Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: wgcGRJB8qu5dW6GwmtpseyeXpnuaJ/K+fOuIi3YMp0s=
Subject key identifier: 40:44:9B:AF:37:66:E3:A4:D2:CC:D8:3E:9C:44:7D:73:02:BD:3A:F9
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019F9EF16244ACE9B318667451D06844C08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0CC6
Signing time: Sun 26 Jul 2026 15:00:47 +0000
Manifest this update: Sun 26 Jul 2026 15:00:47 +0000
Manifest next update: Mon 27 Jul 2026 15:00:47 +0000
Files and hashes: 1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: Q8CbiCtOboSxFDoOr8Jni+f8X0y1BUMw7x70o2edQy0=)
2: rRTCz9gdKZmCD2CPH7ZEPITaxno.roa (hash: IkdpUdMuuhLbUbcbS19kzqtq8+mEc9r+5ZSOWumJXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:62:44:ac:e9:b3:18:66:74:51:d0:68:44:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jul 26 15:00:47 2026 GMT
Not After : Jul 27 15:00:47 2026 GMT
Subject: CN=40449baf3766e3a4d2ccd83e9c447d7302bd3af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:d2:c0:a6:fd:f9:8e:24:8b:0a:88:6d:b0:
68:d5:33:a5:85:27:55:31:0c:7b:f4:a6:f5:bf:5c:
3e:01:1f:84:1b:63:ef:b9:7f:26:23:f2:d5:89:51:
82:88:f4:66:c4:5c:12:4f:85:4b:2b:3f:7a:13:dc:
0e:8e:b9:82:90:a4:d3:77:db:5b:71:58:f2:9f:e1:
63:8b:17:c1:c5:4c:6c:93:6a:f5:60:c2:f4:6f:60:
a6:6e:2c:d2:f2:6b:52:27:98:7f:46:8b:50:c6:c1:
86:0c:85:6e:5a:0f:9c:25:a2:63:79:a2:e6:4c:ad:
0f:92:03:40:64:8a:8a:0c:7c:f6:fb:93:32:8e:70:
0d:89:fd:2a:3d:68:87:2f:40:ad:cd:dd:48:c8:54:
a2:e3:e4:f3:cb:a2:81:7b:71:75:41:94:f4:22:0a:
8a:8b:9c:34:40:16:d1:6a:c6:b3:30:05:fe:91:6d:
78:36:41:94:77:14:75:9b:70:97:c3:8a:23:2f:cb:
cc:2d:5a:8f:2b:9e:99:b6:7c:23:0d:ad:23:7f:1a:
3a:e2:e9:b1:3e:01:5e:d3:3b:e1:83:ee:d1:f1:84:
02:df:50:ac:8c:88:b4:8c:5f:bb:31:ef:c5:58:f2:
a5:5e:f8:43:08:c8:70:47:1c:08:0f:8a:71:07:d3:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:9B:AF:37:66:E3:A4:D2:CC:D8:3E:9C:44:7D:73:02:BD:3A:F9
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9d:76:0f:fa:5b:77:6c:e8:18:c0:2d:2d:2b:0e:b8:db:6f:
69:35:7b:bd:7e:67:0a:af:25:a0:7e:f2:ec:0c:30:33:fc:fc:
d4:26:e8:81:a7:b5:c9:38:cd:69:4c:f8:df:2a:15:b7:fe:48:
a8:88:bc:95:4f:e1:29:15:e6:b5:8c:47:24:6d:4a:d1:01:cc:
cb:b3:b3:bd:98:a7:59:aa:ad:24:34:42:65:af:ec:ba:77:a0:
7d:00:de:d4:09:d0:bc:dc:2a:8a:2f:57:2f:c1:1c:19:57:32:
85:3f:61:93:fb:ee:b3:88:7d:61:77:9f:cc:9a:6f:96:0f:ea:
68:48:aa:b7:40:79:85:07:b0:36:18:b8:ff:c4:49:a3:8e:24:
5f:97:54:f4:58:64:e1:ac:cd:a2:77:2d:14:f6:71:56:7b:7e:
1d:7e:a3:b8:c8:7b:be:40:b8:fd:88:5f:4d:a6:ff:55:f2:7e:
3d:9f:d4:a8:a0:18:de:1b:73:85:55:b8:6f:a6:f1:33:fe:a2:
88:d1:d2:83:61:6c:9b:db:a7:96:ee:0a:f4:96:f6:32:bc:99:
46:59:04:50:60:89:a0:a3:61:0c:29:b9:b2:10:c8:d9:4b:18:
0d:94:8b:bb:ae:00:0a:7a:b9:a1:6e:64:32:1f:b4:56:c3:7c:
47:8e:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:17 2026 by rpki-client