Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: yUOW4mCIua/VrB/GP231wHyPHAuIJ9FBkF5JE29UY6g=
Subject key identifier: 90:65:38:77:AB:B3:00:83:48:CA:3B:F7:C6:91:AE:68:05:54:E3:CA
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019DDD68438DCE663FD07F7864CFBB3E2CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 016F
Signing time: Thu 30 Apr 2026 08:01:30 +0000
Manifest this update: Thu 30 Apr 2026 08:01:30 +0000
Manifest next update: Fri 01 May 2026 08:01:30 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: /nfnx8jcb+vg9GtZhCEAncNIKdoZqCRweFbiEHUXTyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:43:8d:ce:66:3f:d0:7f:78:64:cf:bb:3e:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Apr 30 08:01:30 2026 GMT
Not After : May 1 08:01:30 2026 GMT
Subject: CN=90653877abb3008348ca3bf7c691ae680554e3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:f4:4d:b0:82:8b:1b:72:28:9e:6c:88:bf:
02:62:8b:cd:57:47:e3:23:fb:09:d2:98:9a:53:38:
8b:df:c5:82:f7:61:a3:2f:94:44:20:06:4a:0c:45:
88:2e:7e:c0:a9:cf:2f:6f:73:ea:f5:46:03:74:6c:
50:ff:d6:67:8e:27:96:97:4f:c2:ea:6b:b8:65:84:
aa:f7:7b:6b:86:e0:d2:bd:0e:c2:3a:90:bc:a7:07:
da:0e:75:80:b5:22:6f:ab:2c:8e:06:fa:57:0d:16:
35:d2:7b:4a:cd:76:23:0b:9f:b4:7b:20:4c:1e:ba:
ed:46:9c:af:2f:d7:78:9e:1e:d0:61:42:ff:e0:ab:
07:40:fa:da:f2:ab:e6:16:ad:ab:cf:6e:60:40:a1:
56:2a:4c:ca:67:56:d4:c8:05:4b:ef:7b:dc:71:e8:
b1:23:6e:9f:bd:8e:47:38:91:03:fd:ba:c3:bc:a3:
4f:28:5d:90:6f:e0:a7:f1:f0:c4:09:2a:e0:f1:59:
fb:b9:f1:76:ee:c0:6d:bc:23:2d:72:be:02:22:a4:
8d:53:79:12:9f:40:ea:a6:b6:11:fd:0c:52:c2:8f:
3c:6d:42:d6:c7:b0:71:d7:18:64:73:38:ef:fb:ce:
69:35:68:23:62:94:74:b3:b3:c1:9a:f1:a7:d8:1f:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:38:77:AB:B3:00:83:48:CA:3B:F7:C6:91:AE:68:05:54:E3:CA
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:15:ab:b7:6c:e8:1b:0e:8c:e8:63:da:76:c8:4c:9c:d1:
ea:94:e0:0d:35:a5:53:b9:f8:4d:0f:d9:cf:5b:6f:9b:1c:87:
2c:b0:90:09:a2:0c:e5:bd:a1:58:e5:2a:5e:9f:e4:7b:3e:ff:
f2:c2:8b:25:12:fe:49:20:a1:be:99:71:22:04:0a:34:8e:0a:
5e:36:52:14:32:b0:75:6d:d5:7e:50:61:f9:1a:14:b6:17:4a:
12:2d:a6:6e:80:c2:62:19:a6:1a:e2:26:1c:22:c3:f7:01:9c:
f0:eb:8d:9a:ad:ab:d0:1d:0c:4c:10:59:c1:42:9f:ad:ee:d3:
05:25:7d:a4:0b:cb:64:d4:e4:c6:c7:7e:58:55:74:ca:ce:5c:
03:8c:38:70:8f:54:5b:66:04:f2:81:ca:78:a3:6b:e7:6a:1c:
21:c0:ce:e1:9f:6b:c9:a2:26:52:40:86:6c:1c:80:41:54:6e:
c2:df:8e:9d:22:d1:ec:ea:66:bf:83:fb:21:58:1d:eb:a9:c4:
d7:47:25:a6:dc:98:34:3a:de:d0:9e:a1:73:97:6f:e5:6d:01:
67:ba:50:a3:ac:e6:a8:39:40:8b:b5:28:42:a5:6d:bb:1d:63:
38:a3:16:32:d4:e1:1f:cf:8b:c0:da:ef:4e:86:3c:68:e7:d0:
1e:70:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:05:56 2026 by rpki-client