
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: TXZlw/k9AzcwtjOrJwUwWnlXIXYv0OsGEjc4tLr3MzY=
Subject key identifier: FA:46:A2:8B:19:E6:26:20:53:20:65:9B:98:03:A0:E3:1A:18:85:92
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 019EB8B3DAACA3A10E6FA45CEF052185BF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 22:00:55 +0000
Manifest this update: Thu 11 Jun 2026 22:00:55 +0000
Manifest next update: Fri 12 Jun 2026 22:00:55 +0000
Files and hashes: 1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 4OUTajCCzkAgz1uWeVu8Zwnt2tZB8gKSlgt104yZFxI=)
2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:da:ac:a3:a1:0e:6f:a4:5c:ef:05:21:85:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jun 11 22:00:55 2026 GMT
Not After : Jun 12 22:00:55 2026 GMT
Subject: CN=fa46a28b19e626205320659b9803a0e31a188592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:61:d1:c6:5d:bc:61:42:44:a6:53:d5:60:
1c:e1:48:31:40:60:01:19:8a:a4:56:6d:6a:d1:45:
9f:5d:b6:86:10:98:09:db:36:28:18:64:c1:3a:bc:
a0:7c:3f:84:42:66:54:cc:e2:70:d2:34:87:69:9a:
b6:9d:a3:e4:d2:9f:80:82:48:a8:f7:7c:b3:05:13:
b0:a4:c8:62:09:58:ef:16:63:a7:aa:2f:fb:4b:29:
72:65:56:d6:63:8b:60:6e:ae:be:f1:94:34:d6:f1:
ab:05:c1:33:09:ff:4d:b6:9f:7c:e1:29:14:b9:05:
6d:a6:09:d0:42:ae:f7:03:46:06:47:ca:ed:be:8e:
92:3c:54:04:c2:7e:e8:44:f2:b1:ce:5a:cf:02:91:
38:16:ba:d5:4f:0d:0c:5b:f2:b5:ea:40:84:ea:84:
85:fc:94:8e:55:9d:aa:35:e6:aa:1f:1d:7d:e6:9c:
58:13:21:c1:c8:60:c1:66:76:8a:36:b6:aa:b4:a5:
1e:18:02:0b:a6:9a:56:f5:53:b4:a5:52:22:0e:08:
5c:64:54:5d:dc:2d:1e:8c:55:40:ca:ed:ec:90:da:
a5:8a:b1:47:f8:ce:b5:90:37:ee:50:90:2d:2c:93:
3f:c3:f5:6d:ae:ac:a9:4c:5a:18:a6:94:16:68:b6:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:A2:8B:19:E6:26:20:53:20:65:9B:98:03:A0:E3:1A:18:85:92
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:8a:b6:3c:4d:4d:46:a2:6a:90:ff:ce:a6:65:3c:21:1f:
23:71:f2:82:69:72:2d:c6:a7:e5:37:f8:91:ae:ed:1e:5e:bb:
79:c7:ec:8a:96:99:10:00:95:17:d8:c1:55:44:11:29:de:01:
1a:99:ab:32:16:df:33:c9:fd:59:46:f9:9b:0b:c3:15:21:35:
cb:83:4f:6e:b4:b6:d5:2c:37:16:f4:6d:de:a7:ca:2f:b5:3a:
61:fe:27:7e:70:bb:12:d6:06:e3:03:e1:1f:81:96:9b:b6:db:
ef:54:d3:fb:80:5d:c9:75:1a:00:0b:52:8d:ec:4f:91:f6:1b:
16:7e:0e:8d:6d:b0:7f:da:93:e6:7a:8f:ff:25:e7:45:58:33:
3c:7b:4c:f5:17:1a:14:06:81:3a:50:53:76:2e:c9:93:e8:e6:
89:3b:5b:be:17:56:84:fd:aa:f6:fc:59:cc:10:79:4c:4c:81:
c9:8f:e9:d5:04:71:45:41:4c:f7:96:9e:93:e2:2d:ed:69:d6:
a5:ca:30:66:b3:f1:3d:35:d7:20:48:f3:73:8c:e7:7d:13:69:
7f:7e:99:1e:ce:ae:9f:11:a7:9b:6b:12:72:2a:89:05:68:0a:
3f:be:4b:f2:ce:5c:0c:22:17:21:e4:6f:12:88:40:a5:78:2c:
b4:4d:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:02 2026 by rpki-client