Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: uW8Xvd2dGP7rIEK2QsxisWu8fkBaeGlGBWHnyv5mwo4=
Subject key identifier: FB:13:DD:0F:07:14:19:3C:A1:C2:ED:86:C8:A8:D9:3B:06:25:92:AF
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01A0D3B84EB2A0C8947035AFB5900E067007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 0740
Signing time: Thu 24 Sep 2026 14:01:06 +0000
Manifest this update: Thu 24 Sep 2026 14:01:06 +0000
Manifest next update: Fri 25 Sep 2026 14:01:06 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: ahJY6xIj3X8auWuvnZMRb9I2v4aa4hysJyW2fLNIQ+Q=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:4e:b2:a0:c8:94:70:35:af:b5:90:0e:06:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Sep 24 14:01:06 2026 GMT
Not After : Sep 25 14:01:06 2026 GMT
Subject: CN=fb13dd0f0714193ca1c2ed86c8a8d93b062592af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:9d:75:a2:40:3e:5a:c7:d3:fa:ef:14:26:
e7:bd:ce:ef:c5:e7:e1:d3:3a:b7:a3:92:66:ec:12:
93:26:5a:80:71:09:35:24:c0:bc:84:41:88:66:37:
2f:ba:66:7a:4e:d5:66:68:0c:15:bb:30:ec:d0:7e:
3f:22:a6:08:f6:94:fb:1f:d1:39:23:e2:f2:9c:02:
a1:99:1c:84:d3:3b:54:98:30:18:29:1e:b1:24:94:
80:b8:bb:02:b0:d6:28:74:86:aa:61:f0:23:45:5f:
c8:48:21:44:59:d8:cb:63:dc:13:3c:92:18:8b:72:
0c:1b:5d:09:b4:f1:6c:a6:7c:60:c4:b4:8c:59:d8:
85:ab:e9:70:83:47:7a:d8:c6:da:e9:b8:07:d2:e3:
1d:10:18:73:4f:aa:ff:37:ed:b4:85:dd:dd:7c:a4:
2b:3a:21:6c:e6:f0:58:e5:a6:af:ee:ba:65:0c:06:
7b:35:0f:1e:79:c3:b4:f2:6e:92:ea:e5:61:58:4d:
a4:a1:f1:d8:69:0a:81:18:ca:82:a5:b4:30:04:71:
0f:5b:d0:76:fb:67:f4:31:46:81:91:bd:a9:a9:1e:
8d:45:4c:c7:db:83:91:c6:99:35:aa:6d:ba:9d:32:
54:e1:3d:b1:3f:2c:4d:8d:c8:8c:5a:53:19:71:2e:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:DD:0F:07:14:19:3C:A1:C2:ED:86:C8:A8:D9:3B:06:25:92:AF
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ff:95:2d:b4:5e:b8:10:07:7c:f3:08:79:9a:a9:e2:9e:45:
0c:33:99:0c:22:ca:98:5f:8d:17:65:b1:49:d3:53:c1:71:8f:
6f:b3:70:ea:89:d6:31:0a:10:6b:14:dc:d0:32:5c:03:e3:a9:
31:8c:db:0e:5a:41:9a:91:fc:a9:71:47:a1:41:ff:47:01:c7:
bc:f1:9d:2b:77:2e:7e:b2:6a:48:1d:e5:44:6f:71:50:2d:e4:
f0:2b:9c:02:38:91:8a:6d:73:df:fb:02:bd:f6:e4:11:ef:ed:
76:2a:5c:94:8a:a2:cf:71:f8:bc:e7:3d:83:80:70:48:6f:e7:
fb:1b:3f:d8:5e:63:70:0e:30:ed:9b:ca:56:97:9f:a2:df:4d:
e6:08:36:7f:5b:1b:89:77:1d:87:1c:ed:7a:be:ac:55:b5:ec:
5c:16:9d:5e:55:bd:25:a7:93:55:c2:05:b7:e3:36:b3:8b:ee:
4b:ee:50:06:1e:bd:82:d8:eb:d9:d4:0f:16:ef:e6:18:70:65:
78:49:ca:94:b0:7f:00:56:7c:34:36:ad:de:bb:4f:94:38:02:
f9:56:f4:a8:b8:34:04:af:1a:91:e4:bb:f8:7e:99:a9:1f:af:
38:74:3a:8a:e0:64:24:64:bb:37:60:6e:ee:f2:c5:45:2b:33:
a4:eb:87:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuE6yoMiUcDWvtZAOBnAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh
NzlkYzIwHhcNMjYwOTI0MTQwMTA2WhcNMjYwOTI1MTQwMTA2WjAzMTEwLwYDVQQD
EyhmYjEzZGQwZjA3MTQxOTNjYTFjMmVkODZjOGE4ZDkzYjA2MjU5MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHaddaJAPlrH0/rvFCbnvc7vxefh
0zq3o5Jm7BKTJlqAcQk1JMC8hEGIZjcvumZ6TtVmaAwVuzDs0H4/IqYI9pT7H9E5
I+LynAKhmRyE0ztUmDAYKR6xJJSAuLsCsNYodIaqYfAjRV/ISCFEWdjLY9wTPJIY
i3IMG10JtPFspnxgxLSMWdiFq+lwg0d62Mba6bgH0uMdEBhzT6r/N+20hd3dfKQr
OiFs5vBY5aav7rplDAZ7NQ8eecO08m6S6uVhWE2kofHYaQqBGMqCpbQwBHEPW9B2
+2f0MUaBkb2pqR6NRUzH24ORxpk1qm26nTJU4T2xPyxNjciMWlMZcS4mUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsT3Q8HFBk8ocLthsio2TsGJZKvMB8GA1UdIwQY
MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt
YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5
LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP+VLbRe
uBAHfPMIeZqp4p5FDDOZDCLKmF+NF2WxSdNTwXGPb7Nw6onWMQoQaxTc0DJcA+Op
MYzbDlpBmpH8qXFHoUH/RwHHvPGdK3cufrJqSB3lRG9xUC3k8CucAjiRim1z3/sC
vfbkEe/tdipclIqiz3H4vOc9g4BwSG/n+xs/2F5jcA4w7ZvKVpefot9N5gg2f1sb
iXcdhxzter6sVbXsXBadXlW9JaeTVcIFt+M2s4vuS+5QBh69gtjr2dQPFu/mGHBl
eEnKlLB/AFZ8NDat3rtPlDgC+Vb0qLg0BK8akeS7+H6ZqR+vOHQ6iuBkJGS7N2Bu
7vLFRSszpOuHXw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:11 2026 by rpki-client