Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: EB+cB7zicXkKslMCNRU4aEM2gwnC88/e5XI9TVgz9No=
Subject key identifier: 4E:16:60:4B:4F:B7:DA:B1:3F:DE:92:CC:28:25:B2:18:3C:3F:9F:18
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 01A107A6899400A74BB6AE7626E74E544527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 16:01:57 +0000
Manifest this update: Sun 04 Oct 2026 16:01:57 +0000
Manifest next update: Mon 05 Oct 2026 16:01:57 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: VUdXjqwkEsgEevYc+04u5YS1xLLPcn2rdhzHrXOLYy0=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:89:94:00:a7:4b:b6:ae:76:26:e7:4e:54:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Oct 4 16:01:57 2026 GMT
Not After : Oct 5 16:01:57 2026 GMT
Subject: CN=4e16604b4fb7dab13fde92cc2825b2183c3f9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:b9:fa:7f:b8:0d:8f:2d:23:0b:cd:9b:aa:
de:57:dd:08:e8:87:19:ad:06:38:a9:0c:1d:c6:8f:
db:80:df:a1:07:6c:b8:58:59:be:b9:8d:7f:d2:46:
27:dd:2b:8c:a0:b0:db:c5:07:bb:f1:0e:9d:c1:76:
15:b5:19:0f:cc:51:6b:72:b2:27:2f:58:1d:bf:4d:
7b:0f:80:13:fb:09:8a:97:2e:8e:2c:cb:8b:11:6c:
0d:fd:14:74:33:3a:a7:1d:b8:3d:ac:a7:2e:e7:2e:
84:18:86:03:e1:5a:43:03:3d:7d:3f:13:14:02:61:
9a:b9:e6:1b:8d:02:a2:0a:da:89:db:23:ff:be:61:
16:81:02:d1:dc:59:c2:3c:5e:3a:96:c6:94:c7:32:
b9:b2:f7:ab:9d:cf:65:fe:fb:df:05:b5:28:b7:08:
0d:c9:e5:d0:aa:84:3e:4a:1a:22:74:06:de:3a:ae:
be:1a:d6:8f:57:13:69:8f:b6:84:a7:b8:6a:a9:06:
34:d2:ff:a7:c8:59:2b:d4:7b:af:1e:56:eb:db:fc:
47:73:31:94:3a:4c:b3:61:7f:fb:e2:c8:dd:d2:fa:
20:cf:cf:6f:7b:64:92:b1:6d:e7:27:25:ec:52:96:
24:9e:93:d8:e9:05:90:20:41:8e:37:00:e9:63:a3:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:16:60:4B:4F:B7:DA:B1:3F:DE:92:CC:28:25:B2:18:3C:3F:9F:18
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f7:96:b0:b7:1a:c8:b1:82:89:67:04:c6:92:e7:60:e6:47:
e0:74:9e:05:f8:76:e5:9c:64:4a:51:c0:61:c3:3a:70:ef:a4:
76:ce:82:de:e2:59:aa:4e:88:a4:19:28:fd:32:ed:c7:38:cc:
1a:b1:7e:e0:c7:9d:12:46:70:67:bd:e9:55:d7:7a:82:2a:cb:
bd:6a:ba:be:23:8a:cb:82:8c:19:f8:68:9b:d5:39:23:5d:4d:
37:f1:c9:17:53:83:26:33:7e:17:78:57:e3:d3:49:cf:3d:92:
4f:5a:01:84:e9:24:e5:6a:df:4c:ad:a7:78:65:99:86:96:b4:
56:17:be:ed:7b:78:fc:b9:89:39:e9:bc:43:86:0f:c9:66:76:
17:f2:20:51:82:88:ff:2f:9c:b0:6b:5b:3e:3f:52:d6:f9:05:
c4:06:7e:79:90:15:f4:97:01:a3:00:1d:01:da:ff:aa:bb:39:
6f:83:05:75:49:ea:ec:c5:cd:fb:60:c7:5a:89:2b:c7:0b:07:
f9:51:57:39:61:ff:e5:e3:8a:92:25:27:ca:f3:60:b9:05:f9:
25:d2:8e:09:f2:73:38:95:4f:4b:70:d0:b1:6b:16:3f:20:6a:
24:9a:2b:cc:f6:25:fd:5e:ca:85:39:4a:48:da:01:fe:f0:4c:
79:59:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:30:10 2026 by rpki-client