Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: pvs+EiTGhVpw7vmvHDoaH7RGUgpgzzesCOaue60LRLQ=
Subject key identifier: 8E:32:5E:2D:AB:EB:64:7D:23:05:4F:16:1F:AD:4C:A2:27:57:BF:2F
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019DCE992EC20590087E67BF6070D9780481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 11:00:38 +0000
Manifest this update: Mon 27 Apr 2026 11:00:38 +0000
Manifest next update: Tue 28 Apr 2026 11:00:38 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: DoO16g0wkXSlzTKFaJotXinmut2OXCzREMW6FrTbzxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:2e:c2:05:90:08:7e:67:bf:60:70:d9:78:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Apr 27 11:00:38 2026 GMT
Not After : Apr 28 11:00:38 2026 GMT
Subject: CN=8e325e2dabeb647d23054f161fad4ca22757bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:bd:ae:5b:f4:34:35:b3:f6:1b:00:d6:32:
f0:a0:3e:51:ab:1b:d3:d7:94:7b:f0:38:59:26:53:
c0:4e:2c:26:a9:ad:2f:5d:0e:29:50:15:42:dd:ee:
a9:42:14:a8:87:58:fb:c1:2e:50:bf:d2:1b:8e:2a:
ee:8e:7b:fc:b0:b5:33:4a:90:3f:57:bb:a9:da:7b:
3e:bc:18:32:54:f3:49:36:53:29:9f:f6:23:f9:ab:
23:e8:94:b4:e8:2c:da:2e:aa:f1:75:8b:42:1d:d9:
bf:ea:d7:e3:e4:ea:cb:11:7f:f7:de:9a:10:36:b5:
69:a0:3c:45:5b:39:3a:9e:1b:dc:81:6c:2a:b9:31:
44:08:40:8e:1a:8a:0e:82:f2:99:b0:d2:f6:12:e8:
0c:15:3b:eb:a8:d5:09:7b:6a:2f:03:b3:2d:6b:ee:
2b:9c:82:67:d5:80:eb:08:36:81:eb:88:ea:71:c9:
a1:31:17:80:33:7f:a0:7e:8b:bb:be:86:d2:cc:ac:
7d:e5:ed:75:3c:d2:ac:bc:0b:36:23:1a:a0:d6:b3:
52:9a:9c:de:06:ef:8f:ac:eb:6d:8c:ad:20:89:e4:
da:1e:49:86:fe:2d:55:d4:29:97:61:33:fd:88:d2:
3f:c8:94:d6:a0:b0:24:f0:c1:6b:af:70:9a:44:df:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:5E:2D:AB:EB:64:7D:23:05:4F:16:1F:AD:4C:A2:27:57:BF:2F
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:af:5d:03:05:25:6b:b6:35:14:70:9a:21:24:32:f0:c1:99:
b9:fa:7c:5d:ec:5f:38:84:c4:fc:4f:c8:a1:c8:d6:93:0c:8e:
8d:cd:a1:de:cb:47:d0:b4:a9:e4:a6:77:2a:27:70:b1:84:0b:
a6:16:94:be:9a:d0:b3:eb:d9:87:91:0c:10:58:4c:f8:76:1d:
e8:6d:68:f9:a6:29:34:cc:45:c2:7c:75:6f:73:5e:d9:8f:bd:
6c:98:fe:1d:df:4d:84:0c:5e:83:f2:5c:f5:21:e7:86:08:d3:
17:91:3b:32:51:58:a3:f8:a3:a3:cb:bb:0a:17:6e:94:69:c0:
c3:a1:68:90:b6:5b:bd:8c:09:cc:e3:20:61:b1:77:03:6d:3f:
9e:dc:db:5c:4a:5b:4a:53:57:e3:14:a5:42:96:0c:3a:00:19:
18:ac:f4:98:e7:9b:ea:de:82:f2:ee:31:19:37:06:87:b8:97:
8c:07:92:d6:61:b1:b2:93:da:66:40:65:88:b4:50:98:92:f6:
1f:5e:08:ba:9f:0f:41:ec:34:a3:f9:ce:d3:7f:d9:69:04:9f:
5b:fe:f7:d1:63:83:2d:bb:b6:4f:e0:66:c3:4a:41:da:a0:df:
29:41:87:40:c0:90:eb:ea:d1:28:1c:41:6a:eb:b6:22:21:cf:
11:ba:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:51 2026 by rpki-client