Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: 77tHwMAsF6QqMymJeKW3YS4j43XtTjfNMedC6TM0Wrk=
Subject key identifier: AF:8C:5A:F6:6B:0A:32:D6:A9:53:D0:A6:F1:A8:75:76:0A:84:79:B2
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019D3909E3F00E09253B0DFA3D6D29A9ED88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: 9I0W45qDbZfUg4Jwvl7N4dyjyl/ZqzXYWLAVF4tLZ+Q=)
2: WHVnB7K1cz0iVc9Ds9i0qMLmFrc.roa (hash: QD8EoQ/Mss8g3Q2xXeraMyDtX/0gt24YRG6MYFXgiKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e3:f0:0e:09:25:3b:0d:fa:3d:6d:29:a9:ed:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=af8c5af66b0a32d6a953d0a6f1a875760a8479b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:72:f3:01:51:7a:52:d2:19:1e:ea:89:57:
6e:4e:13:8e:48:84:4a:61:62:e4:b0:35:03:b8:5f:
4c:51:b9:b2:64:93:ac:b8:04:bd:c6:ff:b3:73:1d:
dd:20:45:e0:7e:c8:38:15:0c:95:02:ff:b0:13:bd:
8b:8d:35:31:77:65:1e:3a:0c:cd:c1:55:89:8e:41:
cd:6c:3e:bb:da:82:19:30:cf:9b:46:b3:21:36:f1:
46:92:4f:92:34:27:3e:06:ec:65:59:4a:9a:8c:e0:
41:5b:db:08:42:a2:92:13:27:3e:68:2b:a0:0d:9e:
c2:5d:c5:84:57:6d:20:ae:49:6b:3b:e2:d8:98:78:
d1:59:0a:ec:57:36:30:d9:4a:a0:25:ad:fc:b3:04:
ab:44:8b:6b:1a:ca:f9:1a:c5:ea:28:84:94:86:88:
37:59:2d:b1:6c:45:24:fa:b3:16:f7:00:da:01:c2:
eb:59:8c:f5:ec:e2:3e:f2:5c:fd:ab:10:db:54:f1:
5f:60:ab:ab:ad:a8:ea:72:4a:0a:51:ad:5b:56:f6:
f9:d0:7f:69:2b:de:14:f5:de:ac:8e:10:12:c5:86:
b4:48:03:a1:41:47:57:7e:3f:d7:f2:0a:b7:c6:29:
26:db:c5:a2:6a:21:44:95:bc:da:0f:ee:c2:a7:13:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:5A:F6:6B:0A:32:D6:A9:53:D0:A6:F1:A8:75:76:0A:84:79:B2
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:97:ef:17:f4:fa:ce:a9:f2:7b:8d:94:56:e7:41:b7:68:
12:c8:91:e7:32:94:58:18:87:51:97:5c:a4:42:5f:35:17:ed:
8c:00:ef:fc:ea:c7:ce:7d:6a:2a:04:35:db:98:d8:f8:9f:15:
72:f8:b6:57:68:50:3d:c1:e9:80:f6:29:03:a8:50:fc:c1:b6:
03:e9:df:43:0c:c7:e8:9a:88:ae:fd:ae:37:94:f0:c6:15:bd:
eb:3f:53:8d:a7:f6:dc:35:04:b3:30:0d:ea:ff:54:18:46:5a:
fb:6b:f9:40:87:9d:da:33:74:8c:d7:b6:c3:d2:36:a5:f3:4e:
d5:ce:1b:2b:48:14:b0:55:b8:75:4b:d8:0f:95:48:9b:ab:19:
52:7a:f7:fc:c2:32:ea:19:96:9d:db:2f:84:67:55:63:de:c9:
4c:5a:27:5d:68:4d:6e:71:74:b1:97:8d:be:8e:95:c8:75:77:
8f:03:3f:e9:9e:f1:fd:73:bb:b5:70:a2:05:e5:68:fa:6c:c0:
a6:5b:c9:d5:88:ff:b2:d8:f6:76:7d:6b:8c:66:36:98:a8:b5:
06:c6:1c:1f:66:9a:dd:22:42:1f:31:e5:72:6d:de:b9:eb:cc:
59:21:be:c5:38:d7:40:d1:f8:08:a6:02:24:b5:9b:0c:6a:7a:
e9:96:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client