Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: CXI1clDjY+nCA4mQThPE3ap2WOMWLaqYc2Or91J25Es=
Subject key identifier: 9B:ED:3A:2B:9C:59:77:9C:17:83:A1:66:B5:A9:26:8B:C4:32:1F:B8
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019DA566726542BDE8708F6FDB043AF59304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 026F
Signing time: Sun 19 Apr 2026 11:00:47 +0000
Manifest this update: Sun 19 Apr 2026 11:00:47 +0000
Manifest next update: Mon 20 Apr 2026 11:00:47 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: 6POJcGHXbFJfklDeIJg4FO5X8HtzOkg+f28CexDjqrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:72:65:42:bd:e8:70:8f:6f:db:04:3a:f5:93:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Apr 19 11:00:47 2026 GMT
Not After : Apr 20 11:00:47 2026 GMT
Subject: CN=9bed3a2b9c59779c1783a166b5a9268bc4321fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:98:d8:ef:cb:9a:4e:87:5e:e2:39:8d:9d:
08:a9:4a:72:99:78:25:c3:ad:35:90:43:06:89:98:
fc:9a:5f:4a:81:58:59:16:17:03:f2:5a:bb:0f:17:
fd:80:b9:9d:3a:ee:8b:3e:22:5d:74:df:48:c0:ef:
f5:97:05:46:9d:17:71:e2:da:4c:f6:20:33:b7:c6:
e9:95:b1:9a:c1:37:80:31:73:c5:16:04:5e:30:81:
77:d3:58:ee:f9:51:3b:46:8d:15:b8:aa:e7:8e:5c:
9e:53:1c:6c:30:c5:32:51:1a:0f:72:44:76:24:94:
21:28:6e:3f:0a:bb:4f:85:b4:00:79:1d:62:28:6d:
ff:40:29:b4:a1:ed:18:8d:26:94:0f:76:28:5f:fd:
dc:b2:fc:27:f5:c0:19:e8:52:3c:49:67:44:2c:14:
3b:07:16:3f:8f:32:fb:19:82:7b:9f:55:f1:fa:37:
f5:b7:55:df:d2:63:69:4e:28:b6:c8:fc:ad:2f:5c:
9d:0e:08:49:ac:f8:b8:8b:2d:84:63:6e:41:14:57:
ed:9e:44:bb:ce:62:55:1e:83:20:ce:02:58:bb:ab:
fe:d1:a9:ae:47:a5:c2:38:60:af:46:f8:bd:25:b0:
46:79:22:07:c7:8b:58:2c:5c:0b:de:f6:a6:11:a1:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:3A:2B:9C:59:77:9C:17:83:A1:66:B5:A9:26:8B:C4:32:1F:B8
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:91:a6:a5:5b:5e:13:3e:61:6f:a4:bc:ac:b2:0d:12:b3:
03:c5:98:0f:c0:c2:4e:c5:8c:cc:a8:b9:4e:29:6a:46:ff:f5:
3a:99:d9:73:ed:00:a4:e1:78:da:33:1c:0a:78:39:16:04:d0:
9e:66:ec:3b:d2:60:1e:3a:79:b9:12:09:27:dc:e0:dd:64:a9:
4e:80:6b:4b:e9:5e:b2:ec:ec:5a:71:f6:bc:37:41:37:5c:f9:
bb:31:9f:19:29:54:04:da:82:b6:9d:d2:e8:77:85:a9:d7:79:
04:1e:14:bf:9b:86:5c:09:74:c8:29:be:93:88:c7:42:29:ec:
76:30:85:73:a4:5a:83:81:85:a7:7f:a5:71:40:b8:79:56:c2:
6f:b4:32:2e:b8:22:5c:2e:06:30:b0:84:42:16:64:9a:e1:ee:
65:5d:b1:64:c4:7a:af:67:15:5a:c6:75:80:ff:50:30:2b:07:
f2:a5:99:43:89:f1:46:d7:75:0e:5a:f5:56:40:27:de:e6:42:
8d:2b:08:bc:6b:76:e7:31:6d:aa:72:39:f4:24:7f:37:b7:18:
e2:a0:c2:67:43:82:a8:d2:30:ef:36:32:c2:5b:60:05:42:9b:
c5:6b:1d:76:83:0a:a1:20:31:3c:a9:7f:07:91:72:b6:0a:f3:
b5:e4:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:54 2026 by rpki-client