Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: qV9GAETceu1+Bn929Z9Bx967NCaUBEzKRDDq8J1FKZQ=
Subject key identifier: F4:76:84:6B:09:E6:F7:A2:2E:6A:CE:3E:A2:A7:EB:7F:47:79:5F:44
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019D2703E482104C24A8AB1AA66567DD8633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: rflEO4PwwAzg+qEDe48m6oXOZRQnuy+ioz7ssbNap00=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e4:82:10:4c:24:a8:ab:1a:a6:65:67:dd:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=f476846b09e6f7a22e6ace3ea2a7eb7f47795f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:57:b9:f5:da:77:bd:fe:1b:11:8a:0e:22:
88:c5:dd:5a:ef:b7:54:21:4b:b7:d4:b6:a0:1f:57:
02:1b:1e:91:22:72:13:2a:ae:11:bf:f6:bd:02:4d:
79:c6:ad:38:c0:56:e3:73:d9:02:6e:38:55:3b:d8:
78:c4:d8:c7:28:82:32:1f:0c:1a:98:9b:ec:db:0d:
da:68:09:35:9a:5c:52:76:fc:a5:0c:5d:11:76:87:
9b:c5:b0:ee:9d:89:20:61:85:33:8e:6b:07:e8:38:
7b:6f:1e:de:8c:e8:dd:b5:6f:e2:f0:03:2c:cf:b9:
82:26:fe:c4:8e:a5:ca:00:57:fd:e8:ec:90:91:8f:
05:ad:4c:64:a4:74:21:2e:90:a9:79:16:f5:85:71:
2f:20:13:c3:e1:30:0a:26:fb:35:2b:53:5c:cf:a4:
5f:60:37:e2:db:77:83:bf:a3:1b:e0:d6:d0:e5:40:
47:1b:85:b0:be:eb:84:fa:52:7e:db:8e:a5:04:b9:
bf:e3:ba:88:7b:d2:7f:07:a8:37:00:c5:bb:9a:82:
bf:7f:72:99:3d:25:5e:86:9d:75:01:a8:db:41:88:
48:40:23:30:1c:32:4b:18:ef:88:33:fd:62:6e:af:
c0:db:4c:ad:32:5b:1d:ff:f0:7a:8e:6e:2f:81:2c:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:84:6B:09:E6:F7:A2:2E:6A:CE:3E:A2:A7:EB:7F:47:79:5F:44
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1a:e1:8f:c5:2e:64:87:76:51:03:a7:2a:5c:47:4b:f3:5e:
b0:49:48:66:c1:5b:b7:01:f5:1d:00:4e:cd:2e:a8:e1:7e:96:
d1:31:01:f0:61:b1:01:a6:91:3a:31:14:91:e4:5b:03:3d:61:
ad:96:3d:d0:d0:f0:92:ec:03:9b:5f:5b:9f:19:f7:2c:d6:3c:
55:be:dc:d9:1d:01:1c:52:40:f5:85:04:fc:b2:df:06:21:92:
3a:6d:5c:80:b7:35:a3:08:f2:ef:6d:c5:e6:98:b3:ab:53:ab:
96:41:9c:29:50:5b:90:e3:b6:2f:b4:32:b3:2c:fc:da:e3:3c:
74:2f:bf:91:ad:08:8d:35:66:67:2a:ad:1c:d3:d6:ac:36:0e:
4b:ef:b4:7d:03:ce:f8:f8:2e:7a:44:47:28:68:3e:8b:07:d5:
d3:f8:02:4b:40:32:cb:c3:c2:99:4d:b5:d3:7c:66:a1:df:df:
63:46:e3:64:9f:7b:12:8a:7a:d9:53:c1:05:78:71:84:3c:cc:
b6:ca:ea:78:a3:8b:f8:03:84:47:a3:cc:ad:4e:9b:63:e9:41:
c8:b6:eb:8e:c2:5b:20:0c:7f:5d:8a:4d:d5:4f:fb:54:4a:4d:
7c:c7:49:a5:1a:f0:00:3f:34:69:d8:f2:84:ab:16:6f:e2:e3:
2a:83:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:36 2026 by rpki-client