Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: QBkXfsqpCt4GGH8ddtU1e80/wDkg1lmT3gNrraSmR6E=
Subject key identifier: 08:B5:1B:A2:95:02:80:C5:AC:6E:07:CD:0C:24:A8:13:C9:4A:76:A4
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01A0DD2A2A8D67E3BBD31F56E16B6F93F7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 10:02:03 +0000
Manifest this update: Sat 26 Sep 2026 10:02:03 +0000
Manifest next update: Sun 27 Sep 2026 10:02:03 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 3ovRwYXSEFW6d2B+BgDH7XaRalQ+hM6h0xH9AJXN3HQ=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:2a:8d:67:e3:bb:d3:1f:56:e1:6b:6f:93:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Sep 26 10:02:03 2026 GMT
Not After : Sep 27 10:02:03 2026 GMT
Subject: CN=08b51ba2950280c5ac6e07cd0c24a813c94a76a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:46:c9:fe:4d:44:86:32:c3:63:80:ee:23:
68:b6:22:de:d4:c1:3a:ee:45:5d:7b:7f:83:75:7b:
8b:9a:11:80:2b:4f:84:7c:3f:a9:35:bd:9a:cd:ff:
2e:51:81:ed:31:be:3e:2a:91:93:a2:cf:7e:8a:c6:
f3:40:a9:3a:87:f3:57:3f:47:d1:d9:dd:54:da:11:
49:b4:e5:6c:39:e0:68:4f:28:f8:65:a2:37:c1:2e:
22:a0:fb:1a:c2:21:4e:40:39:cc:7d:80:57:a5:9c:
6c:a6:7f:f3:c9:cb:dc:a6:4a:32:c4:3b:98:0d:a2:
9a:3c:69:7c:fc:ce:60:d4:4e:2e:89:23:9a:d1:dd:
3b:3b:7b:bc:ad:6f:0c:7b:9a:6b:2a:44:58:fd:ca:
33:39:a8:3e:18:b0:56:ca:e7:47:c2:a5:d0:d8:2e:
8b:c0:b2:fb:bb:fc:d5:e9:9a:41:d0:89:54:07:d2:
41:9c:05:ed:2c:ca:51:cd:57:ce:26:67:c5:94:06:
87:69:d3:6d:d1:ef:c7:58:9f:2c:60:0e:df:41:3a:
8c:3e:07:ba:67:5b:99:0d:0a:94:45:d8:98:aa:4b:
c3:f7:b3:ec:1c:31:1f:34:b6:ec:aa:56:8e:7a:08:
60:c1:bf:1b:12:6c:75:2f:ee:d3:ec:79:a4:05:ab:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:1B:A2:95:02:80:C5:AC:6E:07:CD:0C:24:A8:13:C9:4A:76:A4
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:25:0c:82:7c:2c:01:1d:73:ff:c7:03:58:dd:30:35:17:
3c:ba:c0:9f:0c:3d:bb:cb:84:74:0b:28:eb:f7:ed:bb:bf:04:
db:00:63:13:b4:fb:93:1c:f5:5f:ce:38:15:47:54:9d:6e:7a:
82:0e:f3:2d:f7:c8:37:c8:21:af:bb:c8:2e:51:9c:67:55:56:
62:ef:d6:32:f6:5a:c8:6d:6c:d4:64:88:2f:17:56:fc:8e:04:
d3:26:6c:9c:dc:ac:1b:e5:b6:36:32:7a:29:b3:4b:c2:0b:ef:
c9:52:59:d5:40:ac:a2:23:f3:6b:2a:c8:cf:a6:6a:16:2f:e2:
66:be:7f:97:cc:e6:b9:aa:d9:3a:3a:c1:e9:64:b1:b2:2e:0d:
a7:c4:10:2e:61:08:ba:1b:32:60:cb:e9:43:ca:3d:b7:9b:ac:
01:64:9b:f4:b5:32:6f:b3:30:6b:ec:28:53:7e:16:3e:56:23:
cd:03:62:4b:ac:d6:e5:72:7d:c1:dc:eb:e1:19:1d:62:ea:2d:
21:70:9a:3d:c8:61:41:9a:e3:29:fe:9d:67:c8:76:7e:ff:02:
b9:4e:5c:ff:cd:53:06:a8:c6:5b:ef:4c:1d:3e:04:e3:68:26:
ec:77:84:89:89:36:30:76:c7:eb:87:8a:cc:ce:a2:55:8e:b6:
81:7c:9d:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKiqNZ+O70x9W4Wtvk/fvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl
MGQ4OTUwHhcNMjYwOTI2MTAwMjAzWhcNMjYwOTI3MTAwMjAzWjAzMTEwLwYDVQQD
EygwOGI1MWJhMjk1MDI4MGM1YWM2ZTA3Y2QwYzI0YTgxM2M5NGE3NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5pGyf5NRIYyw2OA7iNotiLe1ME6
7kVde3+DdXuLmhGAK0+EfD+pNb2azf8uUYHtMb4+KpGTos9+isbzQKk6h/NXP0fR
2d1U2hFJtOVsOeBoTyj4ZaI3wS4ioPsawiFOQDnMfYBXpZxspn/zycvcpkoyxDuY
DaKaPGl8/M5g1E4uiSOa0d07O3u8rW8Me5prKkRY/cozOag+GLBWyudHwqXQ2C6L
wLL7u/zV6ZpB0IlUB9JBnAXtLMpRzVfOJmfFlAaHadNt0e/HWJ8sYA7fQTqMPge6
Z1uZDQqURdiYqkvD97PsHDEfNLbsqlaOeghgwb8bEmx1L+7T7HmkBauBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi1G6KVAoDFrG4HzQwkqBPJSnakMB8GA1UdIwQY
MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt
NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0
LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAAlDIJ8
LAEdc//HA1jdMDUXPLrAnww9u8uEdAso6/ftu78E2wBjE7T7kxz1X844FUdUnW56
gg7zLffIN8ghr7vILlGcZ1VWYu/WMvZayG1s1GSILxdW/I4E0yZsnNysG+W2NjJ6
KbNLwgvvyVJZ1UCsoiPzayrIz6ZqFi/iZr5/l8zmuarZOjrB6WSxsi4Np8QQLmEI
uhsyYMvpQ8o9t5usAWSb9LUyb7Mwa+woU34WPlYjzQNiS6zW5XJ9wdzr4RkdYuot
IXCaPchhQZrjKf6dZ8h2fv8CuU5c/81TBqjGW+9MHT4E42gm7HeEiYk2MHbH64eK
zM6iVY62gXyd/g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:58:46 2026 by rpki-client