Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: fdth8PnlAxtqOZAbnifGVc2zgGS7om/jbEIxeBTi0+Q=
Subject key identifier: BC:AD:FB:72:85:66:92:38:1F:44:8C:D8:96:54:C4:CE:7A:35:E3:A4
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01A13DEECAB0804D614B7EAD9EDBF728A0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 080A
Signing time: Thu 15 Oct 2026 05:00:21 +0000
Manifest this update: Thu 15 Oct 2026 05:00:21 +0000
Manifest next update: Fri 16 Oct 2026 05:00:21 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: o3qIHueF2F6C827t+ad1Z9j0a1qEXnQVVpy0Jvp8uPc=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:ca:b0:80:4d:61:4b:7e:ad:9e:db:f7:28:a0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Oct 15 05:00:21 2026 GMT
Not After : Oct 16 05:00:21 2026 GMT
Subject: CN=bcadfb72856692381f448cd89654c4ce7a35e3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:9a:24:55:01:34:d0:fd:e8:09:7d:67:9a:
ea:07:cb:09:b9:9a:33:a4:40:23:db:18:01:5b:c8:
9b:a0:c2:95:a2:a2:ef:52:1b:8d:3f:4d:5d:0f:b2:
ae:a0:6b:e5:dd:53:a1:cc:1d:01:c6:43:e4:0c:e1:
1e:c5:d5:86:34:ab:a2:a1:95:50:f7:e8:95:28:9b:
ae:39:9a:47:78:9e:3e:66:69:78:f0:cb:77:f0:6d:
b9:d5:56:15:6b:18:f0:e0:21:cf:d5:c0:44:b5:a6:
47:a9:09:6b:9f:d1:fa:b9:98:98:1b:bd:97:0c:bc:
3a:a6:c0:67:60:22:c0:47:fb:1b:cd:8b:d9:53:d2:
f7:e3:ec:19:e8:18:92:09:26:52:d6:81:a3:1f:44:
b5:16:d7:9f:62:2a:5c:49:ba:45:93:e6:aa:90:95:
9e:6c:a9:29:e7:82:14:2c:2a:ca:ad:cc:3b:9d:ff:
ae:7c:24:51:c8:a4:64:d6:38:f9:cb:b5:90:55:c6:
9c:d8:5c:65:f7:1c:a1:41:16:9a:2d:14:0c:f5:6c:
a7:71:65:fa:3a:95:87:31:d9:87:54:12:27:f3:dd:
00:e8:7d:e7:c0:98:f6:d6:65:c4:45:4e:87:01:53:
05:f7:1d:c1:d7:21:ad:79:5e:45:86:0a:ec:8c:ae:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:FB:72:85:66:92:38:1F:44:8C:D8:96:54:C4:CE:7A:35:E3:A4
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:cb:a3:8b:e0:9d:5d:e4:ca:b7:4b:f3:67:4b:8c:33:8e:
31:de:fc:b9:ec:78:c3:0d:ba:9a:26:df:58:df:29:20:d6:04:
9f:09:67:13:4f:39:fb:82:4c:26:ef:8a:72:51:50:c1:7b:59:
71:f9:c5:ad:77:94:e3:79:67:ef:63:e0:3b:b2:fc:e2:34:46:
1b:b6:3a:0f:af:ff:a0:3c:07:6c:77:70:2c:62:16:d0:23:20:
ed:0f:7e:59:5a:22:37:13:f1:7e:9b:bb:d7:d3:32:81:f2:f2:
e1:af:18:d0:7e:10:aa:a9:d0:4c:08:31:35:2d:7e:9c:f7:1a:
67:c2:65:c7:b2:80:ac:28:f0:fe:66:d4:ae:44:ab:94:41:bc:
32:fa:b4:d5:c0:bb:3f:91:ac:c7:68:a1:f9:b4:b2:7b:d1:b0:
36:f7:54:81:11:19:95:75:55:d5:49:9a:5b:f8:2d:c6:de:64:
6e:3a:b3:bc:a6:cf:5c:41:7a:60:ab:0e:bd:70:ab:f1:fc:81:
77:9e:44:c4:42:f1:ff:6e:3f:dd:cd:67:57:9b:e9:0f:7c:15:
36:5b:47:12:84:8a:fb:d0:5e:1e:d8:a1:86:87:3e:75:df:f1:
a9:4c:05:b3:f1:a5:af:e8:66:0a:6a:5c:60:5d:13:19:71:1d:
a1:60:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:16 2026 by rpki-client