Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: JRpxKV9wlReUH/LqbyLL6aJ4jdYkupi7SzMO7oFrQGo=
Subject key identifier: 3F:EA:07:81:86:63:37:A7:53:D4:68:87:29:1C:D6:5E:FE:F0:1A:76
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019CA86A3C6C14DBF0389C6B842974FEACF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: CF
Signing time: Sun 01 Mar 2026 08:01:00 +0000
Manifest this update: Sun 01 Mar 2026 08:01:00 +0000
Manifest next update: Mon 02 Mar 2026 08:01:00 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: Cr6gQRLTIl/E6q5brvmr8q3H+w+acfgUu13ISHBMsh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:3c:6c:14:db:f0:38:9c:6b:84:29:74:fe:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Mar 1 08:01:00 2026 GMT
Not After : Mar 2 08:01:00 2026 GMT
Subject: CN=3fea0781866337a753d46887291cd65efef01a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:f8:7f:e0:2a:a2:f5:05:ad:f9:bf:08:b6:
b3:14:1e:0b:b0:2b:38:6b:41:5f:59:f7:0f:83:f8:
6d:6b:43:a3:98:55:2b:21:10:e3:58:54:ba:8b:09:
b3:48:4f:47:45:8a:a9:4e:e3:0e:ae:bc:8b:b0:b4:
34:07:5d:2b:fc:39:1d:e4:b1:32:8c:89:6f:d4:44:
ba:49:3a:ed:81:43:a0:3d:6a:8f:32:7b:d4:45:c6:
e6:30:14:f6:8c:d7:51:93:3b:eb:42:9f:ea:8e:c5:
f5:d7:ee:fb:ca:2d:39:d3:f2:7c:7d:3a:e1:9e:aa:
51:50:4d:d4:e7:a6:c6:3a:c5:4f:33:50:ba:f0:a7:
f3:b7:c8:04:e7:ec:45:02:4f:78:96:c8:94:00:d2:
74:1e:84:fc:b9:11:61:fe:63:dc:ec:28:37:01:55:
70:89:c3:f3:ef:7e:da:b2:7e:15:20:fe:96:52:dc:
9e:df:fa:2b:de:d5:f8:5c:57:66:ae:81:46:de:ec:
97:8c:99:9e:d1:4d:c5:1e:cd:59:29:85:49:cd:de:
bd:11:22:ee:74:4c:bf:33:ae:c4:40:42:8f:a6:c3:
a6:a2:6f:4e:63:24:50:73:04:ca:90:4b:49:a6:a1:
ac:18:99:91:69:68:72:1d:9c:9d:18:1d:86:53:64:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:07:81:86:63:37:A7:53:D4:68:87:29:1C:D6:5E:FE:F0:1A:76
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:ac:51:1a:e8:c6:1b:ff:34:01:20:fa:7a:54:79:4a:20:
3a:b2:d1:bb:a9:3a:58:18:81:a5:f8:d3:b4:54:67:12:fe:19:
3f:53:00:ef:6a:0c:c0:06:7f:c4:2c:8b:97:28:72:d4:b2:7f:
79:e3:b7:6a:d0:7d:b1:c9:1a:f5:2e:a5:8b:82:16:cd:f9:32:
e1:cf:42:2e:36:4b:7c:eb:50:a2:44:c2:2a:e3:e7:f1:06:97:
03:ff:41:ad:bb:67:22:0b:11:66:9d:b9:d9:28:fa:3b:9b:40:
8c:26:9b:24:8e:ed:cf:b9:f9:5f:96:91:72:da:32:9c:9d:94:
cb:b3:49:9c:fb:87:85:e6:3b:9f:be:2f:1f:df:38:30:4e:3b:
e4:7c:6e:b6:ae:67:28:61:9a:a2:55:91:fd:f0:4a:b5:50:a5:
79:71:4b:5c:54:d7:5d:b9:e4:59:72:c8:8b:fd:90:26:00:dc:
04:2f:31:52:af:7b:03:1b:f2:b5:9e:30:c4:e6:0c:81:4c:45:
50:30:f4:68:00:70:ef:3e:0a:c6:df:f4:63:58:88:cb:5a:67:
78:44:16:5c:3e:63:01:71:91:15:6b:62:4d:c9:38:ad:b9:a9:
1b:d0:5e:a6:68:58:40:82:a6:7b:ff:24:61:4b:cb:60:8d:07:
bd:06:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:28 2026 by rpki-client