Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: KNdMCgVbAGqASB3LdGjHXauy/ViEIxGhM+Rvep1sKok=
Subject key identifier: C2:88:32:57:6B:21:64:29:06:BF:23:AA:5C:A9:21:22:35:A7:B1:54
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019D37532D34102143D7E813CF4A8202D486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 0236
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: QD83FUnyNz2XAl1Qc6kimAJxxsgLPYMwNBTUJYiwYpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:2d:34:10:21:43:d7:e8:13:cf:4a:82:02:d4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=c28832576b21642906bf23aa5ca9212235a7b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:de:61:68:6e:64:41:1f:7f:22:1a:3c:84:
19:9c:54:1f:cd:ac:15:d1:82:c0:ee:cb:27:b1:93:
3a:50:49:04:71:90:3d:76:48:5f:86:c8:ea:24:4c:
65:7c:7c:b8:81:b7:d3:37:1b:b8:b2:4f:2b:8a:fa:
93:1a:dd:a5:4c:5a:3e:3c:79:05:d6:69:28:9e:d8:
0c:24:d4:36:97:76:4d:96:4f:30:5f:2e:40:96:f7:
82:a8:c5:dc:1d:c0:dc:1e:fa:b7:c5:2e:ce:36:69:
03:8b:02:61:aa:f9:05:6c:7d:7d:49:dd:5a:b9:e6:
81:53:04:96:1f:51:7c:6e:ac:4d:2b:9d:c7:79:25:
cc:10:db:a9:95:6e:e3:cf:55:34:9d:36:c9:da:8e:
c0:2e:59:0e:47:7e:51:11:98:8c:b0:1c:09:5d:25:
a5:fd:e9:d9:88:06:6b:b7:34:4c:f2:a0:39:07:3a:
25:d4:d9:1e:63:71:10:32:5a:9e:73:d5:88:2d:a0:
40:26:d5:09:1d:dd:60:18:e2:a9:88:30:84:89:06:
b1:4e:05:7c:c7:e1:46:dc:82:57:9b:b6:81:5d:73:
7d:59:31:cf:d9:12:1d:bf:18:28:11:d8:64:9a:42:
b8:59:26:75:3b:27:0a:0b:aa:03:f7:a6:0e:da:3f:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:32:57:6B:21:64:29:06:BF:23:AA:5C:A9:21:22:35:A7:B1:54
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fe:10:35:8e:ac:5b:30:af:b9:21:19:cd:87:d1:41:5d:f1:
24:50:c4:34:2e:f1:6c:29:6d:ab:8e:c3:b1:6a:2c:25:0a:e4:
23:e8:b8:24:16:d9:e1:14:d4:bd:e9:28:bc:50:05:83:ae:3b:
57:ec:d8:89:15:98:13:17:20:24:bb:01:91:52:8f:75:c1:3b:
c9:13:65:5e:45:ac:ec:34:0a:43:64:e4:29:9f:cf:1c:f4:2c:
4a:dd:aa:f9:46:90:ca:d1:0c:a8:2b:90:06:5c:93:54:8b:8c:
c3:09:b7:24:4f:63:39:30:e0:06:9a:69:1d:b9:35:43:58:ab:
e1:23:94:50:c9:8c:cc:66:e3:2c:e4:83:56:7d:55:8c:83:3b:
79:2d:64:e7:94:00:5d:76:e5:2d:fb:1e:c1:2d:5a:66:be:5a:
b6:8d:ef:9f:6d:96:2b:9c:4f:e8:c3:58:30:a7:0d:eb:80:d9:
6f:c0:a9:2c:97:1c:c0:7d:23:ec:e2:23:28:c7:1e:e2:8a:67:
6e:9e:a9:af:67:94:ec:eb:ae:63:d9:5e:e7:ad:92:36:42:fa:
24:20:25:0c:e1:e2:13:78:83:1e:ee:6d:1f:13:34:1b:0d:9e:
23:28:f5:a0:7c:d9:ca:6d:70:32:2d:13:d2:88:83:36:c1:bd:
06:8c:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:46 2026 by rpki-client