Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: LKfrFRK/HtlSQ71iRANCtuaj9DYX3yiD3+FnF/Su4Hw=
Subject key identifier: 62:5F:E7:38:B8:B8:C0:14:83:C2:7A:4B:F5:28:9B:89:7A:EA:EB:9A
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019F18303BFFB9143D29F1011A794CE0B022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 0962
Signing time: Tue 30 Jun 2026 11:00:41 +0000
Manifest this update: Tue 30 Jun 2026 11:00:41 +0000
Manifest next update: Wed 01 Jul 2026 11:00:41 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: Pjisl/XC5GvszwFs7Ee7vkidGncJZjeAfo7GIdosuZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:3b:ff:b9:14:3d:29:f1:01:1a:79:4c:e0:b0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Jun 30 11:00:41 2026 GMT
Not After : Jul 1 11:00:41 2026 GMT
Subject: CN=625fe738b8b8c01483c27a4bf5289b897aeaeb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5c:a1:e8:f8:b3:ff:0e:5b:67:aa:4d:d1:ad:
3e:c9:1a:2c:c8:3a:ee:cf:7a:c1:00:09:13:00:e0:
1e:4a:50:de:0c:9d:eb:76:75:16:8d:5d:e7:71:cb:
b1:9d:17:ed:00:32:03:9a:39:bb:b4:45:b5:c6:3a:
02:ae:1e:7f:8d:2d:16:b4:62:a9:38:da:f8:72:45:
0e:01:ba:14:b7:1e:c0:d0:eb:fe:a2:22:e9:46:8e:
7a:9f:06:fe:ce:96:82:95:d6:e3:89:54:9a:28:b2:
24:89:a9:3a:8f:50:45:30:f4:76:f6:2c:09:9b:5d:
62:e0:74:c1:0f:50:8b:9c:6c:9d:f7:0c:cd:9c:28:
23:78:d8:86:dc:1a:3c:6c:d7:da:70:e2:9a:91:16:
f1:da:2c:8f:5e:5c:fb:81:36:35:2c:09:7a:1b:96:
c5:8c:82:42:f5:75:ae:7f:9a:92:8b:78:d9:fb:0f:
52:36:9b:7b:60:a1:c5:39:c1:d4:d4:90:ad:38:a7:
8d:d1:a6:e1:a5:4c:8b:28:83:1d:c8:ca:1a:b8:5d:
9b:2c:29:ea:6d:e3:f6:36:f3:7e:af:21:41:3b:e2:
66:ca:1d:be:94:96:26:d4:82:71:c9:50:a6:cd:95:
b4:95:a0:81:4e:65:9a:f4:01:ae:5f:7f:f5:68:98:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:E7:38:B8:B8:C0:14:83:C2:7A:4B:F5:28:9B:89:7A:EA:EB:9A
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ef:18:8c:75:de:15:07:70:3e:e9:27:22:64:44:c5:6e:0c:
34:3f:03:7b:a8:39:4a:76:3e:c8:7f:68:c0:60:54:52:c4:d7:
e1:ed:a1:81:35:37:03:ae:4a:8a:5d:39:21:44:37:35:cc:cf:
98:55:18:48:ad:c1:b7:53:13:8e:2c:3a:38:93:9d:eb:f2:5c:
85:a4:7e:a4:3a:ac:0c:bd:70:6b:4a:bd:92:d2:04:2e:ae:9c:
3f:53:a7:98:70:93:d9:a4:c4:be:56:ac:c3:70:c3:03:41:40:
22:b8:c7:d1:50:cc:e1:22:7a:ab:9b:6c:c3:2f:06:11:75:87:
00:dd:b0:53:c0:86:d3:b5:13:b9:c7:6c:2f:8e:86:09:dd:cb:
52:ed:7b:2c:cb:af:c7:3e:da:0a:2f:2a:da:3b:b9:76:0e:53:
85:44:5c:cf:f5:5b:8c:26:e6:91:5c:f6:6f:41:df:60:69:b4:
2c:33:34:b2:a7:60:cb:46:36:f4:75:99:d5:f7:2e:0a:69:7f:
af:58:ee:4a:18:b4:37:81:54:59:22:c5:df:55:19:cf:13:e4:
9f:7c:8a:3f:02:b8:d1:2b:d9:52:6c:e5:94:6a:b8:9a:3e:2e:
44:32:ce:7d:4b:fd:e6:f7:56:41:7d:b5:03:25:61:76:41:a1:
8a:76:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:55 2026 by rpki-client