Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: smhvbRlRXo2v3ArnYukCVD9sXuJVJ1w1twqJ4ijjoS0=
Subject key identifier: 7B:18:81:E2:76:26:FC:0C:4F:32:7A:81:98:19:71:B4:15:9F:4B:4F
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019EBA348654DA17DCCAE5C591ACCE78D047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 05:01:04 +0000
Manifest this update: Fri 12 Jun 2026 05:01:04 +0000
Manifest next update: Sat 13 Jun 2026 05:01:04 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: zI3xe3JnRGPaDkivW8TLmeZ5sIFkxjqN7ODyMNPf5Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:86:54:da:17:dc:ca:e5:c5:91:ac:ce:78:d0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Jun 12 05:01:04 2026 GMT
Not After : Jun 13 05:01:04 2026 GMT
Subject: CN=7b1881e27626fc0c4f327a81981971b4159f4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:4d:28:86:0e:2b:b9:0b:b6:81:ea:bc:a6:
59:04:d3:e2:db:cd:58:73:7b:37:b6:ec:56:0d:01:
85:5a:26:9e:ab:e2:11:78:90:f8:d5:29:09:4d:49:
66:97:1b:77:18:5d:f1:76:9c:b1:b0:75:07:9f:12:
b1:1a:81:d0:09:c3:13:d1:d9:91:0a:f6:2a:39:60:
f0:cf:69:d3:41:18:dc:a9:8f:e6:55:ec:bc:7d:90:
f4:32:08:8e:c8:ca:9e:fd:e5:e1:43:11:dd:e9:3b:
eb:9d:41:68:de:5a:b7:d3:ac:82:f5:81:0f:56:b4:
71:bc:c5:ba:5b:95:6e:8c:5b:39:d9:2e:84:38:b0:
50:da:75:70:5a:c7:a5:89:92:07:f8:4b:77:b0:1f:
48:f2:03:f6:5b:03:0b:f6:83:28:74:c1:10:07:1b:
22:4d:ad:85:a2:c0:9f:77:f4:da:35:cf:0c:7b:7a:
91:75:cf:c3:3f:9e:a2:d3:69:fa:73:b4:28:05:92:
ac:92:04:99:54:0a:f6:07:09:c6:13:1c:4f:22:0d:
d6:06:ac:0d:d9:f3:d0:b2:ad:d9:ea:05:02:47:8d:
85:b5:b6:57:e7:4a:2e:12:19:e1:2b:11:91:6b:f2:
e3:6c:67:0b:2f:8d:97:f0:21:ff:e9:b5:89:a2:6f:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:81:E2:76:26:FC:0C:4F:32:7A:81:98:19:71:B4:15:9F:4B:4F
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:2c:89:af:fd:b3:ca:1a:8d:4c:3e:8d:04:d7:a8:aa:77:
fb:65:9f:c2:3d:af:f4:eb:ff:c0:3a:95:ff:53:9f:7e:7a:f5:
41:9d:fa:21:1b:4d:c4:ac:5a:bc:89:50:8d:01:16:93:66:a1:
6f:c5:47:7c:26:f1:57:14:ac:fd:cd:4a:48:ab:05:e4:1f:e0:
dd:15:fa:45:3b:76:65:b1:05:1e:db:5d:c3:a2:89:04:dd:cc:
5f:43:a9:49:24:e6:b5:54:00:44:0a:f2:7c:fa:4e:32:91:dd:
c1:68:b7:e3:cd:e6:f8:20:a5:3b:a2:ab:cb:b4:1f:6e:83:ba:
7b:cb:05:af:87:65:41:91:6b:83:10:56:7f:32:b9:c1:f8:75:
a8:3e:7c:b7:78:d7:8e:cf:99:20:af:6d:1c:3f:df:a1:31:63:
b0:a5:c5:6a:f3:99:64:00:76:7c:1d:85:d7:79:59:57:e3:9c:
0a:dc:ff:e6:6c:f5:f5:9f:fc:33:65:8e:8c:f1:bd:6d:96:5c:
09:d7:0c:0f:b7:ee:01:d7:6e:a6:b4:76:b0:c1:0c:d6:aa:ca:
53:f8:1e:62:78:91:16:8f:7b:e8:fd:9e:03:c8:9c:ea:5c:1c:
76:33:ec:3d:42:f8:4f:a4:df:17:cc:6a:1d:22:b1:93:2c:7a:
69:aa:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:57:28 2026 by rpki-client