Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: G8/X988hV8y7xNNVYGHiV4RJ0LZGNA16kj5cu5ZLh2s=
Subject key identifier: DE:62:2E:64:F0:5B:52:2F:20:B6:58:07:8B:2E:8C:A6:25:F0:D0:CA
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019D27A8EBDD89F1E5BB16ABF8C156C09B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 1281
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: YrpGqjD61pbo3hVbY2sVNOQLJClY8gB7zVOU4WkcU7U=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:eb:dd:89:f1:e5:bb:16:ab:f8:c1:56:c0:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=de622e64f05b522f20b658078b2e8ca625f0d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:52:7f:23:f2:c4:0e:c8:11:5a:1e:2f:c0:
4a:a4:a7:c8:b1:fd:50:b4:6e:65:fd:97:4f:24:bf:
f5:4c:2b:4f:01:34:41:06:89:ef:8c:ed:50:7c:c8:
43:16:2c:21:e4:14:cf:53:98:dc:a7:76:3b:d5:31:
ae:7a:67:72:67:5d:8b:e2:e2:5b:8e:bd:69:39:2d:
c2:df:ce:f1:9a:72:f3:d4:92:b7:1c:8f:99:67:4d:
0a:16:7f:de:ad:7c:37:bf:a3:06:68:db:16:4a:11:
e0:88:53:e5:00:1a:55:b3:a0:89:02:ce:9e:a1:e1:
f5:21:5e:3e:ca:4d:31:2c:44:3f:dd:6d:77:04:b2:
16:38:97:26:f0:0c:54:a9:6c:20:ca:4a:89:12:93:
70:75:fb:1b:c0:ae:81:c7:c6:54:85:8d:61:5c:2c:
08:47:36:94:36:7c:0b:b2:02:54:d6:37:ca:79:ef:
57:f5:3b:ea:d8:49:b1:f1:dc:7a:48:eb:cd:71:40:
5f:42:f0:fc:8e:20:f0:74:9e:66:7c:b7:15:6f:df:
df:6f:02:fa:50:08:1b:17:a6:c2:0d:9b:1a:2c:8b:
12:3a:6b:10:3b:9f:3c:36:b6:63:5b:cb:51:a2:ed:
31:b5:f1:7f:75:ce:64:6a:e6:59:b7:28:0b:dd:78:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:2E:64:F0:5B:52:2F:20:B6:58:07:8B:2E:8C:A6:25:F0:D0:CA
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:0b:13:a7:13:99:1c:e6:6f:be:68:c9:84:42:b0:85:c9:
2f:90:25:f0:26:74:46:f9:2f:ca:02:f6:35:f2:33:d8:88:d4:
a3:5e:f6:96:dc:ca:b1:a6:84:93:97:11:a4:ff:dd:f7:cb:de:
6b:6e:eb:ff:c9:c2:78:e0:69:0c:c5:9c:cb:9c:fd:c2:21:49:
f0:bb:a2:46:15:9a:a8:90:51:34:0d:95:27:a8:a3:fd:63:3a:
d6:f6:b7:bd:7c:77:e2:64:95:3f:6d:ac:62:cc:57:a9:d7:b3:
ed:13:58:08:a9:62:f2:59:b6:6d:67:e2:3b:cc:34:17:08:f5:
da:1c:53:05:4b:de:f2:3f:81:e6:4d:2f:1a:cc:b0:e1:a9:35:
6d:67:9b:d9:5c:5c:92:32:b9:5d:4d:5e:8d:82:ee:63:21:c1:
ef:0f:3d:f9:fa:b6:63:5f:04:ec:32:dc:68:8e:d0:c2:d4:b4:
21:c8:fd:09:80:ed:43:9c:8f:aa:7c:d5:12:ab:3d:d0:8f:ea:
22:6a:21:ee:d0:78:77:51:14:c6:9e:02:24:0f:3d:37:92:9c:
84:2a:a6:7e:3c:95:07:9c:cc:f7:c9:51:69:ec:a1:45:7e:65:
c0:ba:05:de:8b:5b:1a:c1:3f:31:e1:6d:2c:e9:92:16:ee:c8:
24:ae:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:37 2026 by rpki-client