Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 957aIoKRmh13OokkaVJUsTEdALm9BcfZkSbBvqAuCIs=
Subject key identifier: 21:21:29:DE:C0:AC:8A:48:51:EE:EC:B3:E6:66:E7:4F:2A:DE:69:85
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019F17F97660B04CF4823A6C0E3BE58AFBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 1382
Signing time: Tue 30 Jun 2026 10:00:52 +0000
Manifest this update: Tue 30 Jun 2026 10:00:52 +0000
Manifest next update: Wed 01 Jul 2026 10:00:52 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: Er7fNyd/8pPihVBhv1YPvxc3E3cURp56q68SGKZRZts=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:76:60:b0:4c:f4:82:3a:6c:0e:3b:e5:8a:fb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Jun 30 10:00:52 2026 GMT
Not After : Jul 1 10:00:52 2026 GMT
Subject: CN=212129dec0ac8a4851eeecb3e666e74f2ade6985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:2e:e7:7c:41:80:c6:f2:e9:5b:33:33:52:
d9:b5:33:5a:e3:28:1e:e2:ee:1b:83:72:ca:e1:c5:
84:10:a3:5a:0d:ba:b4:3a:3a:cd:77:9e:6f:ea:ec:
4c:5c:95:66:4d:19:06:4f:50:09:e8:94:5a:fc:02:
e9:84:8d:5c:69:39:75:82:7b:c5:76:8b:4e:dd:07:
e5:34:0e:a1:c6:0c:70:05:d4:e1:28:4a:8f:06:e3:
4b:80:a3:73:a1:81:41:ec:09:60:dc:f7:ba:8c:69:
67:e7:d4:6e:db:78:e5:00:e3:1e:6b:7c:d9:55:72:
1f:95:12:4f:47:b2:09:76:69:d9:78:48:7e:0d:60:
fc:d7:7b:28:b7:d0:79:fd:3c:0e:f8:fa:5a:a4:72:
2f:dd:7e:9d:48:ec:b4:3b:65:9e:b6:8d:62:df:de:
52:ac:9e:7d:a4:cd:a9:0f:63:54:56:e9:ca:10:78:
a5:b8:32:46:3c:f5:d6:69:61:eb:0c:ca:46:89:11:
78:9c:8b:ec:d4:bb:83:2b:22:6f:e8:fc:3d:17:48:
b0:f9:bb:a3:3f:74:eb:6f:d1:c3:29:3e:d3:d3:eb:
31:f6:6e:fa:04:ad:4b:14:b4:b5:97:40:56:d0:1c:
7f:98:6a:cb:0a:64:90:ab:de:8b:72:78:89:90:aa:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:21:29:DE:C0:AC:8A:48:51:EE:EC:B3:E6:66:E7:4F:2A:DE:69:85
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3a:8d:64:da:04:65:c9:d4:12:fa:af:f6:cd:99:70:5f:c0:
e8:bf:7e:1e:af:a8:eb:64:aa:74:c4:0d:98:b1:35:5e:d6:fc:
1d:fc:9b:00:8e:c6:98:b9:7d:75:89:cc:95:b0:17:65:43:27:
0a:8b:ec:ff:35:fa:9d:cb:de:bf:e9:08:48:0b:48:33:83:5c:
07:0f:c6:d5:0d:b8:b7:05:00:07:3c:37:85:6c:6e:96:2c:b0:
b9:8f:ef:de:de:0e:30:31:69:91:d7:23:a1:29:84:74:99:39:
6f:dc:7d:cf:45:ab:ca:dc:de:e4:d1:fd:d3:31:f6:7b:f0:f5:
64:cc:4d:08:21:19:32:ad:85:23:d1:0f:c2:02:41:e2:d5:57:
53:0d:24:d2:8a:79:b0:da:a2:55:cf:67:6a:1e:82:e6:ac:33:
53:7c:40:5f:11:2d:14:40:24:c2:d0:c7:56:fd:e8:dd:a2:1e:
4f:60:e2:4a:e7:41:01:3b:3c:9e:c5:16:66:5a:77:da:6f:3e:
a1:3e:93:7b:26:db:67:00:40:8d:f5:41:1a:cb:a0:66:4e:22:
72:e2:71:d0:5b:9a:c3:28:7b:d2:98:42:2a:fd:c7:57:6f:4a:
c7:40:b1:15:1f:44:02:4b:f8:55:fe:bd:a8:12:f1:8a:85:ba:
0c:4e:63:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+XZgsEz0gjpsDjvlivv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzI4MmZlM2YzZDdkNDZiZDFiMWNiNzdiMmZlYzM3ZGVl
MDA2NjMwHhcNMjYwNjMwMTAwMDUyWhcNMjYwNzAxMTAwMDUyWjAzMTEwLwYDVQQD
EygyMTIxMjlkZWMwYWM4YTQ4NTFlZWVjYjNlNjY2ZTc0ZjJhZGU2OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24gu53xBgMby6VszM1LZtTNa4yge
4u4bg3LK4cWEEKNaDbq0OjrNd55v6uxMXJVmTRkGT1AJ6JRa/ALphI1caTl1gnvF
dotO3QflNA6hxgxwBdThKEqPBuNLgKNzoYFB7Alg3Pe6jGln59Ru23jlAOMea3zZ
VXIflRJPR7IJdmnZeEh+DWD813sot9B5/TwO+PpapHIv3X6dSOy0O2Weto1i395S
rJ59pM2pD2NUVunKEHiluDJGPPXWaWHrDMpGiRF4nIvs1LuDKyJv6Pw9F0iw+buj
P3Trb9HDKT7T0+sx9m76BK1LFLS1l0BW0Bx/mGrLCmSQq96LcniJkKoL2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEhKd7ArIpIUe7ss+Zm508q3mmFMB8GA1UdIwQY
MBaAFAkygv4/PX1GvRsct3sv7Dfe4AZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2Mt
MmE3NzZmNzg3YTFjLzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mYTcxOTUtYTBmZS00Zjg0LTgxM2MtMmE3NzZmNzg3YTFj
LzEvQ1RLQ19qODlmVWE5R3h5M2V5X3NOOTdnQm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDqNZNoE
ZcnUEvqv9s2ZcF/A6L9+Hq+o62SqdMQNmLE1Xtb8HfybAI7GmLl9dYnMlbAXZUMn
Covs/zX6ncvev+kISAtIM4NcBw/G1Q24twUABzw3hWxuliywuY/v3t4OMDFpkdcj
oSmEdJk5b9x9z0Wrytze5NH90zH2e/D1ZMxNCCEZMq2FI9EPwgJB4tVXUw0k0op5
sNqiVc9nah6C5qwzU3xAXxEtFEAkwtDHVv3o3aIeT2DiSudBATs8nsUWZlp32m8+
oT6TeybbZwBAjfVBGsugZk4icuJx0Fuawyh70phCKv3HV29Kx0CxFR9EAkv4Vf69
qBLxioW6DE5jCg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:44 2026 by rpki-client