Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: Vc3Tds87mt5Q7TBWlBrCHmLCXSeScR4HZQUFBHOLJZI=
Subject key identifier: 11:84:4A:A3:44:33:3B:95:38:69:9D:71:E9:3C:7C:B3:20:B7:8F:05
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019D27DFAAB031A3BA199B84CDE7190DFD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 022E
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: Nz4tIDSPe/CbN6KkptF0gN5cWiERCFeOxc30v0+QxpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:aa:b0:31:a3:ba:19:9b:84:cd:e7:19:0d:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=11844aa344333b9538699d71e93c7cb320b78f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:8c:40:55:fd:b5:28:f9:5f:d5:da:9b:de:
20:2c:90:69:1e:36:2d:ff:97:9d:f5:b4:c5:5c:f6:
48:03:65:db:03:83:c4:18:a0:85:c5:88:e7:39:e8:
3a:bc:fb:02:b4:94:2f:2c:07:83:60:55:cb:ec:d4:
e4:29:fa:5f:b1:92:34:44:d3:29:89:f6:65:b7:14:
f5:09:6c:b9:45:51:1f:52:28:4c:01:d3:fe:f5:1a:
bb:f7:a5:bc:6e:91:6d:24:ce:dd:d0:8a:77:75:2a:
6d:20:0f:7b:fe:6d:4c:41:ef:a4:f8:47:55:8d:aa:
c3:c3:b7:77:fc:85:f4:2f:1a:63:39:fc:40:37:b6:
b0:1c:ae:64:8e:5e:04:8a:4f:9c:07:d4:f8:4e:b5:
97:25:34:e6:d4:96:39:60:dd:18:e0:a9:10:bd:c2:
45:2d:a3:af:75:6f:c6:79:4d:38:c9:c0:d4:b5:6b:
d3:e5:e7:63:3c:b4:8a:e6:05:9c:c5:ff:b8:cf:d9:
fa:16:6a:0e:56:6b:47:09:b7:42:45:a9:66:7f:c9:
ed:ba:77:14:24:9a:d5:48:85:53:b8:9e:db:c4:56:
c7:0b:ee:2e:ec:ae:c4:10:75:f0:c8:0b:c0:90:5f:
14:40:9b:85:e9:84:7f:0a:e6:ea:2e:6d:ab:c4:9e:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:4A:A3:44:33:3B:95:38:69:9D:71:E9:3C:7C:B3:20:B7:8F:05
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:bf:5d:8a:43:8e:5a:23:32:f5:57:e5:45:2b:a9:9f:34:
88:ff:d3:f7:72:dc:5e:b0:31:be:4e:8b:bf:01:2d:75:a8:52:
57:d6:4c:a3:5a:31:9e:62:ea:5e:df:3c:53:d3:99:8f:43:fb:
51:d5:d6:88:29:20:71:32:a9:57:c1:08:c9:ac:eb:f7:6b:08:
9b:ae:70:d9:7a:f8:1a:16:1f:12:a5:56:0d:9f:75:d4:21:ca:
42:3c:58:54:22:dd:01:6c:bf:13:23:0e:d9:32:31:e4:db:fd:
f7:ea:6d:a1:35:eb:ba:4c:b0:9c:23:a1:81:6b:5e:98:0c:ea:
04:72:90:c2:32:96:8b:b1:9a:fe:01:53:2e:1c:70:b4:1c:aa:
d1:b9:19:84:a7:fa:68:38:81:16:04:cb:ab:c1:5d:ea:da:cb:
4a:12:7c:8a:06:d3:5f:b3:4a:99:93:68:6b:b0:02:90:1f:c6:
3a:bb:15:f7:fb:eb:02:ed:66:6b:12:19:d9:5c:6f:68:93:c0:
bc:74:97:18:e3:be:3b:c7:df:30:ec:c4:3c:43:93:46:fe:7e:
c9:1d:33:67:6b:48:54:7a:4e:75:08:d2:8a:43:60:b3:b2:4b:
b7:f8:11:b3:13:6a:a4:c7:87:fe:9d:c6:d3:b3:8b:81:92:10:
9e:35:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:53 2026 by rpki-client