Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json)
Hash identifier: kzs394e050pUy4yaf2l/WAiyV96T/g8gL18ZuA+esho=
Subject key identifier: F4:3A:71:A9:CB:42:E8:05:63:28:BD:E2:6C:8A:85:8B:46:6E:46:35
Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Certificate serial: 019F8FB5631734C18E7F812723E5C27C3096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
Manifest number: 033A
Signing time: Thu 23 Jul 2026 16:00:56 +0000
Manifest this update: Thu 23 Jul 2026 16:00:56 +0000
Manifest next update: Fri 24 Jul 2026 16:00:56 +0000
Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: ReKTF6Rs/sr+0P8SUzfxTndBYuG11g9P/3j4dIO9bY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:63:17:34:c1:8e:7f:81:27:23:e5:c2:7c:30:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728
Validity
Not Before: Jul 23 16:00:56 2026 GMT
Not After : Jul 24 16:00:56 2026 GMT
Subject: CN=f43a71a9cb42e8056328bde26c8a858b466e4635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:48:85:cb:f8:5f:a9:63:2f:6a:08:5d:d6:
a9:3e:8b:cf:f3:1d:9f:fc:16:bf:1d:34:df:b4:e4:
96:c2:25:0d:de:4e:91:62:c2:1f:35:21:84:53:50:
35:67:a8:f9:02:61:44:3c:9e:c8:8a:7b:dc:23:90:
21:a2:ff:f3:90:c0:b9:86:23:b2:59:89:ee:3f:78:
e8:fd:b1:28:f1:dc:66:d5:2e:e5:6e:bb:09:f3:c4:
98:cf:aa:a2:ca:d2:6a:db:27:c1:e6:fd:ca:f2:f9:
83:a6:72:73:6b:88:de:e1:24:b8:12:a4:4d:b7:d4:
9e:cb:4e:d3:f6:b2:82:8a:ce:7d:e7:6c:ed:a2:2a:
a1:f6:18:56:56:b4:3a:8b:03:5c:88:5f:cb:46:57:
d3:ad:39:cd:ab:58:9b:9a:b9:80:86:9a:3c:4c:03:
04:b7:90:2b:cc:05:65:77:10:8f:c6:a1:98:5a:fd:
06:4a:a4:f2:d6:9f:0f:a4:50:dc:ab:74:bb:fc:d4:
a4:b2:bc:82:ea:8e:cc:07:ef:a5:8f:f9:24:ea:ff:
e2:94:28:48:70:1e:d8:27:91:49:af:c8:1c:81:60:
6f:69:37:a3:be:53:fa:8d:26:9f:33:60:58:cb:ac:
d8:96:ca:c6:06:b8:07:39:1e:4d:80:10:4c:14:42:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:71:A9:CB:42:E8:05:63:28:BD:E2:6C:8A:85:8B:46:6E:46:35
X509v3 Authority Key Identifier:
keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:cc:82:d7:24:c9:51:0e:23:9b:07:5b:d6:32:9f:69:93:
80:c4:26:7b:cf:65:17:6d:61:11:37:5b:d7:6f:c6:34:d4:66:
8a:bf:e8:77:ae:61:b6:2b:2a:5d:13:70:0c:90:c7:e7:43:f2:
87:a1:0c:c9:6c:72:25:2d:92:db:92:d6:97:d4:69:65:50:76:
23:d1:a3:91:6b:6c:78:1a:77:e1:34:17:09:f7:28:0d:8e:cf:
e3:01:b8:94:69:09:fe:c0:ca:a3:72:eb:6c:e5:12:07:02:ad:
b8:34:b7:63:21:9d:1b:03:2f:4a:9a:04:6d:89:47:a8:61:ac:
7e:e4:c3:e6:59:4d:32:47:1a:1f:cd:77:cb:27:17:77:01:df:
ca:b2:0b:30:fb:ac:f0:7b:04:d3:06:e4:55:7e:b9:36:37:ec:
1a:e5:56:ec:fc:45:56:67:77:60:52:f8:03:07:e8:86:c4:1d:
bb:8a:71:08:46:74:7d:fb:c4:97:6b:05:be:33:84:57:95:64:
f7:9a:f4:20:93:a8:d3:d1:a8:f8:33:08:24:20:a3:dc:67:24:
8b:fc:2b:50:ea:7d:7c:8f:a8:22:7d:d3:33:15:5d:0d:f3:8d:
d0:9b:26:87:a1:61:41:e3:e4:76:ef:4d:00:5c:66:9e:a1:48:
52:11:81:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtWMXNMGOf4EnI+XCfDCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZDc4MmRkNzNiMDNkNGU0ZDc0MjFlMjkwZDYzYWFkZjc1
YzE3MjgwHhcNMjYwNzIzMTYwMDU2WhcNMjYwNzI0MTYwMDU2WjAzMTEwLwYDVQQD
EyhmNDNhNzFhOWNiNDJlODA1NjMyOGJkZTI2YzhhODU4YjQ2NmU0NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4spIhcv4X6ljL2oIXdapPovP8x2f
/Ba/HTTftOSWwiUN3k6RYsIfNSGEU1A1Z6j5AmFEPJ7IinvcI5Ahov/zkMC5hiOy
WYnuP3jo/bEo8dxm1S7lbrsJ88SYz6qiytJq2yfB5v3K8vmDpnJza4je4SS4EqRN
t9Sey07T9rKCis5952ztoiqh9hhWVrQ6iwNciF/LRlfTrTnNq1ibmrmAhpo8TAME
t5ArzAVldxCPxqGYWv0GSqTy1p8PpFDcq3S7/NSksryC6o7MB++lj/kk6v/ilChI
cB7YJ5FJr8gcgWBvaTejvlP6jSafM2BYy6zYlsrGBrgHOR5NgBBMFEJvQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ6canLQugFYyi94myKhYtGbkY1MB8GA1UdIwQY
MBaAFArXgt1zsD1OTXQh4pDWOq33XBcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80NjNlOTktYTUyYi00MzA1LWE0YTUt
NTQwMzZiOTE4NDVjLzEvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80NjNlOTktYTUyYi00MzA1LWE0YTUtNTQwMzZiOTE4NDVj
LzEvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJPMgtck
yVEOI5sHW9Yyn2mTgMQme89lF21hETdb12/GNNRmir/od65htisqXRNwDJDH50Py
h6EMyWxyJS2S25LWl9RpZVB2I9GjkWtseBp34TQXCfcoDY7P4wG4lGkJ/sDKo3Lr
bOUSBwKtuDS3YyGdGwMvSpoEbYlHqGGsfuTD5llNMkcaH813yycXdwHfyrILMPus
8HsE0wbkVX65NjfsGuVW7PxFVmd3YFL4AwfohsQdu4pxCEZ0ffvEl2sFvjOEV5Vk
95r0IJOo09Go+DMIJCCj3Gcki/wrUOp9fI+oIn3TMxVdDfON0Jsmh6FhQePkdu9N
AFxmnqFIUhGBtg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:31 2026 by rpki-client