Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: NtQq6134MPyKm9xdXqMr4Fy8WG/pj9ac/YopoFBNSmk=
Subject key identifier: 31:80:9D:30:3C:F5:68:EF:AB:A5:5B:19:1C:C3:D2:59:37:B4:AD:53
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019F9323FFD56633817F6BB27E4D3188D6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 069A
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: Gp7PVeZnd44HCnGMsJ0WkqfcGs6OX51TzW4uZ2PA7d4=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ff:d5:66:33:81:7f:6b:b2:7e:4d:31:88:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=31809d303cf568efaba55b191cc3d25937b4ad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:b0:aa:a2:a6:7f:e8:a2:ff:9e:c6:ea:88:
b4:a2:24:a2:95:b2:18:2a:a3:aa:90:5d:c7:0a:87:
21:ac:12:ea:3e:e7:49:67:f5:73:2e:4c:f7:4c:88:
7d:d5:83:15:4a:ef:c4:0e:83:22:e6:a2:19:b1:f4:
19:b3:a5:9e:df:9a:67:bf:c5:e7:7a:a1:77:f6:a3:
b0:37:1b:f7:15:3c:be:b6:ca:99:d6:c1:9a:65:2d:
33:de:26:f1:59:4d:55:2c:32:84:c5:b2:50:c1:29:
7f:c6:46:53:b1:b3:3d:58:fe:00:aa:eb:73:dd:05:
28:f1:20:c0:8e:34:ee:5a:ba:b9:6e:fd:d5:f1:89:
98:65:5d:67:f4:19:15:e6:ed:e5:62:af:cd:8c:50:
0f:78:fe:7e:b7:29:f8:38:ca:e6:d9:86:ed:8a:3e:
25:f7:ff:9f:5b:83:4a:37:b4:79:26:c8:b3:d2:9a:
4f:82:21:05:e5:74:28:91:e3:51:42:16:d7:f6:d1:
af:47:86:ad:5b:4d:ef:98:d6:32:72:cd:c6:36:cf:
a1:d3:3a:76:02:7d:61:57:fc:1e:47:0f:99:56:65:
5f:44:cc:60:89:87:ef:ff:ba:4a:71:0a:18:27:a9:
0f:c3:69:20:9a:a0:80:82:b1:e8:ae:d2:0a:3e:61:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:80:9D:30:3C:F5:68:EF:AB:A5:5B:19:1C:C3:D2:59:37:B4:AD:53
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:42:d2:cb:e9:f7:c9:3a:3b:3b:d3:46:b1:b7:1d:7c:00:d7:
5f:fa:20:40:41:10:94:81:45:e1:49:ee:1c:4e:eb:df:7e:ef:
7a:f5:48:48:61:e4:71:29:56:d9:81:bc:62:79:1e:5b:7e:23:
a7:f1:2a:df:5a:b2:87:8a:4a:53:d3:db:58:6c:27:c9:cf:8e:
f6:1a:e4:13:68:f8:a5:e1:e4:05:3c:5e:32:1a:39:7b:fd:f4:
4a:b3:3f:fb:5f:6d:8f:1e:e4:19:9f:04:11:4a:4b:71:45:59:
c1:39:8f:91:81:da:2d:72:2e:14:e0:cb:39:8a:1b:78:dd:92:
f2:f1:56:9b:6a:17:68:6e:92:7e:30:3d:5f:c9:63:b2:d4:82:
77:e6:aa:70:14:2c:8e:9c:68:72:ee:a7:a2:ca:3e:cc:21:01:
0c:54:79:31:a6:e2:1c:2e:f7:91:d8:88:13:98:73:a5:96:26:
3c:2d:f0:23:80:32:11:f7:c7:5a:4b:4a:31:83:80:bd:1d:e7:
cb:22:2d:da:ef:65:e2:6e:28:c8:ed:83:77:6a:48:43:5b:6c:
fc:48:24:77:1f:63:ef:e9:8b:d4:85:47:7e:87:ec:ba:08:d4:
09:ad:7e:69:e3:45:9d:61:38:d1:cf:4c:b5:ed:7a:69:33:77:
91:8b:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:04 2026 by rpki-client