Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: 8uth/bnnkUMQ7plQQBmlIRqI/ad5GqDpFx8u9SPqufA=
Subject key identifier: FB:90:0B:C3:15:66:FB:35:BC:5F:CA:1A:22:C8:17:7A:D5:6F:AA:97
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019D9AE31C3FACE5155EFB101C073D6285A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: lRN0oo4VB0UXKnWwAVmRvb2zDtILDCBe37jyyDsF3yk=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1c:3f:ac:e5:15:5e:fb:10:1c:07:3d:62:85:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=fb900bc31566fb35bc5fca1a22c8177ad56faa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:0b:0a:91:00:a2:35:ec:bd:8e:62:2b:a8:
33:33:5b:aa:41:2c:a9:be:35:25:95:67:26:be:ec:
28:e4:42:9c:39:c1:80:9b:95:f7:35:a0:9d:47:5e:
03:87:87:ab:82:d9:22:92:d3:23:23:d3:32:65:fc:
49:5c:cb:a7:cc:3d:d3:3f:bf:78:21:93:3c:62:e6:
ad:6b:a9:7c:78:2d:c7:b7:11:d3:20:d4:55:2e:55:
bd:75:9d:aa:69:3e:14:67:99:52:a7:0f:91:04:66:
6d:25:e9:8d:fa:17:a0:68:0d:98:73:d5:42:cb:f9:
65:99:66:79:c4:3f:4c:b2:9c:4e:87:b0:5a:cb:09:
39:d4:e4:a4:07:93:46:76:85:19:90:7a:9c:c7:59:
50:34:ab:56:63:4c:45:1a:a0:40:04:0b:65:86:91:
27:3a:b0:03:18:32:9a:11:b9:e9:cb:fe:e1:b7:1e:
61:c8:18:fa:58:27:6c:42:8d:fe:92:35:06:ab:2c:
a7:8f:39:22:4f:66:ee:d1:64:16:18:95:16:ba:69:
fb:44:ac:19:b0:8c:c3:be:69:95:1a:da:c2:e6:f2:
a4:bf:4d:be:9b:06:1c:70:38:3c:10:1b:c8:6c:b7:
f3:f1:65:a6:3a:27:37:9c:40:1e:c8:b8:d2:46:c6:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:90:0B:C3:15:66:FB:35:BC:5F:CA:1A:22:C8:17:7A:D5:6F:AA:97
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:0a:bd:aa:f3:63:da:b1:a2:cd:aa:36:82:99:a0:57:6c:
21:82:1b:74:bf:67:81:74:37:b3:a7:28:a2:d1:88:bf:08:d3:
d8:d4:9d:68:8e:aa:4b:70:e5:6b:e7:4b:a6:62:7b:46:44:6b:
b9:61:ff:96:a4:0c:13:25:1f:ba:aa:bc:db:20:b1:03:12:b7:
f2:29:76:e1:0d:1f:01:c2:4b:37:85:0a:b6:4f:b6:85:fa:46:
35:a0:5b:f2:7f:a2:c7:8d:0a:a3:3b:c5:c0:8e:89:5b:42:f0:
22:c5:7c:54:58:1b:50:5a:7e:84:6d:e9:dc:35:9d:43:54:0b:
f5:78:f0:a6:d1:9f:63:44:d8:7f:69:1d:6c:38:a4:b7:c1:50:
29:d0:2d:8b:ba:fb:9b:c3:61:f4:e9:48:90:e3:e8:cd:c8:3b:
41:b1:7a:53:41:dd:ef:e1:05:9d:31:5e:bf:1a:de:2d:5c:7a:
15:62:d6:95:00:d4:82:5e:74:06:fa:62:80:34:b9:4d:62:79:
1f:3b:77:57:7b:9a:8d:70:fb:89:62:ec:9a:7e:03:39:c6:a9:
e2:ce:c1:98:f5:16:ff:c5:0c:54:54:2d:a6:c3:7f:6d:f1:d8:
f5:0e:4d:1a:ed:26:d4:a7:b5:21:3d:54:e4:f0:b6:75:53:60:
08:cc:9a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:50 2026 by rpki-client