Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: gSSGopxwOLnuHZ2DtPiZXqXbvjJmHLXquTwV02c4/Co=
Subject key identifier: 98:B5:0B:3F:FF:23:8D:78:43:26:54:E0:2A:05:6D:18:0E:21:D7:45
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019D389C22ABA8908F1FAABB902A96A5CADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 0562
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: hgEXy70hLArGX4EH7OJfEUVxaKC0/XAjvrRYzKKEQWU=)
2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:22:ab:a8:90:8f:1f:aa:bb:90:2a:96:a5:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=98b50b3fff238d78432654e02a056d180e21d745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:07:86:46:36:7c:39:15:b9:9a:b5:70:a7:
4d:f3:1d:bc:03:34:9d:ee:a2:11:c3:7c:94:45:ba:
62:41:07:04:cb:52:43:5e:34:1f:61:81:31:a6:c3:
e3:b3:be:81:ad:89:44:c5:b0:08:ca:61:86:e0:79:
b6:23:d5:57:f3:f4:75:cd:fb:e5:df:b7:75:8d:0a:
1b:18:2e:da:5c:ef:c6:6e:d6:32:51:cf:21:f5:37:
2b:b7:82:68:02:d8:aa:00:a5:d2:f1:dc:ab:18:93:
bd:0f:db:9e:87:05:ce:4d:e7:56:d5:3e:cf:49:d3:
22:bc:17:85:41:e8:8d:39:09:2d:28:0b:55:57:c5:
21:d9:72:b6:51:d8:37:72:00:f7:c7:45:a6:17:85:
41:b8:3e:5e:e5:5e:dc:30:5b:ab:c7:57:61:4a:c9:
d7:61:3b:de:25:01:6b:90:56:b4:e6:0e:42:07:10:
0b:a4:a5:d9:4c:41:12:0a:53:df:3c:e8:06:b5:33:
dc:78:bf:87:16:0b:08:a5:7d:c9:3b:0e:ec:c1:e7:
6d:56:8a:ef:c6:09:7b:ec:8d:e8:4b:69:60:44:43:
65:4f:13:6b:21:bb:b9:5f:de:b0:3c:59:94:6d:7a:
c1:a7:d9:a7:26:d4:15:1d:0c:b0:a1:c4:58:0f:c4:
97:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B5:0B:3F:FF:23:8D:78:43:26:54:E0:2A:05:6D:18:0E:21:D7:45
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c5:c1:28:e9:c2:1a:9e:f1:01:2e:ed:6a:27:53:85:3b:88:
65:7c:89:d5:82:1c:9d:40:98:07:c4:e2:b3:5d:9d:1a:45:8d:
9c:ad:80:cb:34:1b:95:b2:03:8d:a5:8a:21:7f:82:71:9c:b9:
78:d0:67:99:be:8f:10:0b:b8:4a:60:16:14:2c:27:f5:f4:a2:
74:ac:e3:61:3c:b3:b3:45:4e:89:f3:d4:80:c6:f9:33:ad:86:
ad:36:aa:af:97:ea:03:63:c7:bf:78:7b:91:b9:79:b5:fb:f5:
aa:0e:c0:87:3b:b2:cc:89:b0:e4:c0:ee:f6:d7:6d:49:09:87:
9e:69:72:5a:1d:df:f7:80:18:88:4d:e6:ee:4d:ef:a2:6a:cd:
94:d7:07:d7:98:e4:f2:6a:61:90:af:8b:97:f2:bb:da:4e:73:
e3:58:79:86:74:f5:e6:2d:04:aa:aa:6c:30:b1:6c:58:ee:ea:
15:e9:90:53:a7:0a:e0:44:d3:c6:0a:c8:89:c2:51:b1:9c:e5:
ab:b5:b8:75:50:66:b0:a1:4c:80:fa:6b:92:31:ac:41:91:c2:
e6:56:af:fc:ca:26:70:7c:0d:6c:03:93:3d:2f:f4:db:13:19:
d1:26:ff:f3:59:f3:64:df:f2:57:a9:bf:e3:05:d8:69:ac:45:
d9:ed:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:43 2026 by rpki-client