Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
File: Ctubg9jWo5JpQjgTidQbJIuNzeM.mft (raw, json)
Hash identifier: /gZSw2K/fgZ0iBC+kKiYYE7UgYJ6gLUqV+/KfSTzHDg=
Subject key identifier: C5:D7:6D:2D:6E:93:02:0A:72:A3:D5:23:82:56:C5:89:97:24:67:B4
Authority key identifier: 0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
Certificate issuer: /CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Certificate serial: 019F8FB51062C651CD734A60CC4AF83FCA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
Manifest number: 0129
Signing time: Thu 23 Jul 2026 16:00:35 +0000
Manifest this update: Thu 23 Jul 2026 16:00:35 +0000
Manifest next update: Fri 24 Jul 2026 16:00:35 +0000
Files and hashes: 1: Ctubg9jWo5JpQjgTidQbJIuNzeM.crl (hash: qVItFSj8YPgq8eYL5H7bUZMuTrkIq6/PESfqIvD6CPo=)
2: H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa (hash: Xpb3Wvxuwn+LgJBZGrRUURe+bHS15YUPVUIKv2HVwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:10:62:c6:51:cd:73:4a:60:cc:4a:f8:3f:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Validity
Not Before: Jul 23 16:00:35 2026 GMT
Not After : Jul 24 16:00:35 2026 GMT
Subject: CN=c5d76d2d6e93020a72a3d5238256c589972467b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:52:2d:f7:fa:8b:91:df:aa:e9:89:b9:a4:
2f:f2:3e:60:d1:de:a9:6a:1e:97:0c:5a:1e:74:ed:
70:96:4a:e5:de:9d:29:00:e1:10:82:07:02:e9:46:
8c:16:e6:fd:8e:2e:23:bb:87:98:2c:3e:d5:b2:83:
5e:da:69:ee:0d:b3:88:59:84:1c:fe:45:ad:7f:2d:
c4:12:27:57:d7:46:0a:89:d7:d1:0e:97:ad:b0:6e:
90:4b:f2:35:6c:c8:23:be:5b:40:41:dd:db:96:0a:
27:c0:2d:d7:ce:d9:15:40:43:d3:15:99:37:dd:e1:
a7:db:21:f9:aa:e9:eb:3a:d9:ee:16:6d:e9:04:a7:
f9:95:45:40:60:2c:97:1c:e2:7b:90:7a:9f:0d:07:
e9:ab:f3:b2:b1:4f:66:06:d2:6f:a4:4c:e1:5a:2e:
9e:f6:10:68:68:28:f3:db:bd:9f:ed:6b:f7:e3:b7:
06:b8:31:d3:9c:80:d7:74:51:78:06:b2:10:f9:24:
44:61:43:e2:c8:f6:3a:01:64:8e:83:ca:87:d0:3c:
13:9b:ea:f5:26:f8:af:69:6e:6c:d0:4b:08:05:15:
ae:1d:ab:5a:eb:e9:bd:f3:11:77:d7:a6:65:7a:e2:
1c:3b:98:da:ce:96:38:a0:a3:82:b9:79:5c:66:6f:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:6D:2D:6E:93:02:0A:72:A3:D5:23:82:56:C5:89:97:24:67:B4
X509v3 Authority Key Identifier:
keyid:0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:f7:be:8d:3b:e2:67:a4:a9:e2:71:54:f8:9d:cb:e9:c4:
d5:b7:2a:f4:72:8d:39:f8:b0:98:65:53:60:f3:64:b8:0e:1c:
96:41:a4:f3:24:c0:67:69:f8:2c:34:9d:92:60:e3:e4:0e:29:
85:85:99:7b:48:84:58:f9:d8:0f:07:f6:4f:08:05:31:6a:fb:
2e:70:3c:61:e1:d6:4f:ce:0d:a0:3b:71:7b:59:94:e0:02:f8:
b7:8e:d5:29:a9:3e:f5:8e:5f:d1:9b:f5:72:e5:5f:d4:83:a5:
31:4d:36:ac:cd:af:92:95:a4:95:bb:86:99:45:d6:00:6f:33:
0d:d0:32:19:5a:32:e6:7b:b6:a4:a9:9d:56:04:7b:7c:e0:51:
98:bb:2d:72:6d:a5:77:b2:0e:54:2f:54:b9:aa:65:14:5f:9d:
bd:e9:64:48:3a:51:2d:6e:56:8b:d7:33:21:f0:bd:c6:b9:73:
10:3a:a0:40:bf:c8:10:da:e9:47:c4:38:76:a5:81:e9:d7:b3:
06:51:d4:e4:74:3f:b4:2c:1b:90:40:a7:d5:1f:bf:0f:ef:ec:
fe:bf:2c:9d:db:17:74:6d:cc:ff:9d:c5:a8:eb:b5:05:10:a1:
c8:af:6d:4a:39:6b:42:5b:1d:03:f6:ef:31:34:80:32:ad:79:
71:82:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:11 2026 by rpki-client