Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
File: cteauEKpTJvypSwgz21pussxOKs.mft (raw, json)
Hash identifier: aukambw3TTzmrxPa8gzznV+UAvwkBF9AgcEmVt+O+CA=
Subject key identifier: 7C:76:8C:5E:4C:7B:C1:F5:17:2E:8C:64:4F:AE:49:F3:97:96:56:AB
Authority key identifier: 72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
Certificate issuer: /CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Certificate serial: 019F91DB1905447FEC745C262AD5E3F36A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
Manifest number: 036E
Signing time: Fri 24 Jul 2026 02:01:22 +0000
Manifest this update: Fri 24 Jul 2026 02:01:22 +0000
Manifest next update: Sat 25 Jul 2026 02:01:22 +0000
Files and hashes: 1: JpTdh8JALvBWYc8_K7JaQulTfAw.roa (hash: 0vWAg/gpXEmibXCV3vWhmE9W5NPkisq59umfbhZHy0w=)
2: cteauEKpTJvypSwgz21pussxOKs.crl (hash: mXB4XM5iSjiESdqHj1NqLZUyJUHeoO/Rz1nwcPbGcI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:19:05:44:7f:ec:74:5c:26:2a:d5:e3:f3:6a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d79ab842a94c9bf2a52c20cf6d69bacb3138ab
Validity
Not Before: Jul 24 02:01:22 2026 GMT
Not After : Jul 25 02:01:22 2026 GMT
Subject: CN=7c768c5e4c7bc1f5172e8c644fae49f3979656ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:a4:cd:a1:2e:20:e8:a7:0b:3e:6d:b4:b0:
42:3e:e2:66:11:d4:26:2c:e1:fa:ca:d0:99:28:c2:
a6:44:6c:cf:8a:0b:9c:cc:20:12:2e:6f:5c:5c:21:
56:0b:34:2e:c3:ef:ba:b3:b2:c1:fe:00:8b:77:8e:
05:03:8b:24:1f:ca:13:15:c9:e8:6c:f5:12:7d:3e:
e3:9d:d9:ab:da:f3:f1:9e:7a:6c:81:b6:31:48:08:
53:e9:af:a4:a2:c2:e3:f6:83:03:9c:39:d6:c4:ea:
e0:ea:92:07:72:59:0d:2b:e1:4f:cf:ba:50:7d:25:
4d:2f:db:26:e1:b0:b5:0f:a2:3c:b9:50:8f:a8:cc:
33:47:f8:41:9c:d0:ac:a4:4b:a9:b4:dc:0c:d8:b3:
9a:05:23:4f:99:a5:6e:70:8f:08:0d:31:9b:b2:90:
41:e6:c4:11:d4:4a:25:ea:fd:bb:29:59:e7:0b:fb:
cd:f2:ab:aa:aa:fc:11:66:3d:b9:51:1b:c0:2a:78:
e6:ed:34:2b:d5:55:66:82:54:ea:93:7d:54:7f:1e:
70:62:47:e1:13:a2:9d:c9:9e:0c:01:2f:90:38:55:
ba:22:7d:93:39:3d:fa:be:16:8f:2c:16:06:35:09:
32:eb:47:bd:6f:0d:55:82:96:f6:9f:14:fe:03:46:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:8C:5E:4C:7B:C1:F5:17:2E:8C:64:4F:AE:49:F3:97:96:56:AB
X509v3 Authority Key Identifier:
keyid:72:D7:9A:B8:42:A9:4C:9B:F2:A5:2C:20:CF:6D:69:BA:CB:31:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cteauEKpTJvypSwgz21pussxOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/31cbd2-edf0-4222-a3eb-32dd36e34bef/1/cteauEKpTJvypSwgz21pussxOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:63:0f:04:00:6e:0e:f3:48:d8:f3:94:3e:91:9f:aa:57:
fa:02:a5:e5:40:fd:fb:2f:1d:7c:fe:4e:40:54:f6:9e:b7:8c:
ee:2b:fe:4e:6e:8d:71:7d:5e:38:35:e1:72:a0:74:89:4c:63:
e9:4e:a1:f9:b0:2c:2e:7a:ec:86:92:9a:1f:a9:a0:e3:4e:02:
1f:cb:96:af:ee:42:6a:e0:bd:19:95:c6:62:7e:50:1c:fa:55:
63:13:f3:0f:91:ab:b5:7b:0a:9d:7d:d0:78:52:09:d0:1a:4d:
73:21:49:0a:79:26:77:37:5b:00:e0:f4:3f:8c:ad:f0:81:65:
e2:1f:f5:b3:e8:ff:0d:93:4c:50:82:dc:bb:b7:52:6c:28:51:
a2:ae:c9:7b:17:7f:c4:99:2b:67:0b:a1:18:5c:4b:80:ec:e2:
f2:b9:f3:04:7e:8b:27:42:d7:47:65:ae:0f:25:02:80:53:b6:
0b:99:4c:60:31:5c:cc:08:7a:d4:a4:8d:00:af:71:f2:e7:3b:
2f:76:23:07:74:39:d5:dc:b9:15:04:0d:dc:73:b7:8a:01:ae:
dc:c6:f4:8b:1e:98:68:29:51:32:47:bc:33:82:63:b1:7d:6f:
5d:3b:21:d0:e0:12:91:77:07:fc:87:83:5b:c4:49:d1:e4:a7:
59:93:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:26 2026 by rpki-client