
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
File: Ctubg9jWo5JpQjgTidQbJIuNzeM.mft (raw, json)
Hash identifier: YUuCOvyACswmO7u6gsqhF5ehqk20t+4M7dtGOTFDFBs=
Subject key identifier: 99:03:83:1B:B7:22:4E:08:08:23:3D:67:71:A3:33:A7:B5:94:9D:97
Authority key identifier: 0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
Certificate issuer: /CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Certificate serial: 01A04160F6B58B3978E603D8C508822CAAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
Manifest number: 0185
Signing time: Thu 27 Aug 2026 04:01:08 +0000
Manifest this update: Thu 27 Aug 2026 04:01:08 +0000
Manifest next update: Fri 28 Aug 2026 04:01:08 +0000
Files and hashes: 1: Ctubg9jWo5JpQjgTidQbJIuNzeM.crl (hash: Z55hH6DihvmSYfuDkWHJyW/juLvvISuapVSYkrBT+DM=)
2: H0vr_3N1t6xC5dyPe7gYxDEiyCU.roa (hash: Xpb3Wvxuwn+LgJBZGrRUURe+bHS15YUPVUIKv2HVwN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:f6:b5:8b:39:78:e6:03:d8:c5:08:82:2c:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adb9b83d8d6a3926942381389d41b248b8dcde3
Validity
Not Before: Aug 27 04:01:08 2026 GMT
Not After : Aug 28 04:01:08 2026 GMT
Subject: CN=9903831bb7224e0808233d6771a333a7b5949d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:f7:09:46:1e:03:cf:8a:4b:a8:9f:4d:07:
9c:e8:d7:ef:3c:c9:12:15:ef:a5:6a:76:6c:5a:e8:
4f:92:7c:e5:85:4f:cd:00:4a:0e:7d:04:6f:3d:3b:
ce:92:c6:16:73:40:72:bb:d4:7e:fb:9e:b7:c4:09:
32:d8:e9:c9:31:0d:56:a5:43:f2:cf:52:0b:13:93:
ab:e6:b9:89:40:b6:b0:72:e5:a3:b5:17:3d:83:c7:
5c:84:33:7e:da:05:c4:8f:1f:5d:4e:01:97:ae:ba:
d8:e5:0a:1b:2d:e6:19:ac:e2:32:16:35:4b:3a:b7:
40:34:3a:0b:ad:7a:30:a5:30:6c:35:f0:a5:03:7e:
0a:f2:57:e6:fb:1b:31:dd:48:ed:a9:8f:e9:10:d1:
0a:9b:25:fe:a7:ef:07:59:d8:a9:ad:46:23:16:93:
40:73:a8:06:d6:c1:75:89:bb:a8:6f:d6:e6:ed:64:
5a:cf:3f:21:4a:60:af:49:71:fa:6a:f7:01:4a:25:
9d:5e:f5:bb:9e:6a:85:28:d9:dc:ad:50:ef:68:d2:
81:66:9b:f0:23:d6:d1:26:96:60:64:9e:66:af:a0:
3e:1d:16:a1:85:1f:be:c2:1a:2d:20:67:9c:fd:fc:
a5:ea:79:ad:17:9d:ad:4b:71:0b:4e:28:75:1c:20:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:83:1B:B7:22:4E:08:08:23:3D:67:71:A3:33:A7:B5:94:9D:97
X509v3 Authority Key Identifier:
keyid:0A:DB:9B:83:D8:D6:A3:92:69:42:38:13:89:D4:1B:24:8B:8D:CD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctubg9jWo5JpQjgTidQbJIuNzeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6b552a-6415-4f8b-8242-12daa9b9e4d2/1/Ctubg9jWo5JpQjgTidQbJIuNzeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e1:e6:f0:78:2e:54:b8:6e:cf:ee:7f:87:08:93:c6:67:19:
1f:1f:24:bd:5d:78:89:09:53:7e:f1:c0:90:45:17:8d:4f:c9:
16:85:29:d5:08:9e:72:c2:2c:f6:a1:9a:f8:8c:0b:10:2b:5d:
22:b9:4e:2e:27:8f:6a:c0:60:1d:a8:01:c4:11:6d:6b:b8:0f:
fb:ae:61:52:7c:5d:29:29:09:fe:66:8e:44:a7:08:56:e6:f2:
f0:d7:86:6d:57:d2:70:4d:67:1d:d0:56:a6:35:8b:b9:d8:ac:
d7:89:09:a1:f9:54:bd:f5:aa:ef:41:1f:90:e3:6a:0a:5f:7e:
d2:f6:44:66:b3:19:ac:10:82:71:8d:05:e9:e2:91:97:49:ed:
55:b4:c5:45:04:4d:47:14:47:a1:3a:f7:5d:b5:45:cd:ca:71:
7f:23:cc:d0:d4:13:1c:50:ba:e1:b0:6f:b0:9a:d0:7d:eb:59:
08:52:e7:58:b7:42:cf:20:46:31:21:f6:9f:93:56:56:76:4c:
dc:b4:fd:f2:67:b9:a4:41:ad:6e:f8:c6:ef:81:9a:93:d3:21:
82:0a:9f:69:9c:b8:00:3c:90:8f:ff:68:4d:9a:9c:78:dd:35:
f2:b9:80:e9:a0:e5:4d:51:dc:89:e3:c6:bb:48:f0:25:3c:b7:
d7:06:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:58:21 2026 by rpki-client