Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: +w86mnYYhWg0K16RpCvytA+jLVKKHOcrPKJhAMVc+QU=
Subject key identifier: 4F:CD:AC:65:36:2C:83:DB:B2:2B:0F:46:C5:BE:89:E0:74:B8:D2:C6
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019D2A72C79589F29DDDC1BC644CF76C9B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:58 +0000
Manifest this update: Thu 26 Mar 2026 14:00:58 +0000
Manifest next update: Fri 27 Mar 2026 14:00:58 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: ZBWAw8XkIXoBV4QnWj/CKJ+DaaJF+PMe2jbe69KvJAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c7:95:89:f2:9d:dd:c1:bc:64:4c:f7:6c:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Mar 26 14:00:58 2026 GMT
Not After : Mar 27 14:00:58 2026 GMT
Subject: CN=4fcdac65362c83dbb22b0f46c5be89e074b8d2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:7c:5d:c4:aa:e9:1e:26:99:cb:05:3f:78:
0e:38:c3:f5:45:b0:3d:54:09:9d:25:91:8c:08:d4:
9d:df:c2:b7:af:bc:e2:18:24:3f:e4:87:6d:00:d2:
4d:83:17:4c:16:df:a2:a6:ed:63:c1:d3:fe:f7:48:
32:83:d2:9e:85:95:22:80:5b:92:ea:b6:44:00:f1:
f0:d8:46:03:c5:97:f3:9c:1c:f8:1f:2e:2a:79:31:
61:34:6b:25:dd:ca:21:cc:f0:23:eb:e3:0d:cf:6f:
f4:cf:36:2e:05:ea:2b:a3:d7:34:79:63:dc:e0:47:
27:3a:c2:55:b3:7c:a4:d4:b1:2f:11:1f:c2:45:fd:
43:e2:46:6c:d6:55:d8:c8:42:64:88:33:d7:db:f4:
c9:fd:3c:ca:d2:56:a0:c9:ee:71:e2:a2:18:3d:dc:
2a:f3:9e:29:a4:9f:c6:c6:16:6f:af:d4:2c:23:fc:
94:b3:ff:14:dd:11:6a:2c:89:48:61:8c:d3:aa:aa:
60:66:d6:fe:32:6c:3f:e7:81:28:14:0a:27:75:c0:
44:07:f8:d7:02:9c:9d:ff:a8:cf:ca:bf:0a:61:d2:
bf:5f:4a:45:b1:bc:8e:62:af:c0:93:69:79:6f:72:
c1:0b:46:b7:a2:ba:33:08:27:bc:db:46:77:c6:97:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:AC:65:36:2C:83:DB:B2:2B:0F:46:C5:BE:89:E0:74:B8:D2:C6
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e1:2a:c0:03:0a:48:1b:8f:0b:65:55:86:a7:b2:f2:20:42:
25:f4:19:74:bf:79:03:51:c2:6b:35:45:81:50:1b:f9:81:19:
bc:26:68:1b:b3:8c:d2:3f:a5:93:22:65:6b:6c:24:45:68:df:
34:ed:b0:9c:b4:62:4c:50:f8:e6:bb:cd:12:21:7a:87:27:34:
52:d6:5e:d0:d6:1b:dd:60:76:c4:3c:05:3f:56:7f:7c:50:3a:
77:03:8b:e2:05:a7:6b:4e:13:7e:d5:00:b9:ac:ce:f1:2f:93:
44:7b:cd:7a:ea:b8:d6:01:ff:42:8a:f2:1b:c3:48:b7:c3:4c:
2c:3a:68:02:6f:89:4f:c5:85:d1:0c:49:66:67:e9:7a:01:4c:
4b:a8:b2:0f:02:2d:fb:24:78:a7:a8:f8:98:d4:58:90:84:9e:
90:6b:9e:0f:b9:c6:cd:d9:c5:01:5a:35:27:47:70:dc:93:b5:
5d:31:80:63:52:27:64:55:30:da:fc:45:13:5c:b0:2e:7b:52:
02:a4:a5:ce:1f:d2:32:61:52:3b:3f:be:b8:b6:aa:06:85:8d:
e2:86:27:f0:45:87:7d:5d:e6:83:81:df:f9:ae:c2:dd:da:a7:
ac:b3:42:87:67:0e:bf:c1:07:4e:33:87:5c:9e:a2:34:10:17:
a9:6e:86:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcseVifKd3cG8ZEz3bJtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYjRkYTBmMTAxM2FjZGI2MWMyZjdhMjZkMTRjNGYwZGU4
MjIyZWMwHhcNMjYwMzI2MTQwMDU4WhcNMjYwMzI3MTQwMDU4WjAzMTEwLwYDVQQD
Eyg0ZmNkYWM2NTM2MmM4M2RiYjIyYjBmNDZjNWJlODllMDc0YjhkMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkN8XcSq6R4mmcsFP3gOOMP1RbA9
VAmdJZGMCNSd38K3r7ziGCQ/5IdtANJNgxdMFt+ipu1jwdP+90gyg9KehZUigFuS
6rZEAPHw2EYDxZfznBz4Hy4qeTFhNGsl3cohzPAj6+MNz2/0zzYuBeoro9c0eWPc
4EcnOsJVs3yk1LEvER/CRf1D4kZs1lXYyEJkiDPX2/TJ/TzK0lagye5x4qIYPdwq
854ppJ/GxhZvr9QsI/yUs/8U3RFqLIlIYYzTqqpgZtb+Mmw/54EoFAondcBEB/jX
Apyd/6jPyr8KYdK/X0pFsbyOYq/Ak2l5b3LBC0a3orozCCe820Z3xpesoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/NrGU2LIPbsisPRsW+ieB0uNLGMB8GA1UdIwQY
MBaAFHC02g8QE6zbYcL3om0UxPDegiLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODct
ZjMwNjllZTU5MGRhLzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84ODNmZDYtYzZiNi00YWUxLWExODctZjMwNjllZTU5MGRh
LzEvY0xUYUR4QVRyTnRod3ZlaWJSVEU4TjZDSXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOEqwAMK
SBuPC2VVhqey8iBCJfQZdL95A1HCazVFgVAb+YEZvCZoG7OM0j+lkyJla2wkRWjf
NO2wnLRiTFD45rvNEiF6hyc0UtZe0NYb3WB2xDwFP1Z/fFA6dwOL4gWna04TftUA
uazO8S+TRHvNeuq41gH/QoryG8NIt8NMLDpoAm+JT8WF0QxJZmfpegFMS6iyDwIt
+yR4p6j4mNRYkISekGueD7nGzdnFAVo1J0dw3JO1XTGAY1InZFUw2vxFE1ywLntS
AqSlzh/SMmFSOz++uLaqBoWN4oYn8EWHfV3mg4Hf+a7C3dqnrLNCh2cOv8EHTjOH
XJ6iNBAXqW6GMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:21 2026 by rpki-client