Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: iyu+FxL0ag/lSe6NS0IDx9ECs3b+s+TNvllFXzZf1s0=
Subject key identifier: 91:0A:5C:48:26:51:46:84:E5:79:02:9E:05:B2:76:92:6E:DB:D0:EB
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019FA3E0E357C4FE7728864CCB193E8CA82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 14:00:52 +0000
Manifest this update: Mon 27 Jul 2026 14:00:52 +0000
Manifest next update: Tue 28 Jul 2026 14:00:52 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: 4nzh6kjxZ3R4dYMauf86CMY6RZ/zf1CZ7fEXNO4JZOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:e3:57:c4:fe:77:28:86:4c:cb:19:3e:8c:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jul 27 14:00:52 2026 GMT
Not After : Jul 28 14:00:52 2026 GMT
Subject: CN=910a5c4826514684e579029e05b276926edbd0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:25:5c:b3:b7:e4:d2:f7:78:9a:e1:97:18:
de:0b:06:91:ad:f6:f9:ab:8e:8c:66:45:93:44:ef:
97:62:6e:9c:26:04:23:7a:4c:b4:3d:13:87:4a:9c:
9d:db:29:94:61:da:7a:ac:4b:b6:f1:f8:69:6a:77:
43:b3:ce:2c:a8:a1:d1:db:ef:bc:a0:f7:66:79:fb:
3c:3c:ad:16:1b:76:71:8b:21:18:1a:2f:0e:9a:12:
76:67:34:c3:d5:0e:bf:31:a0:73:21:61:e7:c2:2e:
ee:64:39:26:db:61:e2:b3:a3:b7:62:c2:34:ff:94:
2e:81:9d:81:ad:84:83:ea:8f:ad:64:8d:ff:5f:5f:
47:52:1b:ab:0a:5d:f3:73:89:4b:25:ef:3a:a7:86:
9d:1a:b7:80:c7:c4:e7:87:4a:3c:e4:0d:1f:cf:42:
78:7a:c2:54:99:f5:e3:ae:37:f3:79:2d:28:ac:29:
7e:fe:5f:92:de:c9:a8:27:c6:ca:61:fe:40:84:bf:
3f:91:13:d5:d4:1a:22:8a:84:61:35:79:58:24:5c:
c8:67:6e:da:bc:ca:22:e1:43:ad:2c:59:9d:d4:36:
ec:14:82:92:4e:70:ab:59:81:56:07:ce:4f:0c:9a:
0c:8c:c5:70:e5:82:d1:32:4c:65:25:6d:02:34:5f:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0A:5C:48:26:51:46:84:E5:79:02:9E:05:B2:76:92:6E:DB:D0:EB
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c5:10:84:d5:20:51:69:4c:92:10:7e:5f:ec:75:62:58:24:
05:38:3b:9c:0d:f4:d8:32:d4:d6:08:e7:89:76:02:c1:d1:4e:
cc:a8:28:ad:a7:3d:d7:4f:6c:01:fe:ab:2a:fd:2f:51:57:54:
a9:ab:23:e0:a9:c8:21:73:c9:17:c5:f0:f6:9f:8d:75:bd:c4:
db:c7:0d:44:c2:06:64:ff:df:88:9e:8e:2e:c5:7c:f4:b1:a7:
e0:0a:d0:e8:6c:a2:93:0b:ee:68:eb:f0:c8:9d:57:0d:69:a4:
15:20:e4:2c:75:12:22:87:eb:29:3d:4f:c8:0a:e8:3e:a6:d9:
a4:23:2f:fd:a6:d4:e0:b0:13:44:7d:03:8e:d6:2e:3c:f3:e5:
da:49:ac:9b:d9:6c:74:9e:ff:e5:5b:13:1e:d3:3c:f2:b3:b5:
1b:4a:2a:18:2a:d0:3a:4a:42:b2:f1:dd:b8:f0:41:b0:b0:76:
82:f6:40:85:53:3a:d1:31:48:53:62:17:17:ca:8e:a8:47:a4:
a5:0d:91:7c:62:42:24:98:68:41:8d:e5:1e:f1:89:1d:c9:0c:
0d:eb:bf:e3:84:9e:67:b3:ec:3c:3a:3f:65:65:e6:3a:83:ce:
c4:97:b1:f1:30:4a:2f:b4:db:0c:6e:40:a5:ae:78:ba:72:eb:
cc:e6:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:36 2026 by rpki-client