Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: alLPmNlnBZkmXlw/5Vlg8WU+K6bxZ9DFoEjilBxSUvM=
Subject key identifier: F9:A5:30:1F:40:0A:B2:71:D9:25:08:B9:09:B1:D8:05:5F:A0:46:73
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019DA566B73E3EF6AF5F3DD02CD0E45B1FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 0152
Signing time: Sun 19 Apr 2026 11:01:05 +0000
Manifest this update: Sun 19 Apr 2026 11:01:05 +0000
Manifest next update: Mon 20 Apr 2026 11:01:05 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: 4TBqr7v69W+7OVZ8++5umqi4q0IgXjJTcJQrHtjhgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:b7:3e:3e:f6:af:5f:3d:d0:2c:d0:e4:5b:1f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Apr 19 11:01:05 2026 GMT
Not After : Apr 20 11:01:05 2026 GMT
Subject: CN=f9a5301f400ab271d92508b909b1d8055fa04673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:4e:08:e8:6c:34:f2:4a:69:fb:28:68:1f:
41:e9:2b:65:08:fb:78:9b:4e:6a:3e:0c:9c:d3:f0:
29:6c:ce:7d:1c:20:e4:e0:2d:25:7d:38:fe:19:e2:
7a:81:4a:39:bd:03:91:c8:2e:c4:ee:76:76:a6:7f:
5e:e5:9d:d5:08:e9:d5:17:ed:90:db:d9:38:66:68:
9a:38:e4:0a:41:9c:37:64:23:5a:8c:fd:3a:52:98:
41:c6:b2:7d:bb:f1:a0:b9:61:4e:3d:88:b9:af:98:
c6:38:9f:5f:0d:23:72:13:bf:54:98:c0:bd:1a:cb:
4d:74:21:b6:f3:bb:1d:64:e8:0e:31:72:9d:78:6d:
38:f3:fe:ec:f9:52:49:e4:b6:51:fb:35:95:5f:aa:
e8:14:d9:6c:a4:32:e7:3d:b0:76:c0:87:15:15:d7:
9f:78:dd:5a:95:71:3e:68:d3:e1:5b:c9:fb:5a:e2:
98:1c:60:ac:96:ad:ec:86:a0:ae:5f:3b:3b:31:22:
01:50:ce:9d:d6:89:1d:6e:c9:71:7d:b9:c3:13:a8:
13:5a:4b:83:70:e9:16:cf:4d:99:d9:e4:95:df:75:
da:6a:9e:92:3d:76:16:ef:10:8a:9d:58:54:10:bc:
47:28:47:38:ce:f6:d9:7b:ee:07:ef:a1:9e:35:a1:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A5:30:1F:40:0A:B2:71:D9:25:08:B9:09:B1:D8:05:5F:A0:46:73
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:9a:0f:57:75:b5:08:2f:5a:68:d8:db:48:30:90:ce:3d:
30:0d:3e:37:7d:02:06:08:6a:78:4c:ff:51:96:5e:47:fe:9a:
f8:41:0d:64:f3:67:60:56:a5:18:1d:fd:9c:3f:d5:ea:61:e3:
95:ed:90:a2:aa:fa:c5:df:c5:b5:25:a8:09:5d:1a:40:c2:83:
f3:8a:2a:75:93:19:bb:56:2f:6c:b6:b8:e4:e6:92:c7:82:24:
15:49:46:16:7b:e4:b6:34:a6:f0:4e:d6:33:34:ea:1d:9f:8d:
a3:dd:60:a9:2f:3c:16:a8:2c:4c:97:bf:50:31:3b:b2:3e:64:
50:3d:3f:9d:13:b9:d0:e9:8c:7c:3e:01:52:e7:98:c1:1f:57:
3a:e1:59:96:8a:22:1e:d0:75:09:66:2b:da:d8:d5:2c:59:4a:
a7:d8:65:59:85:90:be:bf:5f:83:cf:65:6e:0c:47:cb:95:08:
ac:75:bc:6f:d5:dc:1c:6e:44:55:7e:f9:83:79:9c:6e:2f:d6:
33:66:1f:02:be:16:51:ee:23:92:40:d1:fe:dd:77:f4:34:03:
c2:3f:98:aa:76:81:4f:79:25:a2:9a:c0:ac:60:0e:85:0e:7f:
22:f6:59:77:4a:ec:5c:a3:21:51:97:68:21:8c:c8:98:ff:90:
c2:8d:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:53:04 2026 by rpki-client