Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File: cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier: t7PZ8RX5tuRywhnzkGNi5gUcEPp744ypFW0wqr5RzrY=
Subject key identifier: A7:FC:9B:25:CD:B2:3B:7E:72:52:EB:E5:D2:F9:4D:D7:DF:C3:16:E8
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer: /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial: 019D25F1362760937A05CDF11D1B2122DF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number: 0110
Signing time: Wed 25 Mar 2026 17:00:58 +0000
Manifest this update: Wed 25 Mar 2026 17:00:58 +0000
Manifest next update: Thu 26 Mar 2026 17:00:58 +0000
Files and hashes: 1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: hbcXK+3FhO87ohREjLefWtgPzGcEJMijYS5dHaRu3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:36:27:60:93:7a:05:cd:f1:1d:1b:21:22:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
Validity
Not Before: Mar 25 17:00:58 2026 GMT
Not After : Mar 26 17:00:58 2026 GMT
Subject: CN=a7fc9b25cdb23b7e7252ebe5d2f94dd7dfc316e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:8c:f4:ce:f5:6e:7b:80:76:ab:28:a6:98:
6e:46:b0:9b:15:28:5c:0b:f4:27:30:b4:c7:aa:d7:
17:91:25:26:c1:bd:40:50:15:2b:e7:4f:8a:f5:b8:
9b:d9:70:ab:e3:69:a8:cd:4c:f2:e4:fc:78:9a:50:
a0:5b:3e:a2:5e:6a:44:6c:20:02:34:72:ae:22:06:
80:dd:0c:38:82:e6:5d:fd:8b:bf:c8:6c:c9:21:bd:
8b:be:61:e0:c2:0c:11:27:51:45:f2:34:b5:d9:3c:
5a:e5:7f:23:fb:0a:e8:11:a4:86:8e:32:16:10:0c:
b2:a8:31:de:d0:41:f4:a8:4d:26:25:98:6a:e1:26:
62:ee:b3:93:84:e5:d5:ce:a1:99:e7:f9:3a:f3:08:
a2:8e:47:bb:03:14:7a:5d:ac:d9:99:0a:a1:3d:92:
ee:c3:cd:d9:7c:77:2c:fd:7c:bd:18:b7:fc:ef:d6:
39:12:d2:ef:2a:2d:a7:94:11:c9:c7:84:50:1b:2b:
87:70:90:c8:56:2c:4f:81:05:79:fe:96:ce:f3:4b:
a2:a1:9d:3e:aa:73:d9:61:11:93:06:1a:78:3f:c6:
77:d3:fc:78:45:9f:17:29:d0:be:32:66:d0:fc:26:
35:f5:a8:3e:c4:ba:ba:45:44:38:3f:b7:f5:9a:49:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:9B:25:CD:B2:3B:7E:72:52:EB:E5:D2:F9:4D:D7:DF:C3:16:E8
X509v3 Authority Key Identifier:
keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:cb:df:fc:22:ec:23:b2:d3:88:b1:54:8b:2d:ce:45:24:
52:9d:c9:77:98:24:0a:be:02:3f:a6:b8:8d:d0:ac:74:18:1f:
2c:40:1d:b2:fe:97:bd:fa:a7:ef:37:77:5a:e4:5b:83:cb:aa:
f8:c3:f6:55:22:3d:02:77:fc:f9:6a:d7:bd:4c:5a:2f:18:3e:
cd:3c:5b:ef:f7:0c:16:d9:b0:0d:07:e8:65:fb:69:0f:3f:75:
ac:5b:f5:f6:6d:76:4f:77:9b:20:78:54:91:e9:f9:24:27:0c:
f0:84:e0:d6:3c:34:b9:49:39:fe:65:9e:0d:71:04:77:28:c6:
49:47:e1:7d:03:ad:bd:d2:84:d6:82:04:58:fe:78:83:40:94:
5a:f8:7a:f7:9a:97:d0:e2:b6:31:21:68:7e:8a:82:44:87:7e:
7c:df:59:0d:63:1b:33:ef:30:ea:66:a3:f1:c6:c2:25:47:1f:
eb:28:7e:f8:96:7d:27:80:0f:15:71:cb:8a:94:55:6c:45:7f:
ba:14:c7:18:dc:1c:61:59:80:5d:90:2f:f5:a1:dd:25:fd:7e:
d5:29:d7:61:cc:a3:ad:f0:53:e0:44:dd:bf:fd:18:50:3e:68:
8f:2d:5b:cf:d7:68:c0:12:dc:52:b0:5a:9d:80:32:92:aa:92:
c4:33:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:09 2026 by rpki-client