Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: ZnTTnXhiubvD/pEQOr6h9g016IzKAIcqn9Qet9XSVaM=
Subject key identifier: 51:B7:B7:EB:2A:0F:8F:AA:23:01:D4:3A:80:39:C8:ED:38:CB:4C:BF
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 019E1FB5AB4EA1AB686798CBC37FC559A72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:00:59 +0000
Manifest this update: Wed 13 May 2026 05:00:59 +0000
Manifest next update: Thu 14 May 2026 05:00:59 +0000
Files and hashes: 1: BGiOfHIh1USi3O-vevTnVMV6twc.roa (hash: e3XRUVIPt+aaNq4KOAzHveHdtShJiG4OdEdg1jzFmVc=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: Jr27NI8hBg0auThExxrGHxTBev+PtcL5+WOkZSklK8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ab:4e:a1:ab:68:67:98:cb:c3:7f:c5:59:a7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: May 13 05:00:59 2026 GMT
Not After : May 14 05:00:59 2026 GMT
Subject: CN=51b7b7eb2a0f8faa2301d43a8039c8ed38cb4cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:bc:63:bf:cb:29:9c:5d:84:0c:ef:3a:8f:
e0:33:61:d1:a2:2d:8c:f4:41:7a:78:02:0c:32:c4:
99:82:36:70:ab:1d:59:ef:5a:2f:86:ba:48:55:86:
7f:1b:17:a7:23:ea:64:81:43:dd:c8:84:fe:d5:ee:
9f:5f:e3:26:90:de:bc:6a:a4:fe:ff:78:64:4e:09:
e2:c4:7b:e8:0a:87:98:7e:96:c5:f7:aa:2b:f2:07:
df:84:ea:5c:00:bf:d5:38:20:ac:c2:7d:27:78:f0:
b8:3e:7e:32:96:fa:51:39:aa:3f:51:e1:51:86:4d:
f0:79:32:6a:ad:b7:67:6e:d8:f3:20:9e:c9:52:d1:
48:d1:d4:65:6a:36:eb:8a:7d:69:bd:aa:17:ad:cf:
cc:08:13:be:f9:08:45:2d:49:e6:6e:95:b8:8b:1f:
50:f7:f6:35:51:1d:ae:00:e3:fe:75:fe:d6:c5:50:
fd:30:48:df:06:bb:67:51:6c:70:70:de:61:b7:dd:
3e:b1:f4:75:f2:51:99:d7:e8:ed:9a:27:54:72:7a:
17:52:d1:fc:11:ef:3c:4f:e9:5a:de:bc:0c:4c:42:
c5:7b:7d:7f:8a:78:13:75:64:c2:8f:55:c5:e4:ee:
20:e9:27:06:fe:2e:d6:b0:20:82:9c:78:e8:c6:8c:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:B7:EB:2A:0F:8F:AA:23:01:D4:3A:80:39:C8:ED:38:CB:4C:BF
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:f1:99:05:83:a2:d3:91:0f:28:0c:38:37:64:d4:f1:20:
fd:df:06:2b:a5:ed:ae:d3:91:60:68:a2:7c:81:2b:7b:2d:79:
d1:0c:ad:77:1d:51:f4:94:df:85:44:bb:aa:5b:6e:34:bc:dc:
66:a5:19:09:d4:b5:54:a9:b0:43:0c:b8:37:48:50:b8:0d:3d:
24:43:80:06:e8:79:0a:99:72:07:3b:5b:fc:be:a7:a0:be:26:
c9:9f:b7:fd:6e:46:2d:9d:8c:c4:6d:2d:c6:62:ce:ad:75:1a:
1f:7e:91:d7:ee:0c:15:a7:94:2f:c3:aa:25:c9:e0:3d:90:a0:
38:6d:93:eb:01:6e:93:23:63:ab:79:d8:c8:1b:98:84:3f:1e:
6a:f5:58:d0:f3:49:d6:a9:ee:90:ea:8e:e7:b3:44:50:73:5f:
39:69:78:fd:54:00:c5:6c:21:e1:3a:90:4c:0f:2e:9e:0e:bb:
ff:e8:8c:19:77:89:9f:e6:28:ae:16:60:ae:6e:b9:5d:55:9e:
8a:a2:5c:00:9e:58:c0:86:4e:b1:c9:a4:2b:0a:d4:81:0f:47:
4d:16:dc:34:de:fe:c4:9f:29:22:dc:12:0c:4e:10:f3:f8:63:
3e:51:98:87:81:91:f5:90:fe:23:ca:cf:ed:e3:ff:de:e5:f0:
62:e9:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:32:13 2026 by rpki-client