Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: pfj4cLm2sIUmAgdzSjqexOXaRfvkkVFtoopBqJi20Iw=
Subject key identifier: 28:82:7C:2B:EE:3F:9B:02:AE:B1:4E:38:3B:75:20:58:DA:DB:A4:43
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019D39412F725A2496C3B37D2C0D3CAA3BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 1493
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: T-Qpf2laS9B4oqA-l43pYYoUJBk.roa (hash: t46DpvrWC/vui809tnn3ajl3f+hjX2aU4WQg5zWnjoA=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: HbsaMvad7KHaDA9yegd4Ld5hHDJs/7DP85HyzDKc590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2f:72:5a:24:96:c3:b3:7d:2c:0d:3c:aa:3b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=28827c2bee3f9b02aeb14e383b752058dadba443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:ec:85:20:a4:04:22:ec:e3:b0:38:06:63:
d0:b7:3a:06:86:ce:60:d8:c8:a1:35:77:fd:3f:99:
9f:bb:9f:f3:37:16:f0:bc:04:3c:d2:1c:f7:b6:be:
3b:7d:6f:c3:9c:21:45:d0:22:fe:36:5f:e5:99:49:
36:67:eb:53:a1:bd:69:30:85:91:52:39:fd:d1:35:
d4:f5:6a:03:05:60:c9:64:9c:01:f9:c0:eb:48:6e:
c1:61:b3:05:e0:c9:fb:c7:28:e8:1f:89:d2:a2:a6:
92:2e:6d:3e:1a:47:50:c4:7b:25:0c:c8:7e:60:36:
e8:f8:87:da:5c:f4:80:72:ab:d9:9d:10:6c:5e:cc:
d8:9d:a6:10:81:e4:5b:41:7a:07:78:47:9f:77:d9:
e9:f8:d9:ac:b5:22:19:1c:1b:ca:f2:78:0f:bf:35:
f0:06:92:35:7d:31:e2:36:33:ee:63:7e:15:04:fb:
18:35:3a:2e:31:75:1e:90:3a:05:c7:cf:0d:ba:01:
d0:e0:a2:78:84:c7:08:98:f7:e1:67:d6:c6:ff:3d:
98:68:cc:c4:ec:8e:8c:6f:04:02:9e:6c:7c:80:f3:
a9:26:5a:5c:68:4f:c8:08:25:f5:5a:de:00:78:a7:
d4:73:5f:7b:34:79:8b:05:9c:3f:d0:03:d0:82:2c:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:7C:2B:EE:3F:9B:02:AE:B1:4E:38:3B:75:20:58:DA:DB:A4:43
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:fa:4e:2a:9c:2c:c6:dd:d7:5a:5a:53:37:0a:08:a7:e1:
bd:64:14:a6:f4:f8:14:57:d6:10:cd:38:83:7e:56:8c:10:4f:
5e:bc:39:58:00:cf:24:1a:e9:db:3f:bb:17:43:34:93:f0:66:
77:73:8a:f9:0f:1d:43:a1:82:92:e3:04:a6:3d:ed:6c:fc:4e:
4b:3b:fc:c0:3e:9d:3b:a3:fc:98:47:4b:d5:e0:20:fc:09:83:
60:94:9d:f9:97:e1:22:cf:fb:87:38:4d:27:1c:ee:cb:22:f0:
a5:6e:c1:57:4f:03:f2:07:93:90:6c:1a:96:f8:b9:f0:77:b2:
bf:88:0c:96:0d:c3:59:f8:a8:37:76:12:84:3a:28:69:a8:cc:
d0:50:bd:f5:9c:ef:dc:53:a7:93:df:c3:79:a6:e0:7d:4f:c8:
48:89:39:c3:e9:7f:30:fa:f9:1b:08:b3:d9:52:68:f8:5d:a8:
ec:e7:00:98:f9:49:ad:9a:6e:80:4d:e4:c4:a4:b8:f7:f5:57:
e7:3a:6b:cf:bd:f2:2d:72:20:33:af:34:e7:48:f6:4a:44:74:
76:57:46:05:a9:5a:3a:55:fa:06:ff:63:5c:f6:0d:f5:00:96:
96:03:9b:0b:95:16:85:11:e8:36:42:7c:ec:6c:d2:bd:5a:5a:
73:a0:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:02 2026 by rpki-client