Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: 3xydGVfu+E4vaBd0TzCBOAaLy2S58Nr3RJALFAAydVc=
Subject key identifier: E3:07:19:67:09:68:56:31:92:D3:B5:A0:40:99:D2:B9:D8:CA:73:5C
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 019D2AA96F8327394DACB71CD4F16D9C0007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 1334
Signing time: Thu 26 Mar 2026 15:00:40 +0000
Manifest this update: Thu 26 Mar 2026 15:00:40 +0000
Manifest next update: Fri 27 Mar 2026 15:00:40 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: f4kcpfkmyM5WgyxyAgi/Wl8ZhXDPCeBk0sPz/1MDv40=)
2: h4TyPM-lSUzBFc-GVJsAqMyi_Q8.roa (hash: QRRCqIhfzgSfHjTwanuS+mvIUE37zMG7bc9JISZqHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:6f:83:27:39:4d:ac:b7:1c:d4:f1:6d:9c:00:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Mar 26 15:00:40 2026 GMT
Not After : Mar 27 15:00:40 2026 GMT
Subject: CN=e30719670968563192d3b5a04099d2b9d8ca735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:d2:d2:80:68:96:8a:3b:62:3e:28:53:9d:
d3:cc:25:a1:98:3b:ea:0f:6d:dd:4b:9b:f2:e6:5e:
4d:39:fe:35:ea:ce:ef:ee:c5:37:c3:3b:68:97:e1:
14:45:3a:a1:04:b4:0c:99:37:17:39:a7:44:57:5d:
6d:b7:30:28:98:97:7d:59:ec:e7:ec:2d:be:9f:a7:
06:ac:c6:05:3b:26:fb:df:8d:6b:b3:13:dc:df:9c:
f5:9b:c1:59:d9:6b:54:6a:79:f0:58:47:3b:70:b4:
04:73:e9:01:44:13:47:3b:83:31:9c:5b:f4:45:ea:
ca:af:05:cb:29:7d:8e:0c:cc:06:65:c0:6b:f5:dd:
5f:98:f6:db:0b:a7:b8:66:8b:a0:ab:72:43:37:49:
81:71:5d:c5:1d:ac:16:45:2c:93:03:e0:e0:55:bf:
0c:8b:37:ec:ce:19:81:72:5b:ab:09:40:30:fc:ed:
77:7c:07:7e:65:2e:69:06:35:9b:89:07:6a:bc:85:
9b:33:c8:fc:6f:06:e9:f2:58:95:15:b6:2e:ed:b9:
11:11:ad:b4:95:ea:3d:36:32:6b:15:d3:6a:f7:43:
4d:fc:ab:b5:13:0e:c5:13:f8:ee:52:82:d0:14:39:
b7:90:33:45:38:4e:34:b1:19:71:89:2b:8f:97:40:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:07:19:67:09:68:56:31:92:D3:B5:A0:40:99:D2:B9:D8:CA:73:5C
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:80:18:f5:ea:1e:73:c9:07:dd:10:d5:9a:d2:e0:e0:22:c9:
b5:84:58:49:07:91:c7:3d:2c:79:64:5b:df:79:4f:a4:25:95:
87:ee:84:12:a6:4d:f9:af:38:ce:f4:0c:5b:ed:e1:aa:84:06:
2f:55:26:0b:58:ef:05:b4:98:b4:4f:b9:85:e4:5f:38:3a:24:
49:88:60:01:f0:a6:67:0b:d8:d2:32:dc:d2:27:62:79:51:54:
5d:bb:fc:75:b2:aa:80:ef:64:c5:3e:a7:9e:5f:f8:88:56:8d:
79:b8:3a:d1:92:62:a2:27:c1:38:ee:7e:de:94:53:d7:5f:56:
14:ea:47:25:33:ab:e4:65:fb:c6:e5:ea:2d:02:1b:d0:0d:1f:
e4:f2:c1:0a:08:b6:42:2b:94:99:ec:8c:d1:97:3e:02:60:e1:
0e:e6:71:e2:35:ce:36:26:a6:f6:bb:b1:90:e4:f9:19:60:24:
d8:79:7d:f1:27:f3:b7:2c:f9:c4:88:37:66:5f:57:5f:ae:b4:
c9:80:a0:81:7a:65:96:3d:44:7f:1b:bb:a4:05:fe:c7:7e:25:
0b:02:31:74:e2:8a:96:20:69:88:d6:37:45:f7:dc:be:96:d3:
4e:b9:4c:90:5c:d3:59:41:b7:93:23:4e:49:92:63:04:35:d7:
31:46:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:37 2026 by rpki-client