Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: CgdLPuSYQpJp9Rg11v6vzX866DyKlFLQ1x086HCNMV8=
Subject key identifier: AF:CF:F8:4D:25:67:C6:F5:DB:F9:A2:81:AE:DC:54:87:95:B6:5C:03
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019DCDF531C1C51A71384867728507BDA502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 1526
Signing time: Mon 27 Apr 2026 08:01:31 +0000
Manifest this update: Mon 27 Apr 2026 08:01:31 +0000
Manifest next update: Tue 28 Apr 2026 08:01:31 +0000
Files and hashes: 1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: eK5iMv/vz3U5WLnUrP6lQGR7CNr6kp0zjwdfzwCs6nU=)
2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=)
3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:31:c1:c5:1a:71:38:48:67:72:85:07:bd:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Apr 27 08:01:31 2026 GMT
Not After : Apr 28 08:01:31 2026 GMT
Subject: CN=afcff84d2567c6f5dbf9a281aedc548795b65c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:02:7e:2c:f0:ec:dc:46:4c:36:63:bb:5b:
16:db:ea:06:e3:29:33:ac:db:0c:0d:6f:4f:1c:0e:
d8:7c:bb:f0:90:e1:3f:b1:66:9a:3b:0b:a2:5d:27:
c2:6e:d9:d0:6d:8f:33:ef:6a:47:ab:05:8c:87:c1:
0c:d4:98:c3:c4:4f:ad:9b:30:bd:a8:49:44:08:65:
85:77:90:ea:92:89:c4:86:6c:ad:9f:48:d1:7f:59:
b7:2b:38:25:44:fd:db:11:5b:bf:58:88:08:00:9f:
47:c5:6f:69:6d:31:4e:78:4b:0b:c1:b5:73:70:55:
78:05:7b:5d:4f:6a:fb:d3:14:91:3f:c5:e6:26:c2:
68:1b:9b:5c:35:36:57:13:26:e4:47:28:d9:f8:de:
65:36:3a:92:f6:58:49:03:bc:e4:96:6d:14:31:eb:
d0:c8:0d:38:1f:b5:db:b1:06:5b:0a:1a:4d:81:ec:
cf:9e:9f:35:10:0e:8c:89:09:1f:9e:3e:45:b0:d0:
55:b7:25:db:9a:21:dc:73:b3:6c:ab:2f:13:7f:63:
f4:69:59:21:1d:5c:c1:ea:6f:00:11:de:ee:fb:8c:
37:a7:c2:aa:c1:cb:ee:c4:5d:e4:39:ad:8a:f2:5b:
db:eb:09:33:c7:6e:ac:96:00:19:67:db:06:c3:57:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:F8:4D:25:67:C6:F5:DB:F9:A2:81:AE:DC:54:87:95:B6:5C:03
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8d:1f:25:52:d2:5c:f5:c3:e3:1e:c1:4b:4b:25:7b:5c:f0:
e4:b9:19:47:2f:21:52:00:2a:f4:1f:11:3c:cf:31:e8:b4:f6:
36:aa:3f:99:22:46:93:80:d7:32:50:41:1b:62:38:70:24:c3:
d2:7d:57:27:17:67:d4:80:3e:f5:91:e7:40:31:ed:8f:83:e8:
49:96:81:92:e1:5f:0a:19:46:c7:0a:b5:f6:37:f0:ac:56:95:
2d:5c:83:9f:52:f9:bc:13:b9:04:a6:19:74:96:c0:42:a9:b6:
f6:18:ad:a6:ed:64:db:e8:27:93:5e:75:16:4e:37:64:8d:d5:
4a:3a:15:f4:7a:93:99:2c:74:92:14:31:e3:f9:fe:b5:9e:05:
c0:7c:d2:51:de:d3:cd:cd:13:2c:17:7e:84:e7:59:5a:91:e1:
dc:9b:9d:03:36:b9:26:52:0a:a6:8b:ad:d8:05:43:d8:0c:0f:
33:c8:ad:8e:25:d5:e2:01:26:ef:ea:82:dd:ae:2b:7f:b0:d7:
42:b2:1c:26:b4:7d:dc:20:e1:2c:f2:c0:bf:49:3f:d4:e3:eb:
5e:fc:96:27:e4:b8:30:aa:fd:98:2e:a9:d9:4f:5c:ba:b5:62:
62:da:44:a0:7a:01:aa:45:82:6b:a6:83:d6:01:06:3c:86:a7:
86:f6:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:46 2026 by rpki-client