Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
File: Ctubg9jWo5JpQjgTidQbJIuNzeM.mft (raw, json)
Hash identifier: /RHazhK/DxvJidG41nJnqajZ6MHTPh4JXgZssJUjHcA=
Subject key identifier: CE:00:2C:24:B4:04:0A:A1:EB:27:94:80:6C:FD:BE:2E:86:0B:C4:27
Authority key identifier: 0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
Certificate issuer: /CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Certificate serial: 01A0DFBD33925B7B89711D09AE1F9198E597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
Manifest number: 01D7
Signing time: Sat 26 Sep 2026 22:01:53 +0000
Manifest this update: Sat 26 Sep 2026 22:01:53 +0000
Manifest next update: Sun 27 Sep 2026 22:01:53 +0000
Files and hashes: 1: Ctubg9jWo5JpQjgTidQbJIuNzeM.crl (hash: PAxsTtgfIsGnVeEcEg7eefOfcgbFrSmmsPAgnUFXwRA=)
2: H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa (hash: Xpb3Wvxuwn+LgJBZGrRUURe+bHS15YUPVUIKv2HVwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:33:92:5b:7b:89:71:1d:09:ae:1f:91:98:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Validity
Not Before: Sep 26 22:01:53 2026 GMT
Not After : Sep 27 22:01:53 2026 GMT
Subject: CN=ce002c24b4040aa1eb2794806cfdbe2e860bc427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:8d:9e:2a:33:92:1e:67:9c:fc:95:d1:80:
a6:8b:1f:76:d4:af:97:14:bb:72:b3:a4:2d:5a:96:
2c:f3:e6:0c:20:0e:87:0d:be:02:9d:0d:6f:13:b5:
b8:c6:65:cf:58:72:a7:1f:c8:44:4b:b5:b4:2b:9f:
84:16:57:09:8a:94:55:98:e8:8d:a9:20:8e:7d:29:
3d:b7:97:5b:73:53:32:78:47:60:25:ae:c9:06:d0:
87:4a:b0:01:d7:4c:8f:cf:fc:b3:34:c1:1a:13:8d:
61:c0:81:74:44:47:53:46:eb:94:31:54:d9:7c:fe:
d0:e7:04:d9:b8:39:48:5c:ef:7d:7d:f3:db:0c:88:
03:e7:18:9b:d0:65:c2:96:81:39:34:e3:75:06:c1:
3c:be:a7:b7:c6:ff:ee:ca:68:6a:92:53:ce:c9:85:
3a:76:ae:c5:a2:d4:fd:ab:f9:94:4b:bc:69:33:c6:
4b:f8:ca:e8:e8:66:fd:69:39:3b:bf:e0:da:b0:38:
2b:b4:ef:d8:55:27:85:b6:ce:36:f5:16:37:2f:f9:
4f:5c:1e:ae:ec:66:f5:da:98:b9:2f:fa:ce:5b:90:
a7:a0:ae:ad:14:99:55:82:23:80:e6:b3:b7:7b:47:
a1:45:ba:b3:b9:78:da:3c:ac:15:15:59:3d:b3:9b:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:2C:24:B4:04:0A:A1:EB:27:94:80:6C:FD:BE:2E:86:0B:C4:27
X509v3 Authority Key Identifier:
keyid:0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:36:ce:dd:e7:1a:eb:e6:bd:0d:5b:00:fe:3f:1d:94:72:38:
1d:69:da:d2:66:1e:3d:9b:b0:cd:60:56:b4:26:02:01:d5:98:
bd:aa:2e:8a:e0:bd:19:76:2e:2a:00:b5:a0:76:26:21:52:ab:
70:2e:42:47:d9:19:e1:2d:d4:96:c0:d8:de:a2:c1:09:b4:8e:
1e:49:e8:7f:04:3c:b1:fd:6b:d7:b0:5e:ec:1a:55:81:99:59:
b6:4f:45:ca:8a:7f:10:42:58:ab:4f:f9:e6:d8:f8:91:36:df:
ea:ae:45:0e:a4:ae:11:17:58:8b:16:2e:84:82:7f:f4:c4:80:
24:e0:e7:e5:e7:0f:8a:50:f0:03:e0:be:04:47:41:5c:96:44:
b3:94:89:1d:d5:cb:36:f6:98:12:f3:83:6e:21:42:6c:df:bb:
29:c5:51:10:a6:f9:30:8a:ba:b1:a9:9d:65:9b:29:b5:c2:6b:
23:c4:1f:07:6a:11:ec:ce:70:fe:14:f9:25:8a:05:2f:8e:ef:
e9:84:27:fd:73:1b:e2:b5:fc:1e:ba:eb:bc:41:79:8b:c1:91:
97:ae:48:09:d7:30:f0:31:c3:d0:c4:2f:08:69:6f:9c:88:61:
78:25:02:36:e2:aa:2b:b7:9a:9d:5d:ab:bd:c8:95:b6:0c:84:
e0:d2:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:06:25 2026 by rpki-client