Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json)
Hash identifier: acdNMRDaqLmisc8oQlbLasWAwZpbGoZK/lvZMUCh0Ro=
Subject key identifier: DD:0E:05:2A:39:4A:4C:71:93:06:3F:2C:58:ED:D9:67:1B:99:9D:FF
Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565
Certificate serial: 019FA229AB63E6D40794C8056CDDFBB984E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
Manifest number: 147B
Signing time: Mon 27 Jul 2026 06:01:07 +0000
Manifest this update: Mon 27 Jul 2026 06:01:07 +0000
Manifest next update: Tue 28 Jul 2026 06:01:07 +0000
Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: M/43eMx0sDyhGhjprLLGQYEtOnMCI3/7wKgE4sT6etw=)
2: h4TyPM-lSUzBFc-GVJsAqMyi_Q8.roa (hash: QRRCqIhfzgSfHjTwanuS+mvIUE37zMG7bc9JISZqHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:ab:63:e6:d4:07:94:c8:05:6c:dd:fb:b9:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565
Validity
Not Before: Jul 27 06:01:07 2026 GMT
Not After : Jul 28 06:01:07 2026 GMT
Subject: CN=dd0e052a394a4c7193063f2c58edd9671b999dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:2b:0b:a6:30:e0:8a:d0:20:51:78:7b:04:
4a:06:8f:12:48:bb:43:bd:15:a9:2c:de:87:36:c9:
81:4b:50:cd:60:f8:a1:88:37:c7:42:00:ee:5b:78:
76:02:a8:7f:28:aa:e6:fd:aa:ed:cf:ea:d5:11:70:
cd:6b:55:de:bc:35:44:40:f3:c9:fe:a3:52:f2:a9:
06:b3:60:4d:ab:b8:62:74:34:68:13:2c:00:4b:d2:
f9:00:93:52:ab:49:e4:94:f0:3f:18:81:c0:fb:ce:
57:55:b5:8a:32:ca:6e:39:e4:37:41:e8:e5:0a:87:
ca:86:1c:cc:fe:02:a3:d1:44:7c:e6:a1:28:58:f4:
c6:00:13:7e:ce:d3:e4:47:7f:4b:bd:ed:4a:c2:7c:
e2:79:34:20:26:e8:42:8e:7e:72:88:c8:e6:6e:4f:
9b:5e:7e:bd:93:10:4d:e9:54:93:28:be:7b:fc:98:
d0:a3:4c:03:0e:96:ea:80:cd:17:eb:20:ea:da:e4:
a6:d9:3b:4a:88:e6:f3:0b:58:9b:96:28:73:2f:0b:
a5:8f:f6:14:fe:b4:8d:a6:40:b2:2b:1a:af:65:29:
4a:d3:0a:97:37:45:ff:84:e8:3a:89:f6:39:e5:41:
6b:ff:99:91:76:8e:9a:8f:d0:a4:68:93:15:79:8c:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0E:05:2A:39:4A:4C:71:93:06:3F:2C:58:ED:D9:67:1B:99:9D:FF
X509v3 Authority Key Identifier:
keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:75:d8:9d:a7:43:94:7f:58:39:58:fe:cc:8e:83:6c:16:
29:27:f7:81:e5:9e:d9:62:53:25:9d:4e:27:6d:10:3d:ff:0d:
2c:a2:af:fa:a5:65:3c:71:8d:8a:85:ad:9e:2b:62:7f:24:5c:
12:30:ca:25:85:df:5d:f7:37:68:65:c1:b3:d2:9e:31:04:1e:
ad:f2:45:c0:b9:a4:6f:34:f4:28:00:b2:07:6d:4a:ac:1a:27:
c5:b0:a5:66:95:12:70:7d:66:c7:bf:ee:d6:c6:89:ef:66:ce:
6d:76:24:bc:e1:f4:a0:55:b6:ba:37:e7:bf:46:7a:9c:a7:1a:
42:ea:aa:25:48:ae:c6:19:7f:08:fe:d8:a7:36:9d:6b:2e:f0:
69:5d:7c:69:16:2a:09:29:4b:e7:94:19:3d:b6:21:e0:00:6f:
c8:fa:5c:e1:67:e8:17:ad:8c:57:86:9d:aa:7f:f5:5b:e4:0f:
2b:62:83:42:b8:72:d9:8b:0b:17:6d:0f:ac:1a:f5:5c:5e:19:
5c:d2:ad:79:a2:a9:27:b1:69:17:9d:6a:60:ff:7a:2b:ed:53:
ad:4d:46:4c:04:92:58:35:3d:0e:81:33:39:71:b2:8b:c2:c7:
1a:e2:14:60:3f:40:af:bd:a1:95:91:1d:78:20:f1:da:b8:ce:
db:a8:85:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKatj5tQHlMgFbN37uYTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm
N2U1NjUwHhcNMjYwNzI3MDYwMTA3WhcNMjYwNzI4MDYwMTA3WjAzMTEwLwYDVQQD
EyhkZDBlMDUyYTM5NGE0YzcxOTMwNjNmMmM1OGVkZDk2NzFiOTk5ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2MrC6Yw4IrQIFF4ewRKBo8SSLtD
vRWpLN6HNsmBS1DNYPihiDfHQgDuW3h2Aqh/KKrm/artz+rVEXDNa1XevDVEQPPJ
/qNS8qkGs2BNq7hidDRoEywAS9L5AJNSq0nklPA/GIHA+85XVbWKMspuOeQ3Qejl
CofKhhzM/gKj0UR85qEoWPTGABN+ztPkR39Lve1KwnzieTQgJuhCjn5yiMjmbk+b
Xn69kxBN6VSTKL57/JjQo0wDDpbqgM0X6yDq2uSm2TtKiObzC1iblihzLwulj/YU
/rSNpkCyKxqvZSlK0wqXN0X/hOg6ifY55UFr/5mRdo6aj9CkaJMVeYxxkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0OBSo5SkxxkwY/LFjt2WcbmZ3/MB8GA1UdIwQY
MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt
OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi
LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaN12J2n
Q5R/WDlY/syOg2wWKSf3geWe2WJTJZ1OJ20QPf8NLKKv+qVlPHGNioWtnitifyRc
EjDKJYXfXfc3aGXBs9KeMQQerfJFwLmkbzT0KACyB21KrBonxbClZpUScH1mx7/u
1saJ72bObXYkvOH0oFW2ujfnv0Z6nKcaQuqqJUiuxhl/CP7Ypzaday7waV18aRYq
CSlL55QZPbYh4ABvyPpc4WfoF62MV4adqn/1W+QPK2KDQrhy2YsLF20PrBr1XF4Z
XNKteaKpJ7FpF51qYP96K+1TrU1GTASSWDU9DoEzOXGyi8LHGuIUYD9Ar72hlZEd
eCDx2rjO26iFOA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:04 2026 by rpki-client