Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: /fGqjDgq5WomYxL+L0OYSGxTxeVN6wkMORFhi4bN/zY=
Subject key identifier: 4B:63:02:E7:C5:AE:64:18:A6:47:7B:F4:31:1E:6F:97:49:76:AA:C2
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01A001380F7825BC6C53E7BECF2443B28786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 0766
Signing time: Fri 14 Aug 2026 17:00:46 +0000
Manifest this update: Fri 14 Aug 2026 17:00:46 +0000
Manifest next update: Sat 15 Aug 2026 17:00:46 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: Z+OwIu0fBDjitCyeAAMeDeAubvx/zZy8g3sjPBWORMM=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:0f:78:25:bc:6c:53:e7:be:cf:24:43:b2:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Aug 14 17:00:46 2026 GMT
Not After : Aug 15 17:00:46 2026 GMT
Subject: CN=4b6302e7c5ae6418a6477bf4311e6f974976aac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:98:85:bb:a3:a3:1a:15:9b:c8:86:35:54:
2b:11:df:af:f8:4d:da:7d:38:7f:d2:d3:92:f2:30:
fa:12:f8:d0:ed:ce:7f:5c:15:81:ec:4b:59:46:e1:
aa:94:0d:4d:36:b4:49:32:82:9b:e6:90:43:a3:9a:
96:42:24:a1:54:6d:dd:2e:74:81:ba:5d:64:33:d6:
1d:bb:c0:bd:66:01:84:e9:4c:7f:73:8b:80:64:43:
f2:a3:5b:cd:cc:df:66:3a:7c:58:3c:0f:3d:97:14:
e4:b8:40:a7:4e:8e:23:5f:3e:6f:d3:07:bf:82:80:
1e:56:d0:08:1f:ae:88:00:cb:1f:fa:36:8d:3b:83:
12:10:01:49:5c:65:8f:76:b8:cf:46:09:35:4f:c7:
ec:f6:a3:09:37:ce:a0:39:87:7d:98:ab:69:25:9f:
8f:85:23:4d:95:23:fd:5b:1c:7e:4f:7b:71:75:97:
cf:59:cd:cf:f7:0a:92:7e:7b:c4:26:d9:34:69:cd:
f6:6e:d7:db:75:64:f2:8a:2c:f0:27:1d:1c:62:c7:
c4:de:e9:95:9b:0c:e4:85:22:74:2f:72:b3:4c:a5:
65:8e:d2:9c:e5:f8:3b:62:d8:f5:46:09:89:91:73:
ca:cd:5c:f2:76:d6:c0:d1:9b:6a:bd:d3:9b:9a:80:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:02:E7:C5:AE:64:18:A6:47:7B:F4:31:1E:6F:97:49:76:AA:C2
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:61:9c:9c:37:4c:fa:9f:ee:01:76:92:89:20:e9:5b:1c:5e:
20:3f:12:3c:ef:f3:aa:60:38:c4:d4:50:73:af:76:b3:0c:92:
87:37:04:64:95:63:6d:44:af:7e:2c:50:5f:78:eb:b8:f4:09:
f9:a7:23:02:20:6f:6e:8e:0a:74:2f:ec:1e:a6:aa:cc:25:58:
7a:b6:20:4e:8d:12:26:74:cd:5e:ca:0f:8b:82:18:f2:68:2e:
8e:41:1e:e8:7b:99:a8:42:45:24:2e:3b:0b:7e:01:f8:0c:a6:
5c:95:8f:cc:e2:0e:35:4f:76:c5:39:b2:48:a8:41:b6:28:16:
a7:f9:f0:62:f7:6c:bb:dd:ab:45:ac:6e:2d:52:54:f1:80:25:
d9:c9:2b:9c:0e:bf:14:5f:27:e0:62:e9:c8:78:65:06:d9:e4:
a2:8d:f2:7f:86:e5:f7:58:ef:76:8e:06:0f:22:93:9f:a5:04:
a8:b0:df:bd:97:00:e8:cd:77:bb:eb:a9:54:5e:48:b5:d7:6a:
a3:b7:11:58:96:8a:67:42:e6:39:46:38:3e:85:69:fb:7a:16:
f3:e3:45:8f:c4:46:85:7a:0e:85:0c:36:4f:d2:c1:8a:91:ef:
50:18:d0:05:dc:7f:9b:be:00:3f:bc:86:5b:b0:1c:b0:bf:82:
3d:b6:e8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:08 2026 by rpki-client