Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: NDDnS4a5BQRyw37UrejICGz+vC+sh4Guz7fKqPTiuRA=
Subject key identifier: E9:51:8C:EC:C5:1A:AA:10:56:03:48:45:AE:B1:1F:95:33:7B:C2:A9
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019E1D22A68F85860D73C435B33B7D11A9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 02AD
Signing time: Tue 12 May 2026 17:01:10 +0000
Manifest this update: Tue 12 May 2026 17:01:10 +0000
Manifest next update: Wed 13 May 2026 17:01:10 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: qHeR0xSqvFlFoHgqNPmAaNoTQlGaPgz8LnJ+kGad1bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a6:8f:85:86:0d:73:c4:35:b3:3b:7d:11:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: May 12 17:01:10 2026 GMT
Not After : May 13 17:01:10 2026 GMT
Subject: CN=e9518cecc51aaa1056034845aeb11f95337bc2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:da:90:bd:4c:8e:22:5d:a5:aa:de:e6:c7:61:
74:f2:53:b3:00:37:e0:75:1f:e8:99:27:f4:e3:dd:
e7:dd:98:2f:e4:a4:70:f5:0d:d9:6b:d8:15:7f:0d:
0e:33:54:6f:ac:b2:2e:68:cb:b9:d4:45:fe:64:52:
52:4c:07:83:cf:91:a9:79:48:ff:a1:9f:9f:11:72:
88:ba:d1:07:d2:e6:57:40:23:49:4e:b9:f5:3a:5a:
76:bf:87:68:b7:d2:f8:02:4b:8c:97:1a:1d:dc:1a:
b3:df:df:19:35:03:7f:7f:35:e7:14:44:31:c1:1e:
72:b5:47:c4:37:ab:ae:89:52:36:5a:c2:40:15:6b:
7d:9b:c7:6d:2e:d7:c4:6e:c6:0b:db:6f:c4:b6:3e:
64:19:07:2a:dc:9f:bf:38:ad:31:08:c6:9c:51:f3:
b8:63:7b:06:6b:99:9a:2e:fa:b9:cd:b8:c8:79:49:
45:9d:d0:ac:5f:38:d3:2a:4f:65:bc:9e:fc:b2:a5:
23:35:e0:34:7b:42:4d:76:39:72:63:c5:bf:53:a9:
b0:b5:1a:fa:2f:b2:53:43:1a:2d:1f:15:ab:83:be:
c5:8d:60:08:e0:96:d4:29:6b:05:3c:bc:7b:a9:03:
b2:22:61:36:24:a8:7f:15:2c:58:66:a9:64:8b:e9:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:8C:EC:C5:1A:AA:10:56:03:48:45:AE:B1:1F:95:33:7B:C2:A9
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b6:f9:b1:28:03:ef:7d:4a:37:4b:6d:fe:8f:e1:31:fb:c9:
c8:66:11:d9:42:f6:05:f9:59:0d:f3:d1:d2:58:b0:6e:5b:d1:
13:4e:6d:3c:5c:f6:dd:e9:e1:08:d3:1d:59:c2:f7:9a:02:6e:
72:9e:81:b6:36:f5:0c:9f:40:9c:86:b3:0c:ef:5e:bf:fa:61:
7c:a8:9f:ba:8d:9c:fc:67:86:14:ed:ee:c6:97:03:49:d8:a6:
b9:d1:88:3a:3c:f0:ff:21:bb:1b:01:d3:19:da:2d:db:5a:d0:
c1:d1:96:79:cb:d9:ba:96:b2:45:1a:f2:8e:5e:3f:4a:4e:a2:
7d:df:42:d4:e2:97:fe:9f:3f:b5:50:6b:3a:30:87:84:fc:92:
cd:e5:7b:9c:ad:1d:df:9b:87:c8:bd:bb:f5:05:5b:f5:95:16:
57:20:77:80:d2:ba:3e:ff:ab:3f:13:29:2f:8a:f9:7d:e7:35:
5f:1b:0c:1a:b3:85:1d:80:50:58:31:5e:2e:3f:6b:c2:46:47:
3e:c1:e7:e7:ff:d1:b8:90:c9:24:38:3e:7d:7f:2c:81:b2:1b:
59:7a:ba:3d:57:c0:4a:01:ce:ea:09:14:a2:74:95:d4:ef:68:
9d:06:96:df:00:9c:de:7a:07:d5:f1:75:fe:f7:23:62:f2:e3:
c3:2e:25:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:12 2026 by rpki-client