Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: VYHofrompxEPWLWxH+aHIfE0GbgYAygVUUcbUSjXO84=
Subject key identifier: 12:1E:81:C0:89:26:80:D5:82:F0:42:35:35:96:A9:38:3A:2E:EC:77
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 01A1242F7D6FFB0870D1FE202EFAC36D173D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 05:00:54 +0000
Manifest this update: Sat 10 Oct 2026 05:00:54 +0000
Manifest next update: Sun 11 Oct 2026 05:00:54 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: GJbW9zhMKzHXTfy94ChXMSxA8Zb5qSPJjITbXhvzy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:7d:6f:fb:08:70:d1:fe:20:2e:fa:c3:6d:17:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Oct 10 05:00:54 2026 GMT
Not After : Oct 11 05:00:54 2026 GMT
Subject: CN=121e81c0892680d582f042353596a9383a2eec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:22:5b:7b:83:f5:f9:5a:25:2c:87:b3:c5:
8d:c9:cc:8b:44:97:c5:44:65:88:79:24:f2:09:b6:
81:5e:47:d4:9d:04:39:b8:2b:db:6e:b0:ca:71:88:
17:91:2c:70:c2:7b:c7:79:e2:ed:ea:c6:48:7d:8a:
6f:b1:4e:bf:2a:5f:5d:51:b2:ed:c9:a9:4a:17:45:
0b:a9:2f:ca:ff:1c:01:06:89:eb:be:e1:d9:0f:3f:
5c:f4:c3:e2:ca:34:37:d3:58:87:d4:c2:62:6c:c5:
b9:df:fa:51:8a:72:56:d9:bc:4c:9f:3e:3a:1b:a1:
5d:b7:04:bf:b5:5e:47:72:9d:74:24:78:ba:87:99:
82:3c:b1:61:42:a2:59:b0:e3:01:7e:3c:89:27:2d:
c3:d7:63:62:45:42:e2:e1:d2:ed:36:d1:12:43:20:
f6:7c:7a:83:09:9f:f7:e0:c4:97:f5:c4:3b:68:5e:
79:a6:85:eb:05:e6:3a:3b:73:1b:b0:d7:e7:54:da:
da:8d:ad:eb:f4:5f:e1:73:20:b6:b0:6f:ec:79:ca:
b3:a2:bc:6b:b9:36:5f:3c:af:f4:1f:16:71:4a:14:
fa:5c:a5:d9:cc:c0:87:af:9d:03:29:cc:d5:4b:97:
ca:6c:ca:41:78:87:f1:a8:1b:1a:4f:f0:1b:6d:bf:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:81:C0:89:26:80:D5:82:F0:42:35:35:96:A9:38:3A:2E:EC:77
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:92:aa:9a:6f:aa:ef:66:5b:38:cb:9d:54:3d:4f:2f:01:67:
22:7a:7e:5f:0d:39:d3:28:eb:9d:03:05:9b:e2:c1:ca:50:93:
8c:5e:f8:2d:f5:4d:e8:3f:10:67:9e:75:df:1d:31:3c:ef:e7:
fd:36:43:40:3c:c2:86:85:23:4c:11:c9:3b:ee:83:b9:64:0b:
0d:c2:f3:de:cd:ee:d5:d8:cd:35:24:86:a6:7e:a6:b2:1f:aa:
77:ef:92:5c:28:16:da:03:47:fd:3c:9d:9d:b4:87:fc:d1:fd:
c9:73:ec:c4:d0:06:cb:a1:1c:b0:92:11:cf:c6:63:3c:37:2a:
d8:74:c7:ae:6a:b3:a6:a9:2b:df:06:8e:b2:b3:68:88:83:65:
dd:73:72:1d:ad:3f:42:68:b9:c9:9f:91:d9:67:10:a4:38:52:
0d:22:70:d2:79:3c:01:53:5c:8c:af:1d:23:fa:74:bb:96:48:
07:f5:8a:bc:db:c7:0b:cd:53:47:27:0e:34:b2:0f:71:f5:42:
d1:3b:53:e4:6c:09:00:78:45:da:ea:29:c4:5f:e0:da:b1:ce:
98:09:4e:7c:18:41:0d:c2:a2:69:a6:0f:94:95:d6:ac:3d:be:
d3:3b:de:cb:be:93:a6:bd:09:d1:3c:f4:70:a3:3b:e4:75:0c:
57:61:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:21:33 2026 by rpki-client