Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: d1yLUuc5wZhIlfZ7jsriXScMCfLlKFyff7T0TkdQddw=
Subject key identifier: 2D:69:96:0F:88:B9:9D:DD:31:7C:D0:5E:40:F2:61:4B:E5:50:5C:B2
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019CAD5985EBA4745F7B849DCC29A7B30D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:00:50 +0000
Manifest this update: Mon 02 Mar 2026 07:00:50 +0000
Manifest next update: Tue 03 Mar 2026 07:00:50 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 7MJMk040JrOxE/gaLqECn8YbOr2GtPH1YAMTW9eYkd4=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:85:eb:a4:74:5f:7b:84:9d:cc:29:a7:b3:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Mar 2 07:00:50 2026 GMT
Not After : Mar 3 07:00:50 2026 GMT
Subject: CN=2d69960f88b99ddd317cd05e40f2614be5505cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:14:27:b6:28:e7:77:96:70:95:d8:b4:59:42:
13:50:ac:20:aa:b3:fe:b1:d8:9a:0e:85:1e:71:2d:
47:c5:18:ce:2d:61:9e:c6:cd:3d:89:64:b3:2a:be:
46:ff:73:4b:b4:f0:46:3c:3a:6c:f6:03:6f:59:7a:
73:ad:6f:ff:a0:fc:53:ae:81:d6:91:3c:5c:28:9b:
fc:1c:df:c2:80:27:61:37:32:48:2c:16:e3:60:a6:
c9:a8:df:3e:e5:ae:4b:d3:b7:ed:d7:23:58:cc:b2:
9a:85:6c:98:b9:15:6b:cb:0c:11:90:40:4e:1e:e9:
a6:db:22:5f:c2:3e:d9:11:52:9f:40:f2:f4:e4:7a:
6e:1f:39:be:8d:30:f3:cd:69:76:85:5b:2a:e8:c1:
5d:b5:50:75:d7:6b:58:8c:0f:77:37:17:e3:cb:11:
6f:90:e7:0b:1a:33:f4:dd:e6:1a:70:84:48:4c:c8:
b8:af:b8:11:00:49:62:3a:c2:10:a0:37:97:ef:da:
78:45:2c:da:47:ab:e4:80:66:cf:42:6c:0f:61:b8:
ab:bf:ad:55:f2:53:65:6c:00:ff:36:d7:fc:83:65:
8b:1a:7e:ba:e9:51:a4:39:1e:bd:98:0a:ae:e4:52:
cf:f0:a7:63:f6:b0:5d:5a:51:d5:bc:3f:12:fb:86:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:96:0F:88:B9:9D:DD:31:7C:D0:5E:40:F2:61:4B:E5:50:5C:B2
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fb:5b:b6:cf:22:b9:5d:1c:00:15:fe:8f:9f:6f:3f:0a:a1:
d0:7e:83:0f:19:35:91:c5:87:d9:d3:96:31:73:6a:08:9f:30:
37:34:08:8f:cc:7d:aa:af:cb:b5:0a:6f:ab:f6:5e:02:5d:7e:
42:e4:08:cd:10:b3:2b:c1:6d:c4:61:87:30:39:70:0d:9c:38:
1e:38:25:82:50:b4:79:c1:8c:f9:85:ac:5f:29:47:3e:31:1a:
b7:f6:5b:1b:7c:95:ff:86:14:3a:98:13:b6:23:04:63:b9:f3:
22:0a:9f:d1:ef:f6:cc:cd:7e:b9:7b:76:b0:d1:c4:ac:28:8e:
68:45:d6:6f:25:b7:65:7b:4e:4a:9f:78:db:37:8a:e0:bf:17:
22:70:05:38:bf:e3:0f:02:7f:41:3c:5c:2c:45:2a:12:c7:a6:
b0:a5:57:37:8d:cc:82:6a:e3:0c:a1:b1:d3:43:b7:f2:77:85:
80:36:17:dc:2e:70:4f:54:ed:a2:06:82:97:34:b9:47:99:d0:
73:38:55:2a:ab:1e:f2:de:2d:3c:24:14:82:19:ab:57:f9:d7:
81:9e:7e:ca:82:ce:e8:b4:62:13:5c:bb:8c:df:65:76:12:9d:
db:48:37:c8:da:93:70:ac:95:45:69:cc:b1:c9:88:13:4d:62:
f9:47:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:28 2026 by rpki-client