Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File: cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier: uG5+SI9Gg0NsAfrBdl6koMCG2TSotiJN76KvXipbz+k=
Subject key identifier: C5:7E:CF:01:6C:D6:F4:E0:E3:63:3C:16:E2:AF:BD:D0:2C:EC:50:9D
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer: /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial: 019D27DF9F8480445D07BBFE3127CD4614EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number: 148A
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: T-Qpf2laS9B4oqA-l43pYYoUJBk.roa (hash: t46DpvrWC/vui809tnn3ajl3f+hjX2aU4WQg5zWnjoA=)
2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: gIzTqEO8QQouvl33qmNF6cefR/23bOm8vNY2/Vh+9RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9f:84:80:44:5d:07:bb:fe:31:27:cd:46:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=c57ecf016cd6f4e0e3633c16e2afbdd02cec509d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:af:77:e4:9d:c7:50:f0:f7:0d:2c:20:82:
d4:38:a6:d5:ea:35:bf:b6:3b:4e:cc:c2:4c:00:e8:
68:05:79:6a:85:b2:b7:92:f6:59:f7:05:00:24:44:
f2:4f:67:0f:b4:d3:20:0e:aa:03:a9:ed:1a:e7:ff:
9e:9b:56:17:e4:99:af:2c:cb:a9:13:20:57:7b:ab:
fc:7b:31:e7:a7:68:c5:4a:c4:00:4d:56:27:b1:31:
20:fb:c0:f8:92:60:28:30:6a:bf:f5:82:fc:e1:88:
ce:c8:85:02:99:9d:97:e4:76:b2:78:ed:7d:5e:ed:
38:bd:2e:37:cf:84:56:6b:72:51:33:dc:fa:99:18:
46:f9:1a:f2:38:77:a3:d4:23:71:80:c4:c7:d1:c8:
1c:f7:10:84:5e:fb:6c:f2:8c:2a:80:99:13:80:41:
be:f5:c7:1e:da:3e:d0:f0:0c:aa:b2:d0:04:0d:22:
a6:3d:6a:e6:75:1a:f2:fa:dd:d2:ce:f9:cb:94:e8:
a6:61:89:9b:a0:28:81:eb:cd:0a:f3:c6:d2:f8:37:
21:37:81:d5:92:96:c7:45:7e:01:ea:75:87:9e:f7:
78:53:b9:78:ed:24:c2:99:2f:76:8f:b0:87:63:ea:
ba:c2:1d:66:4e:66:fe:1a:fb:03:40:08:16:bc:cd:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:CF:01:6C:D6:F4:E0:E3:63:3C:16:E2:AF:BD:D0:2C:EC:50:9D
X509v3 Authority Key Identifier:
keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:20:00:9a:f3:14:a1:b5:b1:f9:ba:5f:d2:8f:de:77:1c:dc:
00:e7:a5:ca:54:1f:8d:3c:2e:19:aa:c5:53:6a:77:db:11:b9:
01:6d:4c:e5:7a:56:58:e0:44:76:1b:a4:07:39:40:cd:49:28:
d0:85:00:ac:e4:38:81:9a:c7:3a:6f:62:de:8e:80:e6:31:4b:
7d:22:a4:c2:36:4b:f0:5a:a8:1e:03:70:c9:6f:9d:06:59:dd:
ef:38:3e:6c:fa:4d:b0:a8:d4:2b:c8:6d:a7:86:92:cd:9e:ed:
d8:0e:57:4f:ef:4e:a8:dc:3d:85:7f:4f:58:16:6a:d5:ee:c7:
2c:f5:c3:6a:86:a9:fc:44:fc:52:d9:10:55:c1:0f:56:97:a5:
66:46:a3:59:57:dc:43:c8:7e:0c:8d:0b:25:1e:a5:61:2a:ca:
52:f3:b0:fd:9b:cd:1e:9a:53:03:60:dc:2c:b5:8d:8f:8d:ad:
4f:42:97:bc:97:32:15:b5:74:2c:a6:8e:a3:5a:cd:7f:71:6b:
9d:10:4e:11:a8:04:ed:21:ca:93:ba:92:05:56:b9:0c:94:75:
1c:7e:d9:cd:e6:3a:37:e1:a9:93:5e:9b:22:a3:90:96:9c:71:
69:2d:a8:57:6f:ec:84:b2:4d:2b:e8:84:a3:f3:a5:4b:18:3c:
bb:3a:a3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n35+EgERdB7v+MSfNRhTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmI1ZTU0ZjI3NDhlY2I1ZDg2OThkMzc5MzM5Y2MxNWYz
MmI4OTMwHhcNMjYwMzI2MDIwMDU5WhcNMjYwMzI3MDIwMDU5WjAzMTEwLwYDVQQD
EyhjNTdlY2YwMTZjZDZmNGUwZTM2MzNjMTZlMmFmYmRkMDJjZWM1MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T2vd+Sdx1Dw9w0sIILUOKbV6jW/
tjtOzMJMAOhoBXlqhbK3kvZZ9wUAJETyT2cPtNMgDqoDqe0a5/+em1YX5JmvLMup
EyBXe6v8ezHnp2jFSsQATVYnsTEg+8D4kmAoMGq/9YL84YjOyIUCmZ2X5HayeO19
Xu04vS43z4RWa3JRM9z6mRhG+RryOHej1CNxgMTH0cgc9xCEXvts8owqgJkTgEG+
9cce2j7Q8AyqstAEDSKmPWrmdRry+t3SzvnLlOimYYmboCiB680K88bS+DchN4HV
kpbHRX4B6nWHnvd4U7l47STCmS92j7CHY+q6wh1mTmb+GvsDQAgWvM3Z8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV+zwFs1vTg42M8FuKvvdAs7FCdMB8GA1UdIwQY
MBaAFHC7XlTydI7LXYaY03kznMFfMriTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAt
NDhjZWUyNmM1NWJiLzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kYzMyNDYtYzg1YS00NmRmLThjMzAtNDhjZWUyNmM1NWJi
LzEvY0x0ZVZQSjBqc3RkaHBqVGVUT2N3Vjh5dUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyAAmvMU
obWx+bpf0o/edxzcAOelylQfjTwuGarFU2p32xG5AW1M5XpWWOBEdhukBzlAzUko
0IUArOQ4gZrHOm9i3o6A5jFLfSKkwjZL8FqoHgNwyW+dBlnd7zg+bPpNsKjUK8ht
p4aSzZ7t2A5XT+9OqNw9hX9PWBZq1e7HLPXDaoap/ET8UtkQVcEPVpelZkajWVfc
Q8h+DI0LJR6lYSrKUvOw/ZvNHppTA2DcLLWNj42tT0KXvJcyFbV0LKaOo1rNf3Fr
nRBOEagE7SHKk7qSBVa5DJR1HH7ZzeY6N+Gpk16bIqOQlpxxaS2oV2/shLJNK+iE
o/OlSxg8uzqjZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:45 2026 by rpki-client