Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: DKjkjP3cM7jFVfyoNGRH1MQICVgo1zr4nbd2z5SVSvM=
Subject key identifier: FB:48:86:4B:D4:10:37:DC:72:C3:0D:3F:8A:EC:DD:FC:C1:9F:52:66
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019CB7DD985AE7486E41894F52DFE515D585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: D7
Signing time: Wed 04 Mar 2026 08:01:18 +0000
Manifest this update: Wed 04 Mar 2026 08:01:18 +0000
Manifest next update: Thu 05 Mar 2026 08:01:18 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: XusRW/ggREL7vXymJUAuabsH5dUMdxGGk50LfolHShM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dd:98:5a:e7:48:6e:41:89:4f:52:df:e5:15:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Mar 4 08:01:18 2026 GMT
Not After : Mar 5 08:01:18 2026 GMT
Subject: CN=fb48864bd41037dc72c30d3f8aecddfcc19f5266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:14:9c:06:8f:44:c9:2f:a0:b4:5a:60:72:
df:20:9d:10:67:27:ec:c7:eb:e2:a7:7a:43:03:b6:
be:fc:34:6f:c3:a5:b8:d5:df:c9:7e:ad:66:34:01:
af:3e:27:03:b4:1b:98:7c:c7:7a:8c:62:68:07:55:
94:a9:66:49:8d:13:02:33:f9:bf:ba:fa:f7:f3:8a:
35:ca:60:70:41:11:c0:53:8b:7c:b8:a7:5a:e3:6d:
e1:ff:b4:d3:e5:c4:ec:f6:2f:81:0b:16:a0:f0:58:
15:81:b8:b9:fb:23:a2:2d:70:7f:a5:96:e0:bd:56:
fc:93:1d:05:dc:94:57:fc:b4:35:bc:a1:72:ea:2e:
df:c3:88:be:14:5f:ba:92:9b:98:69:f4:cd:ca:96:
b1:64:ac:01:eb:cd:6f:e0:74:2a:17:15:e7:21:c2:
d8:f6:c9:52:4f:51:7d:be:b2:d7:a8:04:de:92:68:
87:fa:74:ad:a0:b2:9d:de:cb:05:c5:3e:ce:7c:73:
e8:42:44:1a:4f:cb:c9:e7:84:49:e6:5c:8b:29:87:
68:78:a1:e7:c4:36:e5:cb:af:18:d3:bf:b3:d5:47:
0c:62:fe:d6:4d:94:c1:60:86:14:0f:5b:07:25:94:
8a:e8:93:2f:f8:46:40:b2:84:e2:e6:25:5e:30:58:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:86:4B:D4:10:37:DC:72:C3:0D:3F:8A:EC:DD:FC:C1:9F:52:66
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:56:ea:bc:7e:a3:d1:96:4c:1e:27:84:95:7a:6c:13:7d:a2:
90:2b:6b:2e:9e:4c:b8:19:46:c3:22:49:71:e8:85:5c:95:a8:
94:2b:a2:4d:dc:f7:40:f8:a7:08:e0:70:7c:f7:bd:ca:5e:87:
b3:ec:ad:7b:95:73:df:f0:f8:ec:61:df:72:9b:d8:f4:a6:9c:
b3:a7:7f:a0:25:98:4b:c4:9c:bb:22:a3:c6:a1:b5:29:aa:65:
5d:95:38:be:59:e4:4d:3e:bd:52:6b:5b:5c:3d:7b:7b:e3:b6:
94:fd:70:cf:a8:fd:f8:70:3f:d1:57:6e:fe:06:ec:24:d1:cb:
3e:26:2f:b3:73:a6:82:b2:43:00:47:81:c7:a1:20:aa:29:cb:
4a:87:f6:f4:f8:ce:16:59:44:6a:7a:fe:17:2d:c8:16:76:69:
ba:b1:57:37:f7:ae:20:40:44:52:57:8f:34:5f:81:00:4c:a6:
98:09:2f:a4:52:af:28:b9:b8:29:23:01:ee:9f:ce:3b:45:6e:
ea:e5:e1:45:c6:ea:cd:6c:2a:50:61:83:97:65:d1:fb:ed:23:
01:01:cd:2e:5f:7c:4b:c9:fa:70:11:75:df:58:70:44:c3:22:
31:31:46:0f:e5:62:86:2a:e7:a3:11:74:c7:c3:00:3d:c9:99:
00:28:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:05:00 2026 by rpki-client