30:00:80:
32:4e:92:cc:09:48:43:f5:a2:cf:01:1d:56:bb:fb:
42:92:f4:67:3b:b9:ca:7d:d7:d6:9f:b0:20:4b:4d:
2c:b5:8b:14:7b:7b:01:b6:85:bb:9c:7f:43:44:86:
d7:b8:8f:4f:5c:99:a1:79:8b:af:c2:c0:1c:f8:e4:
d8:d1:a7:cc:2f:17:4b:bc:ff:f1:cf:c5:10:12:4a:
a0:00:97:ff:bd:cf:bb:5d:9e:29:a4:1f:5b:1c:bc:
0a:13:10:76:65:b2:00:04:26:a3:ca:da:ee:8d:98:
fc:94:52:fa:27:32:d0:c4:fb:5e:3c:a6:4f:26:3e:
9a:b9:03:55:33:9c:5c:11:fe:65:64:b4:6a:ec:9b:
65:a9:22:a5:2f:77:c6:c7:1c:2c:68:26:05:af:3e:
88:70:49:3a:ab:3d:39:41:12:d5:60:d8:a1:2c:9a:
9e:3e:0a:6d:da:62:9f:2d:d0:f8:64:14:6b:a0:a2:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:28:8A:F2:FB:1B:41:71:14:39:A5:1A:85:97:40:41:22:F8:17
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:dd:83:80:ec:91:17:79:83:29:b6:0e:b6:4c:6a:db:0d:
9b:43:1d:da:3f:4b:0f:f1:9f:94:5f:76:9d:d3:e3:14:1c:65:
69:26:92:48:ef:d5:1d:f9:e6:47:4a:82:aa:4d:52:a3:8e:07:
a0:3b:89:80:e9:31:b0:27:4f:bc:26:f5:92:df:0d:2f:86:f4:
18:1a:fb:a2:ad:20:a5:05:a3:22:7c:0c:f8:c3:67:66:b5:23:
e0:65:a6:dd:8e:76:e4:45:e7:46:fd:97:b9:13:c8:9c:a8:52:
c3:02:02:70:6a:2d:43:81:83:ba:de:c0:d2:b8:2b:7f:60:ac:
ec:f7:cd:bd:ca:d8:30:8d:a7:83:e7:ee:5b:e5:9d:9d:9f:8d:
b5:27:9c:b6:4b:0f:a7:ac:37:69:a6:58:28:7e:ad:2a:36:fa:
31:bc:25:70:9c:16:86:7d:f4:b8:9e:b7:dd:38:3d:0e:b7:40:
a1:7c:2c:c9:41:51:b4:13:d5:44:bd:49:df:c4:96:84:70:e8:
c7:d4:da:e9:d5:df:ac:e8:b9:89:ab:c1:f9:3d:22:b1:93:9c:
d7:99:b7:a0:47:ee:d5:1d:83:c1:ae:54:c5:48:e2:61:07:ce:
35:14:db:c5:ce:a6:df:c9:10:ca:27:e1:5a:70:24:79:1d:4f:
13:fa:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:18:22 2026 by rpki-client