Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: MfDiFGOQP7tUvf/5kqoGBWnyrz/BKixDbcNnFoBf/Kc=
Subject key identifier: 24:FE:11:F9:09:AD:79:C5:F7:30:A3:23:0F:95:14:78:28:AA:B6:81
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019E5712D92C6F9B07E9FBC6A59AFB1E2701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 02CB
Signing time: Sat 23 May 2026 23:01:53 +0000
Manifest this update: Sat 23 May 2026 23:01:53 +0000
Manifest next update: Sun 24 May 2026 23:01:53 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: zsjzUOKnBULoDsGxqfFG1K3q3NpuXmd8kJGAuB0OhXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:12:d9:2c:6f:9b:07:e9:fb:c6:a5:9a:fb:1e:27:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: May 23 23:01:53 2026 GMT
Not After : May 24 23:01:53 2026 GMT
Subject: CN=24fe11f909ad79c5f730a3230f95147828aab681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:34:97:3e:bf:c0:9a:a4:14:89:e1:1d:49:
50:dd:8b:e4:7c:d9:1a:c7:2e:b9:f0:03:81:c2:6f:
3f:87:88:f2:53:d3:44:50:46:82:3c:15:ce:c4:3a:
3a:16:e9:b9:f4:45:72:ca:21:c3:96:c1:29:3c:19:
db:8a:6a:b0:5d:a4:5d:0c:4c:fc:12:0c:40:97:a4:
17:48:db:fe:d9:52:3a:f6:d7:74:af:c0:2d:38:8f:
ca:28:29:aa:e1:a9:cb:bc:4a:5f:02:f6:aa:87:04:
e8:52:be:3e:ee:a2:85:46:03:5b:49:a1:d2:d6:5f:
a8:3b:fa:b5:50:f2:c1:9f:7a:bf:e0:a9:7c:be:e5:
08:6b:68:f0:ce:26:ee:2f:c4:4b:b1:c9:ce:d1:3b:
0c:81:14:a4:4a:9d:57:45:40:e5:90:ae:40:c8:b1:
8d:0b:9a:27:95:45:23:52:a5:49:a1:83:21:9b:d0:
b3:d3:78:99:a7:72:92:32:e9:41:e0:b6:46:05:91:
f6:21:f3:4a:ae:49:1b:79:8e:49:f4:75:40:6c:7c:
12:ec:c2:c4:1f:a1:1b:91:e3:49:23:f9:5d:e7:e2:
ea:3f:c9:16:47:ef:38:a0:c1:63:d3:17:e4:a7:d3:
e6:87:ed:24:29:5f:a2:85:0d:db:50:72:34:d7:19:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:11:F9:09:AD:79:C5:F7:30:A3:23:0F:95:14:78:28:AA:B6:81
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:7b:a3:6a:c2:ee:6a:fb:0b:8b:04:4e:25:b7:70:5d:3e:
48:f4:ac:61:62:aa:70:e4:c0:b1:64:08:d4:a7:1d:41:fc:b6:
07:99:ff:d0:c0:26:ba:ef:06:a1:1e:32:5d:78:20:a1:c1:c7:
0e:25:15:ca:5c:f5:05:c7:d4:bd:7a:fa:8b:18:db:fb:b5:b2:
20:22:d0:1a:c4:df:37:93:a2:97:11:71:2c:ad:6c:fe:9a:31:
db:af:ca:9b:ac:56:e2:9a:2a:28:79:12:48:f3:40:8c:98:d0:
27:ea:36:5f:04:f7:83:6f:df:ed:a8:57:5f:2d:6a:61:86:83:
63:36:e0:c6:25:e3:22:75:db:ef:d6:95:f2:be:59:33:a8:bb:
bd:85:2c:30:a1:5a:1b:d0:ed:1b:5c:84:10:95:7f:c5:47:af:
fc:b7:7a:1a:c5:46:1c:ce:ad:b6:7d:d0:f9:bf:c3:a7:ef:3e:
6d:10:50:8d:b5:a6:c6:5f:18:00:55:ac:ab:65:49:56:32:71:
93:93:be:6c:0f:39:68:1e:67:4a:f9:7c:5b:6a:88:00:a1:48:
f7:ea:dd:7f:56:99:d4:91:d1:dc:4d:69:f7:09:0f:fe:75:56:
47:3e:7c:8d:0f:9f:5a:79:9b:be:58:9e:a0:de:da:ef:21:01:
6d:d7:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:56 2026 by rpki-client