Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: xfUsoNuf5/2mM54g1SBjOBt56y034VCldAjn4p5idhk=
Subject key identifier: 1B:FB:9B:07:03:4E:1E:BF:EC:DD:92:3B:03:70:31:2B:B4:E2:77:04
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01A0AD18B8BFC4BAEDE845B3DBD03C308ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 072C
Signing time: Thu 17 Sep 2026 02:01:13 +0000
Manifest this update: Thu 17 Sep 2026 02:01:13 +0000
Manifest next update: Fri 18 Sep 2026 02:01:13 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: syLWZjAyf9pZz2OpzFCIdJu/Py1nIv6eydeaqYdmXvc=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:18:b8:bf:c4:ba:ed:e8:45:b3:db:d0:3c:30:8e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Sep 17 02:01:13 2026 GMT
Not After : Sep 18 02:01:13 2026 GMT
Subject: CN=1bfb9b07034e1ebfecdd923b0370312bb4e27704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:b2:df:a9:7a:34:2d:a8:e5:06:bf:c5:45:
ea:8f:86:f9:3b:ac:54:fb:6c:6b:21:d6:48:aa:5f:
9c:e8:25:6d:e4:46:b0:ed:8b:cb:5f:42:d4:2b:40:
6b:9f:4f:f0:2b:7f:08:98:05:7b:03:f6:dc:51:29:
93:05:62:82:7b:fd:1e:53:a3:ce:01:54:7d:07:91:
48:0c:4a:3e:d6:d3:0a:8a:8a:ca:51:09:a4:0b:ad:
74:04:95:42:cd:ab:c5:bc:63:a6:56:49:50:58:5b:
29:44:5e:3d:1c:a3:5e:15:85:41:e7:a1:a1:43:f3:
6b:b0:6c:45:36:d2:9c:5e:62:74:6f:01:99:e6:de:
8d:0c:f7:9f:d3:00:87:96:2c:96:b7:16:a7:03:33:
71:96:e9:7f:95:e0:cc:53:ae:34:23:1a:84:41:a4:
e7:09:97:69:e4:d1:59:ae:f9:ec:82:b9:f1:0c:57:
ff:78:58:45:84:54:e6:cb:03:b2:f6:66:91:86:8c:
a3:a5:d3:07:d8:dd:88:fb:fa:a6:f8:71:08:04:59:
75:fb:c6:82:ce:d1:ee:ad:35:61:da:07:d1:7b:48:
36:0e:4b:54:b6:0c:f7:95:72:15:73:21:40:e7:e9:
ee:ed:fe:b8:3f:c6:d7:f6:b6:6f:e3:b6:12:2d:53:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FB:9B:07:03:4E:1E:BF:EC:DD:92:3B:03:70:31:2B:B4:E2:77:04
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f7:15:49:b8:cc:8f:e7:e0:f3:70:55:f1:93:b4:ba:a9:ac:
e7:5c:53:45:97:57:9a:1b:c9:a3:cc:d1:7e:50:43:5f:61:26:
35:ef:14:e9:29:5e:de:69:fe:28:b6:86:5e:60:b4:2f:cc:de:
42:4a:e9:bc:c6:3b:3b:80:3f:48:be:42:d3:0c:35:0d:f1:4d:
d2:fc:5e:eb:66:23:2f:f0:4c:87:79:e2:a4:14:98:51:11:31:
62:97:78:22:b6:14:8b:d9:a1:53:49:4b:dd:76:83:9c:c9:ae:
fc:a5:1b:62:72:13:53:34:fb:ba:fe:88:27:1d:54:5e:18:41:
27:90:19:ae:60:9a:c3:36:3a:61:d6:72:b8:08:f6:cd:8c:7a:
ed:d5:e6:26:0f:7a:97:d2:4a:4c:33:1c:e8:ef:59:7a:6f:8e:
21:1f:47:7b:24:b1:2f:f8:47:d5:48:87:57:6e:18:3a:19:95:
8d:d7:f2:12:a3:72:68:7c:9a:b0:e3:e3:55:7d:99:fb:fb:98:
dd:31:c2:3b:d3:dc:44:23:87:c2:75:a2:cb:52:83:e7:c6:75:
10:68:9a:85:ba:16:cc:f0:48:68:cc:03:c0:81:45:a2:43:89:
f9:7f:39:ab:47:cc:9a:9f:b6:83:59:a0:cf:1e:06:20:23:af:
4a:b9:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:42:21 2026 by rpki-client