
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: +HJ4vVHbV+Q+54MWpmTjjxI6C9lLxbY9Ghv+ZP4dMj0=
Subject key identifier: 51:C2:2D:3C:4D:15:74:95:E9:E6:55:FC:38:BC:FA:A1:5B:A1:B0:B6
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019FF8D9E00AD41DDCF4E9E2081DFB266027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 0287
Signing time: Thu 13 Aug 2026 02:00:55 +0000
Manifest this update: Thu 13 Aug 2026 02:00:55 +0000
Manifest next update: Fri 14 Aug 2026 02:00:55 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: 3-exyexQ1xdpKGbpl-0EQUeMOn0.asa (hash: gMyFmlJorWF/kH2i/GMMziUsSiuXvqY0GqALAKfezjo=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: VTLdKZwoa3QTT2mfXRmhhT9Pt1nNVeHMmIbb3Fpcles=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:d9:e0:0a:d4:1d:dc:f4:e9:e2:08:1d:fb:26:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Aug 13 02:00:55 2026 GMT
Not After : Aug 14 02:00:55 2026 GMT
Subject: CN=51c22d3c4d157495e9e655fc38bcfaa15ba1b0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:ea:8b:f8:fc:d9:60:c3:c8:7f:cd:10:43:
27:00:d0:c9:5d:60:ad:68:5d:f1:5e:5d:d2:5a:a7:
1f:50:a4:83:08:ca:42:73:33:17:43:67:ec:fc:48:
b3:fd:78:d1:e6:19:7f:10:58:5b:ea:72:12:43:df:
0a:27:57:20:dd:be:57:80:a5:18:1b:77:c9:b1:19:
c5:4d:2d:7e:f9:14:74:f2:68:1d:7e:d3:4a:50:99:
52:c4:2f:d5:3c:67:5c:ed:ba:c8:10:09:87:21:f0:
4b:24:6d:d8:e6:ef:47:12:d5:b2:64:35:5e:71:11:
1a:e1:4d:3a:7d:c7:1d:de:98:04:98:bc:55:dd:7f:
64:d4:d9:4f:15:52:93:8c:28:e6:9c:2f:06:fc:a6:
fd:4a:d8:32:03:9a:1f:ff:a2:e7:b1:8f:13:5a:06:
cb:a4:08:12:96:22:19:4a:68:20:bf:b1:6f:33:a5:
33:1a:cb:46:a9:ee:79:18:81:95:5a:61:e0:1d:10:
a2:28:32:d8:89:c9:5e:07:a4:79:cd:b2:bb:e5:44:
84:bc:4a:13:75:88:28:cd:a7:74:ae:93:14:67:57:
73:1f:56:1d:de:a2:6d:5f:4b:af:71:d4:5a:b4:49:
d9:5e:97:16:e1:77:46:46:7a:34:34:70:da:d6:82:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:2D:3C:4D:15:74:95:E9:E6:55:FC:38:BC:FA:A1:5B:A1:B0:B6
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cd:c5:ce:1b:4f:4d:58:f4:47:cb:0c:fc:36:d4:d9:88:23:
ce:3f:e4:7e:35:10:d2:e2:b6:ef:ef:de:ef:02:37:69:59:c4:
34:88:f4:6a:80:75:b9:cd:73:89:a5:bf:c4:0b:89:21:0c:8f:
dc:c5:7d:68:dc:1e:88:2c:0e:01:62:23:c4:7a:29:01:cd:01:
ac:e0:13:7e:e5:32:01:87:cc:81:97:2c:94:64:e4:68:a0:84:
0a:9d:fb:a8:7f:69:1c:d8:3c:86:0b:e9:90:1b:29:28:94:57:
92:88:db:f7:5b:14:98:ad:10:b9:a6:05:0f:da:6a:16:e7:96:
f0:b1:b0:c1:ed:52:92:2d:09:f3:ad:eb:be:3c:18:de:c9:19:
0d:95:9a:04:ef:0c:e1:3e:82:2f:3a:df:aa:55:a5:9c:14:1d:
74:4a:a1:1c:7c:f2:ab:0e:d6:38:bf:2c:52:5e:60:90:71:9b:
0b:45:a4:37:48:9d:2e:88:73:61:8e:11:75:88:ae:2d:22:00:
f7:f6:5b:cd:43:08:51:42:cf:d2:b0:e3:2e:22:bd:ea:f3:9b:
92:ea:2e:64:e3:84:94:a5:3a:e7:1a:cc:bb:b9:47:5e:b3:0f:
ca:08:91:ba:e5:01:07:89:a2:c2:26:f7:cb:9c:5c:09:1a:d3:
12:45:a7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:46 2026 by rpki-client