Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: Zji8/F2dQaA+9pn0EB9yUQGGSkeHelbBWyrdmPNZzsQ=
Subject key identifier: 7D:B6:B6:B5:65:D1:EB:E4:19:5B:C3:2E:D4:AA:EB:4A:D1:8F:55:1C
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01A17D05E7470A97487D7CF155AD8A09E4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 11:01:41 +0000
Manifest this update: Tue 27 Oct 2026 11:01:41 +0000
Manifest next update: Wed 28 Oct 2026 11:01:41 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: c2Bg3lC4JeoAfVr4J5x7GWLMIzYpYT62rZ84lFsoIJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:e7:47:0a:97:48:7d:7c:f1:55:ad:8a:09:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Oct 27 11:01:41 2026 GMT
Not After : Oct 28 11:01:41 2026 GMT
Subject: CN=7db6b6b565d1ebe4195bc32ed4aaeb4ad18f551c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:c7:9d:54:d1:8b:b7:f6:c5:bc:e8:99:94:
d9:38:87:7b:b9:dc:f8:0c:f0:3e:2f:a4:64:bb:73:
f0:be:dd:e4:c5:50:42:85:50:f6:09:41:ac:56:fc:
df:04:92:4d:27:ea:2a:9e:ed:91:d1:d5:35:80:ab:
5c:a5:5f:7b:c2:46:63:1e:f8:e8:93:fe:ba:ef:94:
8e:88:4d:65:b7:e4:1e:3a:97:b4:8f:59:ba:c4:f7:
39:31:74:58:41:6e:08:89:97:3b:f7:49:9e:13:98:
53:1b:a3:af:df:c3:26:e9:ac:aa:3c:98:ec:59:ba:
35:93:c5:4b:cd:ac:69:16:bb:c9:e2:48:9b:9a:b6:
cb:61:ff:51:a1:9f:16:fb:10:24:e4:6e:fc:84:c3:
f6:c3:60:68:98:40:85:ac:17:ad:71:18:ce:ed:4a:
13:29:e7:b1:68:f2:c2:a4:29:e8:2a:7a:5e:54:4d:
62:d7:f7:9d:38:0e:37:ce:31:14:4d:c6:a5:69:cb:
0a:aa:7b:b2:89:e8:d7:94:ea:9e:3b:f7:00:24:e9:
4b:51:7b:13:01:2d:e6:15:50:29:bb:a0:0c:07:40:
d2:1b:4a:b4:50:fd:1a:8c:4b:74:79:c0:eb:86:c2:
29:93:1e:7b:43:92:2f:ad:01:c0:af:2c:ca:7b:26:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B6:B6:B5:65:D1:EB:E4:19:5B:C3:2E:D4:AA:EB:4A:D1:8F:55:1C
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:bf:5d:4f:af:3a:ca:fb:e4:02:b7:e8:57:be:2c:35:2a:
aa:ef:2c:4c:04:b4:60:e6:f6:ab:fa:47:28:ad:a9:0c:57:4b:
be:c0:40:bf:82:7c:d6:a2:cd:af:31:c8:a8:3a:e8:36:9d:c6:
ae:52:44:73:9d:49:43:92:7e:1c:0b:b0:23:64:1e:a4:34:c8:
2d:23:5b:fa:61:0c:fb:28:0e:22:6f:14:e0:69:2f:cf:fc:90:
58:b1:24:18:39:c1:09:b2:25:38:de:c6:2c:e6:44:93:39:c6:
c6:d9:2b:f2:c8:ce:95:dd:d2:d1:11:f8:86:98:3d:68:4f:ed:
77:4c:1b:09:46:21:a1:4d:cd:3c:cf:f2:35:d0:2a:05:6a:88:
9d:8d:04:84:4d:dd:55:79:ad:a3:df:88:8a:19:1f:da:32:3a:
63:63:96:76:51:7e:a8:68:77:af:fd:cd:82:e4:15:7b:9e:d2:
76:78:26:9b:61:0a:3b:05:ac:c8:13:80:23:3a:b2:f4:df:a6:
92:3e:3e:88:27:81:5c:3b:6c:8c:ce:d4:70:03:9e:f6:8a:13:
34:8c:32:9a:96:3e:3b:03:ff:29:32:45:b2:38:76:60:3a:33:
96:3a:45:fa:6d:fc:46:59:00:22:25:15:e9:31:a8:74:62:fb:
0d:4b:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:20:48 2026 by rpki-client