Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: LooMCQBHdfdMcAOriydOcudjs6h9fTQVYnMosrKUkaw=
Subject key identifier: 35:31:02:3B:FF:E6:58:20:E3:57:0E:C9:EF:D2:0F:4A:85:10:BB:AF
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019E1E35B8A2609D8709257ECB650B22A8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 22:01:37 +0000
Manifest this update: Tue 12 May 2026 22:01:37 +0000
Manifest next update: Wed 13 May 2026 22:01:37 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: MBipisrbf9ibmm0BD1XjZN3hs74q6wcGGvCtvBGekds=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b8:a2:60:9d:87:09:25:7e:cb:65:0b:22:a8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: May 12 22:01:37 2026 GMT
Not After : May 13 22:01:37 2026 GMT
Subject: CN=3531023bffe65820e3570ec9efd20f4a8510bbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:b5:32:71:cb:81:3e:75:1f:8d:1c:40:8b:
64:0e:9f:f4:9f:d4:75:96:11:2c:ce:f1:2a:5a:fb:
8f:e7:32:db:ae:c2:d3:07:24:d2:af:cb:cf:de:50:
78:5c:8a:5a:d1:f1:fc:bd:d8:be:60:dd:0f:30:58:
c1:75:df:75:1d:e2:f8:f4:3a:b7:20:b5:86:2e:1b:
ff:23:52:3d:91:b7:5b:94:26:e0:1b:f0:cb:67:1c:
8f:08:57:56:46:d0:db:b2:fb:d3:d4:06:4e:71:ab:
19:88:19:28:33:d6:14:44:12:e6:04:40:75:bb:f8:
d8:18:41:e5:c9:77:e1:e7:23:50:61:9d:29:c9:f6:
71:c8:12:57:1a:05:b9:9c:3f:a2:54:07:e1:ae:ce:
c2:15:16:62:ea:fb:4a:e3:f8:f0:92:79:79:f8:74:
00:2d:73:83:28:e9:73:3b:4f:48:65:4e:e4:57:26:
9f:05:62:d2:6d:69:e2:a1:1d:a4:b6:10:59:01:23:
f2:ac:cb:ee:95:7b:87:97:17:e6:6d:e4:41:9c:82:
d6:cb:fa:3e:37:35:09:cc:25:98:72:ca:b1:c2:23:
47:4f:80:60:b3:e2:9d:d8:4b:92:e7:12:a4:e1:4c:
6b:aa:4e:eb:48:72:6b:35:aa:59:81:fe:31:ab:8d:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:31:02:3B:FF:E6:58:20:E3:57:0E:C9:EF:D2:0F:4A:85:10:BB:AF
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:66:dd:43:79:5e:1a:c1:c2:15:82:cd:6f:b7:be:e0:f3:33:
7d:33:90:81:62:e6:94:15:bc:de:f9:0f:7c:ca:82:31:15:8f:
74:3b:50:08:d4:4d:cc:ec:c9:a5:7f:13:79:59:7f:61:13:ab:
43:bc:7b:65:a9:6b:b1:20:13:73:59:f7:b7:b8:4c:32:92:c4:
18:76:ac:9f:2f:d1:e4:ee:c5:77:bf:73:25:d8:93:3f:48:d5:
7a:5d:b8:f5:78:1f:89:3b:08:6d:58:4f:f2:c1:3b:2e:68:43:
48:9a:2b:26:36:18:1a:3c:68:4a:01:92:2e:82:0b:51:ea:74:
5c:94:93:7d:f4:57:09:b7:ac:7e:57:f9:af:b6:f2:bb:31:a0:
93:28:71:81:92:f9:df:7f:2d:2a:49:60:10:f0:51:24:2d:4d:
03:02:20:90:63:7a:cb:77:3a:4e:8b:5e:0c:9a:6e:d8:ab:84:
f4:cd:05:99:5b:96:2c:7c:14:e1:fb:1b:b3:e6:09:95:72:34:
cc:6c:06:b5:b2:36:22:fd:0c:f9:61:3f:d8:14:f3:07:07:e5:
e4:eb:c2:51:87:52:4f:bc:db:21:15:12:35:6a:28:7f:c8:45:
71:38:55:4e:55:55:a9:42:f2:2a:df:01:a2:6f:80:af:71:f2:
a6:bd:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:28 2026 by rpki-client