Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: lIAT4RAGOvodn+R/s5yA1tI6Wi7+U0f1Rt0XqPMrV2M=
Subject key identifier: D4:20:AC:B8:BB:A7:9A:8E:E4:CC:E5:22:57:E7:9F:26:DC:19:4E:ED
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01A1AA159780542CB32B920BDB75F9C7130A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 07AF
Signing time: Thu 05 Nov 2026 05:01:43 +0000
Manifest this update: Thu 05 Nov 2026 05:01:43 +0000
Manifest next update: Fri 06 Nov 2026 05:01:43 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: Knt7a9bFmdnpy6paKe7IfPrYPRGbzligngjQG/d4QI0=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:15:97:80:54:2c:b3:2b:92:0b:db:75:f9:c7:13:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Nov 5 05:01:43 2026 GMT
Not After : Nov 6 05:01:43 2026 GMT
Subject: CN=d420acb8bba79a8ee4cce52257e79f26dc194eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:2b:6e:2f:37:db:2b:e7:23:46:5a:27:b6:
59:f3:b5:99:d6:2a:5a:ad:7c:aa:26:38:72:83:f6:
9b:da:e5:e5:48:13:2f:8a:ad:da:9f:b1:ef:24:b5:
f2:77:0e:9f:6b:fd:10:37:03:05:7c:f3:6b:74:9e:
4e:dc:4d:69:e6:be:00:02:0e:92:82:78:c0:9d:2f:
81:aa:3c:dc:69:12:81:a2:06:00:24:ac:cd:18:a6:
7f:ae:a3:70:56:c4:65:b8:e4:b6:cd:af:ac:5b:be:
36:b5:b4:aa:d2:ff:a0:7b:58:f4:9f:8d:96:0d:cf:
82:40:7b:0f:1e:c3:3e:85:1c:b5:57:85:6d:7e:ba:
80:3e:a1:03:fb:48:16:4d:11:c9:94:4e:7b:88:e4:
6b:fe:69:f6:10:4a:1f:4c:14:d8:7d:b4:36:f4:49:
fe:c5:25:31:75:8b:b5:46:88:6f:f0:08:7b:a5:4f:
03:8f:1e:78:f8:35:fa:d2:b1:36:f2:03:51:58:35:
86:d0:54:43:9e:c1:84:36:de:70:64:2a:42:12:58:
11:d7:d3:de:f4:ce:06:96:f6:da:cf:62:cb:46:98:
4e:6b:71:aa:a0:95:8f:9b:2b:2b:07:34:b7:4e:5c:
56:10:da:bc:76:66:fe:e3:61:9c:17:f2:5d:f3:5a:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:AC:B8:BB:A7:9A:8E:E4:CC:E5:22:57:E7:9F:26:DC:19:4E:ED
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:92:c3:a0:48:72:af:82:d7:4f:36:34:0e:7d:fe:da:20:
2b:3d:bf:cb:54:cd:b0:eb:92:e7:51:a8:71:3a:1c:5b:30:9c:
67:ec:8e:ab:0b:81:c1:d2:c7:60:04:21:45:c2:25:9f:82:65:
94:44:4d:6e:e0:f5:53:c6:e0:64:7b:85:a4:7b:ec:0f:db:3b:
7c:98:10:52:3a:fd:3f:a8:48:96:35:cd:d3:ea:e3:f2:4e:c4:
9f:ef:4d:78:0d:3f:9c:76:db:4d:33:0d:a5:7c:c5:6b:32:ff:
cd:27:62:59:82:e5:f4:75:e7:f7:0b:1d:71:6b:98:4d:25:d7:
1e:79:88:c0:14:f7:0f:10:30:5c:80:ef:0b:74:ff:de:a8:1b:
08:ea:12:7c:20:43:98:0d:0d:65:34:3d:b7:e6:51:df:99:19:
63:4c:c0:ec:4c:3c:ca:81:19:79:a1:fd:50:28:99:82:b8:d5:
f5:e9:23:11:c7:e0:9a:38:44:b9:6b:ff:60:3c:c6:b3:77:d3:
70:52:58:b0:7c:27:69:75:fc:8f:21:2e:32:e3:c4:d3:7f:12:
c0:4f:6b:8b:3c:c3:f6:b5:53:74:74:f8:17:09:a6:c8:c4:d3:
31:bc:7a:e7:bc:6f:81:ed:bd:e5:51:cb:ee:9e:0e:e6:44:ec:
c1:94:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:42:53 2026 by rpki-client