Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: TEiGGNdBnAX7CRAtVj82YBdbjprw2RD/kgWV/DR/Axw=
Subject key identifier: 4C:69:41:BD:1A:F9:45:65:D3:C8:C2:A6:79:1D:F4:BB:0A:53:ED:6E
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019CAA58CA1FDD2D8C73B80C3AFF7C7F9FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 01ED
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: TCd5cRBl4iVaLzUBifikGyKc43e9+pYVGbnI+yJ/Fvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ca:1f:dd:2d:8c:73:b8:0c:3a:ff:7c:7f:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=4c6941bd1af94565d3c8c2a6791df4bb0a53ed6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:e9:3c:4d:c6:23:2a:54:43:88:81:b5:22:
78:6e:d5:db:0e:75:a9:50:a6:89:80:9e:b9:38:b6:
3c:90:6d:82:97:b2:6f:53:23:4e:b2:50:00:73:af:
9d:fd:65:06:7e:be:65:34:d4:17:5e:b7:dd:54:31:
f0:5b:95:4d:14:77:3b:17:ef:9a:47:8b:f1:2d:fa:
d6:9d:be:67:b3:5f:ee:4c:61:40:3a:7b:bd:09:ac:
d1:58:68:b1:92:5d:10:96:5b:72:9a:80:c8:f3:ec:
8d:4c:43:3b:f3:7d:e8:df:f8:f8:56:79:ea:de:1a:
ea:37:27:3a:44:2b:07:4e:2a:8f:25:86:c8:00:2f:
5c:0f:d6:cf:71:ff:68:1f:b4:16:c4:15:11:d5:90:
68:2e:ac:a3:27:e5:97:eb:03:60:e4:25:b3:89:11:
52:c2:65:0e:e8:86:21:9e:be:65:a8:33:25:b4:e7:
ae:68:32:56:d3:d4:7b:63:5a:26:c8:35:57:c5:fe:
ed:92:f6:67:30:88:a1:72:05:50:16:ed:25:86:ca:
2e:6d:6d:bf:95:20:ac:d7:5e:08:8f:ad:af:76:82:
71:a7:e6:16:9c:ca:12:5d:b8:4e:42:f5:a9:2d:7c:
06:58:4b:24:04:e1:c6:e9:b2:f3:00:dd:3b:22:f7:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:69:41:BD:1A:F9:45:65:D3:C8:C2:A6:79:1D:F4:BB:0A:53:ED:6E
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:24:a0:dd:e4:83:30:a0:9a:f0:5b:a9:7c:65:74:9b:1f:f6:
f6:58:af:08:7f:f3:ac:8a:0a:f3:52:11:5c:db:85:d1:e6:99:
ca:a6:de:2d:f3:1a:cb:75:37:e9:70:ee:20:6e:57:8f:98:b4:
4d:d3:b3:4b:27:9c:7c:4e:cc:9c:d6:49:3a:fc:dd:ba:a5:94:
cd:e1:19:2a:3b:2e:d5:df:b9:68:b1:8b:e9:3d:d6:d8:54:a0:
d4:07:9f:9f:8b:55:8f:21:60:40:d1:af:70:ff:a0:7c:0e:cd:
55:c8:43:9b:1d:a4:41:43:97:a0:ca:f3:21:dd:7e:54:a0:fc:
16:12:83:91:a5:24:1d:52:35:05:1b:15:b3:76:64:a9:a0:61:
7a:14:e7:cd:7d:a5:2a:36:7b:01:b5:f4:67:3d:fa:cc:37:c2:
36:9e:17:7d:b6:e0:50:76:17:88:b3:7b:9d:57:64:0d:ed:d7:
7d:10:ff:a0:c8:1c:eb:02:17:3e:83:77:63:79:d9:a7:6d:d0:
8f:da:7a:f6:17:fc:46:0d:25:ae:09:92:a6:c2:6b:99:55:17:
9a:51:bf:02:ce:c3:b9:5f:56:ec:ef:20:66:01:fb:f1:16:f3:
bc:a1:75:8c:5a:2e:12:fb:62:b6:3a:b1:ba:0c:18:fc:2f:db:
57:a9:81:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMof3S2Mc7gMOv98f5/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDc5YWI4NDJhOTRjOWJmMmE1MmMyMGNmNmQ2OWJhY2Iz
MTM4YWIwHhcNMjYwMzAxMTcwMTExWhcNMjYwMzAyMTcwMTExWjAzMTEwLwYDVQQD
Eyg0YzY5NDFiZDFhZjk0NTY1ZDNjOGMyYTY3OTFkZjRiYjBhNTNlZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRbpPE3GIypUQ4iBtSJ4btXbDnWp
UKaJgJ65OLY8kG2Cl7JvUyNOslAAc6+d/WUGfr5lNNQXXrfdVDHwW5VNFHc7F++a
R4vxLfrWnb5ns1/uTGFAOnu9CazRWGixkl0QlltymoDI8+yNTEM7833o3/j4Vnnq
3hrqNyc6RCsHTiqPJYbIAC9cD9bPcf9oH7QWxBUR1ZBoLqyjJ+WX6wNg5CWziRFS
wmUO6IYhnr5lqDMltOeuaDJW09R7Y1omyDVXxf7tkvZnMIihcgVQFu0lhsoubW2/
lSCs114Ij62vdoJxp+YWnMoSXbhOQvWpLXwGWEskBOHG6bLzAN07IvfGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExpQb0a+UVl08jCpnkd9LsKU+1uMB8GA1UdIwQY
MBaAFHLXmrhCqUyb8qUsIM9tabrLMTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWIt
MzJkZDM2ZTM0YmVmLzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zMWNiZDItZWRmMC00MjIyLWEzZWItMzJkZDM2ZTM0YmVm
LzEvY3RlYXVFS3BUSnZ5cFN3Z3oyMXB1c3N4T0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwCSg3eSD
MKCa8FupfGV0mx/29livCH/zrIoK81IRXNuF0eaZyqbeLfMay3U36XDuIG5Xj5i0
TdOzSyecfE7MnNZJOvzduqWUzeEZKjsu1d+5aLGL6T3W2FSg1Aefn4tVjyFgQNGv
cP+gfA7NVchDmx2kQUOXoMrzId1+VKD8FhKDkaUkHVI1BRsVs3ZkqaBhehTnzX2l
KjZ7AbX0Zz36zDfCNp4XfbbgUHYXiLN7nVdkDe3XfRD/oMgc6wIXPoN3Y3nZp23Q
j9p69hf8Rg0lrgmSpsJrmVUXmlG/As7DuV9W7O8gZgH78RbzvKF1jFouEvtitjqx
ugwY/C/bV6mBzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:50 2026 by rpki-client