Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 3UPKfRc6NN+KzqDzHI7od4aymldtSFR7vRQ42y9OISE=
Subject key identifier: D9:D9:34:CF:EC:42:AD:B8:C1:21:38:B7:4C:B4:85:30:0A:16:81:42
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019F91A397FE4FAA17277F1A2B71EEC72173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 13C1
Signing time: Fri 24 Jul 2026 01:00:45 +0000
Manifest this update: Fri 24 Jul 2026 01:00:45 +0000
Manifest next update: Sat 25 Jul 2026 01:00:45 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: N35DXIVZQ9Xe1bdhs4Uul5zts7mbY9LlipHwY6UItyU=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:97:fe:4f:aa:17:27:7f:1a:2b:71:ee:c7:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Jul 24 01:00:45 2026 GMT
Not After : Jul 25 01:00:45 2026 GMT
Subject: CN=d9d934cfec42adb8c12138b74cb485300a168142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:7a:cd:d9:cf:99:ed:d9:2b:b0:b7:b8:3f:
8d:fd:60:32:f3:c9:ed:6f:e1:2c:cb:d2:62:80:38:
81:19:82:5c:ca:f3:a3:9b:b4:8e:cc:be:dd:df:b6:
55:97:19:3b:a6:0c:5c:f1:d2:13:64:6b:77:91:98:
b2:fe:8e:1e:b7:dd:d8:5e:04:dd:86:5e:59:24:da:
f3:9a:11:f0:8a:fb:52:6f:4a:d8:e5:05:d0:4e:24:
59:01:06:b0:5c:a9:81:8b:cf:f4:d1:fd:99:7a:5e:
5e:c5:8f:b0:98:b1:60:1d:9a:cf:4a:0a:a9:4c:84:
5e:a0:d5:2d:0b:87:ed:25:ad:d1:5d:2e:a1:10:3e:
2a:bb:f2:c7:a8:33:33:41:bb:a9:16:38:ba:7b:a3:
bc:72:13:e9:8d:e9:90:98:e8:93:25:28:10:22:95:
72:20:a0:ce:d3:fb:e7:1a:83:51:ca:c4:8b:8b:b8:
79:ba:30:0a:bb:03:cb:64:87:63:61:d3:9f:2a:30:
3c:06:b9:50:46:8b:1d:ed:7e:19:31:5d:c7:7b:cc:
54:e1:e7:73:2d:b3:f4:eb:1f:2b:a0:ea:55:38:cf:
71:fd:1e:04:eb:bf:bb:a1:f0:10:a8:d4:9e:45:c6:
b3:8d:03:cb:45:a9:cf:6f:96:d5:15:b1:05:7f:37:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:34:CF:EC:42:AD:B8:C1:21:38:B7:4C:B4:85:30:0A:16:81:42
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d7:4b:b3:31:59:08:b8:00:0a:de:b3:31:56:05:70:1e:8a:
86:d1:6a:6d:a4:91:f4:cc:91:01:df:d8:ce:db:89:91:e0:22:
ab:47:8c:72:de:58:a2:64:d5:88:74:2c:ec:f2:c0:0b:f6:91:
3a:8a:c6:12:c3:5b:a4:d2:a3:c8:61:d2:71:31:17:85:ef:77:
d2:00:2e:bf:fa:5a:48:ec:45:ac:08:98:a2:7d:7c:0a:27:f0:
39:54:c6:10:d6:aa:e8:1a:30:73:68:ec:30:e6:2b:31:5b:6f:
33:fa:ae:1e:37:63:fb:9a:40:2f:c7:97:ca:7e:5f:60:90:64:
ee:34:d2:a5:5e:bb:4a:d1:56:18:51:c8:36:77:3b:90:5f:a5:
f1:50:ed:25:02:97:bb:94:10:12:1e:a1:cb:dd:42:a1:ee:74:
fb:21:4d:9f:c2:ef:8d:52:2d:be:cc:d2:ba:ca:36:64:c8:10:
51:2b:66:88:12:ed:67:aa:ca:2d:85:5a:d1:f1:01:ba:aa:eb:
f3:ac:e8:74:12:e2:f1:cd:6a:39:db:d6:65:66:d4:e6:d9:ca:
ac:6f:35:5c:50:a5:bf:e7:12:df:b7:c5:bc:3c:26:fa:6d:54:
40:32:87:8a:ce:e7:8c:6a:3d:1f:59:71:5a:e0:47:63:09:52:
c3:18:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:56:46 2026 by rpki-client