Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: vovJXcACmLeuCI6/PMbT5aq7XwVUAPuC6c2vYp3PUnM=
Subject key identifier: 7B:5A:7C:75:FA:85:BD:FA:0E:F0:F7:26:76:26:20:6C:E9:E1:56:47
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01A1DC4B5F99DFD60194FD35F05BC74DA28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 07C9
Signing time: Sat 14 Nov 2026 23:01:29 +0000
Manifest this update: Sat 14 Nov 2026 23:01:29 +0000
Manifest next update: Sun 15 Nov 2026 23:01:29 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: je01BzUNtOLwDnrOOAma5ZxuBd1sJRFhz6vBsEgCBZo=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:5f:99:df:d6:01:94:fd:35:f0:5b:c7:4d:a2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Nov 14 23:01:29 2026 GMT
Not After : Nov 15 23:01:29 2026 GMT
Subject: CN=7b5a7c75fa85bdfa0ef0f7267626206ce9e15647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:e1:e5:0d:fb:89:0b:d5:b8:7c:bb:1d:fe:
e8:9e:f6:0f:ca:9f:8f:f4:e6:92:12:8a:a2:7d:10:
32:68:ea:a0:6b:c3:34:e2:04:fd:db:83:b6:0c:56:
f7:47:ef:7b:ab:44:d5:ea:17:db:6d:25:7a:89:75:
41:0c:76:2e:e1:90:c5:27:6b:70:5f:2f:8f:c3:3c:
67:62:9a:d1:26:e8:48:04:ad:b7:29:d2:38:f0:7a:
9c:b0:91:76:d2:d0:10:6d:10:32:09:b6:ae:94:00:
5f:a7:e0:d3:fb:6f:8d:90:95:20:49:29:58:5b:d3:
c9:e0:12:27:68:dd:e5:ac:f8:a3:d6:f8:92:12:8e:
ea:36:8c:6e:3f:24:84:4f:6b:76:f2:46:06:59:44:
9a:3f:7c:5b:9d:97:76:6d:17:db:83:64:35:83:25:
33:36:88:7a:01:c7:20:6a:f3:10:20:e3:67:f8:a6:
99:6e:3d:7a:21:10:d7:41:d5:6c:e6:3e:4b:26:08:
02:0b:e6:cf:75:79:09:ca:df:07:ff:3e:00:e6:5e:
b5:7d:b6:f9:41:04:73:25:d4:c2:5d:6e:8f:f6:18:
3b:8c:df:3e:fb:a0:9d:f5:f8:d0:31:65:4d:84:46:
15:ac:6f:77:1a:8d:2d:f5:e9:84:c1:5a:59:11:29:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:7C:75:FA:85:BD:FA:0E:F0:F7:26:76:26:20:6C:E9:E1:56:47
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:64:66:c1:a6:78:00:ee:8b:60:5d:0f:03:77:7d:d1:78:da:
ff:b3:2e:63:33:14:24:24:97:64:6b:32:bd:d9:ec:dc:78:a8:
4b:98:0f:0b:14:b2:1b:fa:c4:6f:93:11:32:53:03:3c:76:f4:
74:fb:83:41:e9:a4:5e:6c:71:0e:ef:84:32:90:30:d3:01:56:
aa:e9:6c:84:62:42:25:81:7e:ff:75:4d:26:bd:f1:d4:a1:18:
d9:c5:b7:11:35:47:dd:47:94:52:ef:7d:b8:cd:dc:a5:42:68:
1d:93:7f:d9:de:b0:24:f6:a2:56:a6:60:7a:f3:b5:be:84:16:
6d:f3:c7:3b:fe:22:cb:89:5a:38:a0:75:70:db:e5:63:6f:f8:
54:b4:a1:61:11:17:5b:ca:d1:2e:7b:cd:fe:f8:86:bb:d3:b2:
b5:23:d4:57:f6:a4:13:f6:be:7e:bb:c5:35:5d:86:3f:6e:38:
3b:28:c0:b4:87:24:1c:b1:87:cd:48:0e:a9:dd:33:cb:4a:21:
72:2f:bc:c9:b2:7a:98:1e:f3:f2:ba:43:a3:97:a3:82:6a:2c:
6c:4f:c0:af:99:fd:b9:86:d0:af:54:86:48:06:d4:66:cd:fe:
d6:5c:ad:18:42:1d:9a:61:8e:a0:b4:e7:1e:7b:b6:ed:dc:e8:
e0:57:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:34:40 2026 by rpki-client