Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: PY662XV/YZlJXGmAJwp1XfUqzTelitRMLDB9AP4dIrU=
Subject key identifier: 15:5F:8E:0D:EF:19:CD:34:1C:96:D3:38:3D:7E:A3:8A:8C:BC:13:CE
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019D37C06756BCC4E06FC08A051F4DFCF1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: aONTFkWh+nv8eBPBKzNLT7K0KuxudoCGp26hUZpOUq0=)
2: OPxxAaI36wOXDoRWNJH9zygfaP4.roa (hash: mH7ZBf8wX4Ac93dknyYTB0ar56IBtyzBP1/i72VCE+U=)
3: TKG6JIO5NTaXTUbXfBu90s4mtRE.roa (hash: U2QEQxBIuCigDglAujNTXtIh1vUVB2LqzesEEmT2csQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:67:56:bc:c4:e0:6f:c0:8a:05:1f:4d:fc:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=155f8e0def19cd341c96d3383d7ea38a8cbc13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:15:b0:09:9a:6e:f3:75:ab:ea:80:8c:1a:
bb:95:53:47:6d:94:6d:15:80:2d:ea:8f:da:b6:89:
ac:80:2b:18:24:07:7d:4f:1c:eb:68:45:96:78:09:
d9:62:b9:4b:7a:54:2e:d9:83:cd:e9:26:33:5a:69:
cc:ba:da:eb:70:67:13:5f:35:51:de:c4:ca:1b:73:
e4:e5:60:cd:f7:03:f4:0b:87:d9:ca:26:ec:45:c0:
5a:97:ca:71:9f:7d:8e:55:e1:99:ba:95:ab:b1:fd:
be:e8:ff:12:95:aa:ef:f4:5a:44:1c:e7:2c:05:59:
10:18:a7:ba:da:7f:fc:b9:ab:99:9c:69:4c:e4:8f:
8b:39:a6:fd:1f:ce:00:95:93:06:6f:98:78:f8:1a:
56:56:c1:17:07:62:ae:2b:78:40:2a:8b:81:40:77:
47:8c:35:c8:8f:ee:c3:9d:31:c3:12:e7:01:ba:90:
bc:de:80:c2:54:ab:25:df:e1:ce:07:8e:16:aa:2a:
de:95:22:8d:cf:69:37:6a:e4:c6:84:32:7f:60:1c:
31:cf:b4:4c:14:2a:29:28:c4:8b:fd:af:52:17:a4:
28:65:6f:83:a4:f1:42:8b:1e:68:27:02:91:1a:a2:
01:bc:cc:50:9f:f8:2e:63:7f:09:81:ac:6e:06:e9:
18:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:8E:0D:EF:19:CD:34:1C:96:D3:38:3D:7E:A3:8A:8C:BC:13:CE
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:32:a4:cc:10:c0:6a:5a:5e:34:30:db:f1:fc:16:4d:de:
60:71:89:a8:9c:cf:95:53:a1:17:2d:4a:96:d6:61:1e:5f:6e:
fb:cb:e5:70:97:37:cf:fe:ed:19:ba:fb:6b:85:7c:93:c4:ab:
c1:b4:47:cf:78:25:d6:ef:da:d7:b6:eb:37:c3:c1:0c:b1:ec:
33:b0:bb:5f:0a:94:61:ab:58:83:d2:d6:b5:36:dc:77:8f:fb:
90:21:91:37:d4:d6:59:48:fc:23:a1:e9:98:16:3e:66:c4:5f:
84:c3:01:a0:67:3b:15:aa:dd:09:27:62:ec:81:38:d9:ea:f1:
9c:4a:42:e4:97:36:7e:03:8a:34:9d:2c:60:85:87:c4:4f:36:
03:85:bc:09:c3:e6:e7:a7:be:fc:84:b2:c7:c1:65:1c:cd:03:
80:48:c2:4c:a0:47:29:6b:46:99:d1:4e:25:d0:ce:3e:69:1a:
00:3a:7e:46:ac:a7:3f:8f:7d:c0:a1:d1:40:67:9c:82:5a:1d:
28:55:c4:c4:26:d1:31:ee:5b:6e:a8:b7:91:80:54:6e:68:74:
db:19:a0:8c:52:ef:b3:f9:e0:1e:0c:da:f6:7f:7a:d0:40:54:
53:86:21:22:1c:9f:4f:47:5f:49:00:eb:af:84:cd:7a:f2:53:
05:2f:3a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGdWvMTgb8CKBR9N/PGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmExODJkOTFmNDU2ZDg1MDIxMGRiZjcyZGE3ZTQ3NWZi
ZjNjMDgwHhcNMjYwMzI5MDQwMDQ5WhcNMjYwMzMwMDQwMDQ5WjAzMTEwLwYDVQQD
EygxNTVmOGUwZGVmMTljZDM0MWM5NmQzMzgzZDdlYTM4YThjYmMxM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspgVsAmabvN1q+qAjBq7lVNHbZRt
FYAt6o/atomsgCsYJAd9TxzraEWWeAnZYrlLelQu2YPN6SYzWmnMutrrcGcTXzVR
3sTKG3Pk5WDN9wP0C4fZyibsRcBal8pxn32OVeGZupWrsf2+6P8Slarv9FpEHOcs
BVkQGKe62n/8uauZnGlM5I+LOab9H84AlZMGb5h4+BpWVsEXB2KuK3hAKouBQHdH
jDXIj+7DnTHDEucBupC83oDCVKsl3+HOB44WqirelSKNz2k3auTGhDJ/YBwxz7RM
FCopKMSL/a9SF6QoZW+DpPFCix5oJwKRGqIBvMxQn/guY38JgaxuBukYeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVfjg3vGc00HJbTOD1+o4qMvBPOMB8GA1UdIwQY
MBaAFCUqGC2R9FbYUCENv3LafkdfvzwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEt
NTgyZjlkMmUzOGIyLzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEtNTgyZjlkMmUzOGIy
LzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjMypMwQ
wGpaXjQw2/H8Fk3eYHGJqJzPlVOhFy1KltZhHl9u+8vlcJc3z/7tGbr7a4V8k8Sr
wbRHz3gl1u/a17brN8PBDLHsM7C7XwqUYatYg9LWtTbcd4/7kCGRN9TWWUj8I6Hp
mBY+ZsRfhMMBoGc7FardCSdi7IE42erxnEpC5Jc2fgOKNJ0sYIWHxE82A4W8CcPm
56e+/ISyx8FlHM0DgEjCTKBHKWtGmdFOJdDOPmkaADp+RqynP499wKHRQGecglod
KFXExCbRMe5bbqi3kYBUbmh02xmgjFLvs/ngHgza9n960EBUU4YhIhyfT0dfSQDr
r4TNevJTBS86kA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:05 2026 by rpki-client