Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: 10+3mY+vKJnUv/caRsdD9KvONNg9woeye8PQaJFoEeE=
Subject key identifier: 4F:A5:CB:77:8F:AB:2A:B2:57:51:7A:D0:6E:42:A8:F6:4E:9B:CD:68
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019EFD2744F3DE6B22C00202A11331C32CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 0204
Signing time: Thu 25 Jun 2026 05:01:09 +0000
Manifest this update: Thu 25 Jun 2026 05:01:09 +0000
Manifest next update: Fri 26 Jun 2026 05:01:09 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: VSbmERmXy9n+zGgiTge5mWNU/FbVZZI/VsaCtTQ0Asc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:44:f3:de:6b:22:c0:02:02:a1:13:31:c3:2c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Jun 25 05:01:09 2026 GMT
Not After : Jun 26 05:01:09 2026 GMT
Subject: CN=4fa5cb778fab2ab257517ad06e42a8f64e9bcd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:b2:23:bd:f2:a1:b5:7f:3e:4f:17:0b:10:
20:6b:32:c0:04:b4:18:aa:47:a3:b0:e8:8f:43:6a:
9c:9e:a3:b7:01:da:62:5b:69:74:27:a5:51:c9:1e:
28:51:38:78:09:af:11:81:e6:87:16:f0:6d:14:00:
4f:1f:95:7c:b4:34:ee:e2:0b:01:fc:10:59:31:21:
24:33:88:39:06:40:73:80:b3:80:10:ae:3b:67:68:
60:a2:fc:4e:cc:06:69:5f:f3:b3:11:ab:d3:14:c8:
03:86:11:44:ce:0e:93:4a:8b:37:3e:68:fc:26:9a:
95:54:06:5f:bd:c5:da:ee:39:68:08:3e:ed:20:97:
fd:69:95:20:1c:f7:fd:af:bc:d4:8a:94:06:27:4f:
ca:17:66:ea:02:3b:f0:a0:14:84:31:09:42:1f:3e:
a0:65:ab:26:d6:d2:49:69:d5:66:88:7a:a7:7a:99:
4a:aa:ad:be:72:9b:8d:94:bd:bd:08:8a:f6:47:26:
52:94:0a:cf:08:cf:09:ef:8b:3a:73:1d:9a:2e:e5:
c5:54:64:58:5e:12:84:89:6a:7f:6c:cf:db:3f:b9:
14:06:04:06:8c:46:9b:19:6b:16:ed:ff:7a:e2:b1:
34:25:24:94:ad:e6:fd:43:9a:46:c3:6c:49:f4:c1:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:CB:77:8F:AB:2A:B2:57:51:7A:D0:6E:42:A8:F6:4E:9B:CD:68
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a1:04:44:1d:67:0e:fa:d9:ce:64:1e:9b:34:d3:da:85:34:
79:8c:e0:a4:76:fd:96:4f:45:5c:01:4f:7d:ce:14:0d:e0:d7:
f6:e0:6c:d9:50:db:71:0c:17:c6:b4:f5:66:21:82:13:ee:4c:
c3:0a:5e:b6:38:58:39:fe:63:1f:97:49:ab:fa:18:a1:1b:a4:
25:5b:e4:a5:9a:1b:4e:16:32:d4:c7:d9:a5:34:8b:82:e8:9a:
39:52:b3:59:3e:82:38:0e:08:8e:b7:59:d4:ee:69:56:36:84:
3f:db:d5:8c:67:aa:62:52:02:6a:79:16:03:1c:6d:80:1c:ef:
7a:9c:66:97:6e:bb:39:5e:20:e0:11:26:8a:75:44:cf:54:ff:
11:95:9c:22:4e:6e:77:f6:80:f2:ef:06:dc:e0:76:76:4c:fc:
f9:2d:cc:de:96:fb:02:e5:19:bb:c5:8a:53:eb:4b:9b:39:0c:
af:ba:d1:c0:81:4c:c0:ba:35:cf:8f:78:92:34:61:07:23:25:
20:b1:8b:cb:45:09:2c:fb:a0:f0:94:54:c0:2a:c7:17:da:3f:
0b:fb:85:10:02:16:15:1d:62:b0:17:d2:43:24:21:f1:0b:d7:
fa:5b:dd:f8:91:f6:8d:9b:b5:bf:4d:2f:d1:90:43:8d:87:d1:
f9:a0:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:33 2026 by rpki-client