Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: 7mqQEiH5yrf4fW4yQplzz7gXvvZN8+5jBJgQ2i9E1sk=
Subject key identifier: 6E:92:DC:6B:83:A8:72:0E:70:39:F5:8B:BA:5A:C8:73:23:8D:0B:B0
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019D273AF35444538278D74DD77C115B0826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 0860
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: ABnOcxy6qSpNTp3mIsHHLuKr31lDnuXAMSkLRu3dO9c=)
2: nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa (hash: +GwSabbywoLmkIXJSWeaDqfIdmp99ZheKDOIGajjMZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f3:54:44:53:82:78:d7:4d:d7:7c:11:5b:08:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=6e92dc6b83a8720e7039f58bba5ac873238d0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:a5:23:54:3a:61:b3:a7:ff:03:97:d9:25:
a5:f7:cd:36:12:7f:56:d1:ae:2e:bb:34:9a:00:a2:
1f:96:1e:5d:b5:9f:88:80:0d:79:3c:07:59:fa:26:
0d:c5:73:c8:f1:b1:06:13:ba:25:4a:cf:60:b1:99:
2c:e8:89:80:6d:fb:5a:02:2e:d3:a1:92:d2:09:62:
1a:09:ba:b8:36:9a:30:6d:34:53:d6:f6:32:e5:6a:
39:a4:95:c4:b8:94:11:be:0a:79:08:e1:f1:d2:53:
8a:e9:61:26:0e:36:12:73:10:3e:26:4c:54:d4:37:
88:75:9e:c5:ea:90:16:00:8a:60:cb:ea:32:92:99:
92:fb:ae:0b:a9:7a:bd:55:ac:13:b0:e5:5d:1e:ef:
13:1c:ea:87:e1:a1:5d:b8:da:74:e3:4e:18:ce:a3:
e6:47:96:05:b3:29:05:b8:74:3e:e2:5f:8d:ec:42:
61:2c:11:47:63:fb:5b:a2:91:7c:48:2c:b9:c4:3d:
7f:c4:bc:6c:35:2d:a7:dd:33:01:ed:1c:dd:f3:0f:
c0:53:bf:cf:99:d3:19:6a:43:a2:e9:7d:e3:19:67:
09:fa:8f:91:a2:d4:26:ed:47:b1:ef:47:8f:1c:26:
c7:df:d1:01:a2:84:da:b6:1b:a5:55:85:e4:1b:6d:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:DC:6B:83:A8:72:0E:70:39:F5:8B:BA:5A:C8:73:23:8D:0B:B0
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:35:6d:c6:df:95:ab:85:a9:4e:68:51:6b:7f:68:d5:3d:5c:
07:7a:49:d5:f3:79:26:52:ad:fa:31:e0:c9:50:d5:eb:b0:26:
b2:69:2d:31:61:7d:da:a0:49:16:73:13:c9:0a:16:b0:c9:67:
da:34:a8:54:14:ee:f0:ac:2a:8b:d3:26:cd:7c:6a:a2:c4:7d:
eb:20:e7:68:30:a9:67:ea:02:b3:2c:3d:eb:32:53:c4:ee:84:
74:dc:70:de:f3:86:b1:ba:1f:b3:d5:b0:74:17:bd:8d:c2:44:
a3:da:80:82:df:e5:82:aa:46:34:c9:29:94:0a:b8:c2:55:8a:
23:fb:cd:c3:07:35:15:12:e3:e6:94:ad:61:e1:0a:75:96:23:
3a:25:e4:b1:0e:f5:dc:23:c2:fa:64:69:1b:1e:7a:88:d4:e7:
37:ce:8f:c8:52:80:06:35:02:89:97:e4:eb:88:ed:c2:47:49:
0e:a9:85:92:a7:9a:0a:cb:b4:9c:8a:d4:0f:8c:b8:bc:78:b6:
0f:f0:a9:9f:08:9f:38:d4:9a:1a:0c:0a:40:be:8f:de:e0:1a:
5d:9b:10:85:22:2f:db:72:0b:c7:af:ba:fd:5e:8b:57:d0:0e:
c5:bc:03:1c:83:15:db:42:c3:c1:6a:e0:9c:51:ef:33:51:18:
79:de:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:31 2026 by rpki-client