Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: yDOHtZa5ocH/CCOWv1JjvgaKqgQZDn1Untw5Eh/bLbE=
Subject key identifier: F6:E1:2B:D8:98:B1:A3:21:18:9D:0A:08:73:7D:1C:08:BD:85:95:90
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019FA82B7E2C7B03657CE873B2FA352D51EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 10:00:50 +0000
Manifest this update: Tue 28 Jul 2026 10:00:50 +0000
Manifest next update: Wed 29 Jul 2026 10:00:50 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: AzokuFMj1DoIJsJ4NF1WMcon7WDQ27om5gu3yoeoLqw=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:7e:2c:7b:03:65:7c:e8:73:b2:fa:35:2d:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jul 28 10:00:50 2026 GMT
Not After : Jul 29 10:00:50 2026 GMT
Subject: CN=f6e12bd898b1a321189d0a08737d1c08bd859590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:79:ac:ec:64:f3:b2:58:fa:e2:0c:ef:f9:
18:3a:09:3f:29:49:b0:bd:3c:9a:4d:24:07:d0:25:
7c:ba:57:a4:15:9d:18:d6:16:88:35:92:37:d6:29:
87:df:b2:b2:36:3a:71:e8:77:cd:21:a6:da:98:68:
04:39:b4:8c:8f:b3:0f:85:5b:3e:9f:80:f9:77:df:
26:43:da:c4:27:26:0a:c6:4f:85:d9:d5:5f:4b:a9:
9a:b1:7a:53:73:80:e0:85:c5:7a:f9:9d:41:20:86:
77:0f:89:5a:ec:1b:2d:11:8d:54:28:8b:5d:12:f5:
03:94:e0:64:53:11:87:3c:e6:d5:17:7b:31:ee:c2:
d9:e4:4c:c8:a5:e1:4e:07:fe:ff:57:4a:71:81:42:
e5:ee:3b:2a:29:0e:28:63:09:df:ec:a6:dd:de:85:
f4:12:f5:47:5f:1d:fc:f1:7e:8a:5d:65:8a:73:6c:
9c:46:cf:83:cf:84:bf:d0:6d:7e:d1:23:a2:95:dc:
09:e3:77:54:f2:aa:9d:99:96:80:a9:02:98:b5:33:
22:0e:4e:e3:ee:f3:f5:17:c9:f1:bd:ce:f8:6b:a9:
96:5b:18:22:4a:7c:6d:35:77:c9:16:05:50:e5:2b:
04:2b:0c:d8:08:31:ae:17:7c:7d:d9:1d:18:e8:96:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:2B:D8:98:B1:A3:21:18:9D:0A:08:73:7D:1C:08:BD:85:95:90
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ed:6c:34:61:04:b9:21:37:68:ab:14:e6:b2:d4:55:4b:04:
bf:5c:aa:7c:58:75:85:8f:58:0d:cd:3c:46:ab:c9:3f:b6:13:
84:dd:a8:eb:4d:08:33:26:8a:6d:a4:19:84:7f:6c:81:0e:85:
8d:32:99:18:fa:7e:4f:b3:e2:70:86:8f:f0:4d:e7:9b:90:47:
12:2e:2f:39:6d:29:68:4c:dc:64:30:28:a0:f0:67:5a:34:22:
7d:b4:23:19:d5:3b:84:2e:73:8b:56:0d:fa:45:2d:7f:0e:a2:
93:97:58:94:10:0b:68:2a:6e:65:41:23:13:69:06:82:fb:bb:
88:cb:90:41:f8:7c:cb:ba:c4:e3:de:a9:1d:6d:8a:41:46:f8:
7d:b5:b0:d8:5e:83:3b:18:9c:64:28:0a:78:e3:17:ac:71:5b:
cc:15:13:7e:4a:e2:ff:ae:98:7f:4e:9a:0e:3b:c3:31:c3:85:
8b:0d:22:23:69:07:dd:2c:27:ba:2b:8e:6d:e2:0d:99:92:7c:
f9:ec:57:98:fe:ee:d3:c4:6a:63:4b:ce:2b:ef:5a:de:87:94:
8f:fe:cd:70:b6:1b:91:b0:ea:90:51:f6:b3:09:28:30:63:0d:
b8:3d:54:3b:38:f8:96:43:fa:26:da:c3:1c:17:c5:69:6b:8b:
8e:53:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:40 2026 by rpki-client