Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: PnXIi0x5ud1smAxA6H/oY2PajFYZKCuBynI6Ter3N+Y=
Subject key identifier: 55:45:CE:B5:19:6A:0A:23:B1:7A:DD:09:07:F6:D0:71:86:58:B0:52
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019F8EA2BF0943166534FC0FB2E8E49AEDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 0250
Signing time: Thu 23 Jul 2026 11:00:58 +0000
Manifest this update: Thu 23 Jul 2026 11:00:58 +0000
Manifest next update: Fri 24 Jul 2026 11:00:58 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: 3-exyexQ1xdpKGbpl-0EQUeMOn0.asa (hash: gMyFmlJorWF/kH2i/GMMziUsSiuXvqY0GqALAKfezjo=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: /BmjtcfxuwPwWTFtAv20ED22kaOJHuAL3JdFjyQZE94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:bf:09:43:16:65:34:fc:0f:b2:e8:e4:9a:ed:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Jul 23 11:00:58 2026 GMT
Not After : Jul 24 11:00:58 2026 GMT
Subject: CN=5545ceb5196a0a23b17add0907f6d0718658b052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:8a:20:cf:ab:46:2c:0c:55:35:1d:e8:48:
87:5f:33:0f:a1:73:c4:0e:eb:ea:a2:fd:1f:5b:66:
28:01:e2:42:82:da:96:4f:e0:73:cf:f7:90:93:27:
bf:44:bc:a9:27:1b:44:58:1f:1c:bf:e0:b1:d8:e3:
d5:29:68:f4:3c:c3:46:ba:27:d9:08:66:2c:fb:cf:
86:15:f6:3c:d8:ab:40:90:c3:9f:be:f3:97:05:db:
c6:82:90:83:33:5e:dc:10:be:b3:6e:ec:60:b8:0b:
27:64:66:82:3a:bc:b2:ee:6e:5f:29:b3:65:b0:5d:
60:f5:a8:83:e2:1b:f5:61:02:fd:bc:19:06:ae:2f:
eb:36:bd:a2:7c:77:87:a7:25:e2:dc:a7:40:b0:82:
0d:b3:4f:3b:4c:1c:1e:5f:a9:6b:36:98:24:13:19:
97:5c:c8:22:2f:2c:42:80:95:e5:20:f0:0e:3b:f9:
eb:91:45:1b:1a:d1:b4:9c:88:d4:6d:cc:13:2f:85:
74:1b:6b:95:5c:fa:f7:62:e6:25:39:73:6f:e6:78:
63:18:70:30:e8:52:e8:52:ba:3f:1c:c0:d3:26:97:
26:29:24:22:da:c2:cd:57:a2:7d:58:fb:c3:13:e9:
74:03:57:d9:c7:ce:2b:b1:92:51:80:f9:4d:1f:da:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:CE:B5:19:6A:0A:23:B1:7A:DD:09:07:F6:D0:71:86:58:B0:52
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fb:ad:cb:af:d4:9e:90:7f:d1:05:7b:c2:2b:4a:5f:f7:40:
84:83:e4:05:57:d1:92:3f:d1:91:28:35:c2:59:ce:ad:28:8a:
db:cc:12:84:1e:a7:e9:bc:1f:24:75:29:63:3b:57:c7:f4:4d:
c1:35:48:0d:c2:ac:bd:6f:34:7f:f2:51:b4:1a:20:e9:e8:bb:
cd:a6:79:fd:6f:ac:66:ff:b0:ea:f8:25:7c:3d:6d:49:3a:bf:
d7:ce:77:56:94:1b:98:6a:19:b2:47:8d:d3:b5:97:2e:c5:7a:
4d:a2:96:75:ab:62:fe:e2:ba:8e:1d:00:17:72:9b:5f:0b:56:
4f:d9:d3:f5:f6:9e:42:bd:17:08:e1:8e:9f:ec:ac:f7:19:b3:
86:9a:ed:1d:fb:93:33:78:ce:49:6f:34:2e:e7:fe:be:90:e8:
d9:41:d1:eb:2c:a1:9e:40:69:7b:d9:80:7b:cd:43:4f:ed:5c:
9a:fd:e4:c7:0f:55:31:aa:a6:1f:22:ef:ca:29:fa:c3:28:c1:
cb:00:ca:57:a9:ef:2c:6f:d1:14:e0:3e:3a:60:28:49:ac:e3:
57:64:78:d1:41:79:43:56:04:7c:bb:e6:c5:bc:ba:05:c5:0d:
b8:e8:d9:10:84:2f:4c:1d:ba:bc:4a:bb:9e:d7:d5:f9:a2:32:
ca:6a:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:10 2026 by rpki-client