Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: x2PK1rQLjWld/1ZsxJgeD+A2Q7OCfg6PD7H7i1vCl28=
Subject key identifier: 26:40:CC:47:BE:B3:1E:EA:50:29:A7:0E:05:D0:57:3D:31:16:B1:0D
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019D3865E08B02E757D50D9DFF2CD0FBCE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: cD8BR/UHeYnQZzsT0BmiM3ITQX7haBaszJh9FvVAvDk=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e0:8b:02:e7:57:d5:0d:9d:ff:2c:d0:fb:ce:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=2640cc47beb31eea5029a70e05d0573d3116b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:30:7b:1b:67:06:d2:b2:2e:c9:1e:2b:71:
36:2d:2d:e6:82:22:0f:9a:e8:e1:57:55:25:09:22:
99:5f:f0:b8:30:f2:27:b6:27:f6:a9:d1:87:41:ee:
8f:61:f2:33:0a:53:10:f6:b7:34:6a:f4:b8:b3:8b:
7b:50:1d:06:d9:26:0a:08:7c:1e:d4:ba:d7:7a:eb:
dd:51:60:43:46:c8:1e:83:9f:1b:aa:0b:6e:27:c2:
f8:8a:86:57:7e:af:d4:2f:fe:29:b2:16:1a:67:f1:
6f:2a:f2:98:e1:48:1e:e7:39:9c:96:77:ea:6c:7e:
32:d7:81:aa:56:94:86:75:8e:63:55:26:2d:eb:4d:
28:c2:dc:f8:25:07:52:f7:3c:98:86:7a:a9:e4:0f:
9e:ed:a2:4a:af:3f:14:0d:1d:18:18:b1:06:ac:0d:
f6:0d:2b:3a:95:c7:8e:d8:c8:a0:68:1d:9e:d9:6f:
d1:21:b4:8b:07:4a:2f:34:65:39:1a:bd:53:18:9f:
b8:bf:34:8f:e3:c6:51:3d:73:7e:ef:4c:3d:c0:9a:
ea:16:68:22:13:8f:03:a9:9b:fc:af:8c:2d:9a:7b:
a7:55:34:7c:dc:06:a7:e8:30:46:b8:b5:26:b2:1e:
af:15:f9:31:e1:8e:64:ed:74:6b:81:fc:8f:89:39:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:CC:47:BE:B3:1E:EA:50:29:A7:0E:05:D0:57:3D:31:16:B1:0D
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c1:dc:49:30:7b:69:93:a8:a3:bd:61:af:bf:cb:1b:db:19:
75:1c:22:89:fd:39:8d:fd:8c:15:85:e6:d9:9e:59:e5:4a:e3:
5f:8b:8c:2f:44:8f:e4:c2:6d:cf:61:96:a5:41:14:df:c5:0a:
52:c9:9f:48:40:52:6d:9e:54:79:9b:73:0e:b8:7f:35:e9:31:
9f:e6:02:5c:32:39:fc:32:1a:76:7b:55:87:48:da:09:ba:70:
aa:fd:43:64:38:cd:cd:d1:b5:77:2c:76:7f:f8:35:3b:24:07:
42:6c:67:d4:a4:ce:c2:d3:35:ac:02:61:d0:95:dc:a6:f7:45:
15:ec:69:58:fe:31:ae:d1:17:97:61:77:87:89:9b:58:ef:aa:
d9:5b:ae:47:0d:04:cc:b2:ab:a0:71:4f:7f:5c:d7:5f:ff:83:
5c:4a:0c:c3:a4:31:c3:e3:d6:5f:8c:1a:9d:25:30:69:cc:8b:
9a:6b:76:7c:f3:f8:78:33:a5:f8:b6:95:e2:aa:44:54:d6:52:
33:5e:a1:9b:78:14:80:ec:b7:19:eb:da:9e:8d:f1:cf:4d:a6:
04:37:1b:3d:c5:ce:fd:54:c2:ac:2f:ed:17:4d:f8:1a:00:7c:
bf:fb:8d:17:c4:11:b3:84:4f:a2:38:4c:1b:6f:6a:61:f0:de:
ae:8c:42:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeCLAudX1Q2d/yzQ+85HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDFiNWNiNmZiMDQyMzk4Njg3MWVmMDFlNjYzZjM2NWNl
MGQ4OTUwHhcNMjYwMzI5MDcwMTMzWhcNMjYwMzMwMDcwMTMzWjAzMTEwLwYDVQQD
EygyNjQwY2M0N2JlYjMxZWVhNTAyOWE3MGUwNWQwNTczZDMxMTZiMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK8wextnBtKyLskeK3E2LS3mgiIP
mujhV1UlCSKZX/C4MPIntif2qdGHQe6PYfIzClMQ9rc0avS4s4t7UB0G2SYKCHwe
1LrXeuvdUWBDRsgeg58bqgtuJ8L4ioZXfq/UL/4pshYaZ/FvKvKY4Uge5zmclnfq
bH4y14GqVpSGdY5jVSYt600owtz4JQdS9zyYhnqp5A+e7aJKrz8UDR0YGLEGrA32
DSs6lceO2MigaB2e2W/RIbSLB0ovNGU5Gr1TGJ+4vzSP48ZRPXN+70w9wJrqFmgi
E48DqZv8r4wtmnunVTR83Aan6DBGuLUmsh6vFfkx4Y5k7XRrgfyPiTkqjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZAzEe+sx7qUCmnDgXQVz0xFrENMB8GA1UdIwQY
MBaAFHLRtctvsEI5hoce8B5mPzZc4NiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUt
NjRkZTM0ZjFmNDY0LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hNjAwZjUtOTQyOC00ODVjLWI0MmUtNjRkZTM0ZjFmNDY0
LzEvY3RHMXkyLXdRam1HaHg3d0htWV9ObHpnMkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcHcSTB7
aZOoo71hr7/LG9sZdRwiif05jf2MFYXm2Z5Z5UrjX4uML0SP5MJtz2GWpUEU38UK
UsmfSEBSbZ5UeZtzDrh/Nekxn+YCXDI5/DIadntVh0jaCbpwqv1DZDjNzdG1dyx2
f/g1OyQHQmxn1KTOwtM1rAJh0JXcpvdFFexpWP4xrtEXl2F3h4mbWO+q2VuuRw0E
zLKroHFPf1zXX/+DXEoMw6Qxw+PWX4wanSUwacyLmmt2fPP4eDOl+LaV4qpEVNZS
M16hm3gUgOy3Gevano3xz02mBDcbPcXO/VTCrC/tF034GgB8v/uNF8QRs4RPojhM
G29qYfDeroxCGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:20 2026 by rpki-client