Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: csoiQWG/Dpl7tyxvGZYAkn6GLi/qbbRvMwZ/kpufjLI=
Subject key identifier: F2:75:68:0A:0D:0D:CD:E5:C4:35:4E:C1:8F:71:1D:20:24:F5:C0:B1
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019E2FCDA37812E18BF069D4DB3B939DAD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 0675
Signing time: Sat 16 May 2026 08:01:06 +0000
Manifest this update: Sat 16 May 2026 08:01:06 +0000
Manifest next update: Sun 17 May 2026 08:01:06 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: x6JXo6xae+T47Q+ArwM0q6lEYLHu1iPK8ZMSv2bpUEA=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:a3:78:12:e1:8b:f0:69:d4:db:3b:93:9d:ad:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: May 16 08:01:06 2026 GMT
Not After : May 17 08:01:06 2026 GMT
Subject: CN=f275680a0d0dcde5c4354ec18f711d2024f5c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:d5:fc:87:2d:4f:cf:68:9a:d5:8b:eb:80:
bd:d4:1a:64:8a:a1:55:db:37:a6:1e:1b:96:6f:81:
e3:50:cc:1f:bc:40:54:89:19:eb:04:6b:19:e1:84:
ce:f0:e1:ef:e3:34:97:21:70:54:76:b3:3e:9a:54:
66:67:7c:f4:74:87:2f:6a:53:a2:fb:8e:8a:0e:bd:
3d:11:12:98:7a:67:83:5d:9b:fd:7e:8b:66:6c:ca:
16:c6:a1:ed:e3:1c:a2:cb:00:2c:01:4a:f5:43:a2:
97:0f:15:97:f6:fc:78:a0:2c:5a:f2:44:d7:4e:65:
95:7c:9e:0f:fa:17:0c:7f:92:c3:cd:2c:82:42:ae:
9c:65:8d:ea:9d:58:99:5b:34:23:b2:04:c8:66:60:
f5:5b:66:6e:5f:00:b6:85:c6:36:0e:ed:b6:35:4c:
9e:06:91:2f:2a:97:e8:70:9e:68:f6:14:13:c6:03:
af:47:a1:61:7a:25:c9:07:81:f6:e8:e6:a0:30:8f:
24:a3:9b:00:a6:2d:e3:89:75:b0:ba:18:1a:01:d7:
7b:ee:78:c5:16:c8:5c:58:89:72:43:19:94:9e:2b:
d2:1c:fb:d0:8c:5f:4d:b7:ca:94:78:cd:c2:af:02:
3d:d2:8a:47:da:33:e6:df:47:a7:c5:b2:fe:29:dd:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:68:0A:0D:0D:CD:E5:C4:35:4E:C1:8F:71:1D:20:24:F5:C0:B1
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:98:ba:58:3d:8a:73:23:7e:6a:e5:97:6c:f3:1d:58:73:11:
f0:00:41:9a:5f:6d:ad:5c:ff:45:08:6c:bd:fe:5b:3d:3b:91:
cd:a7:88:26:6d:a1:fa:53:79:08:02:d7:f5:65:d5:d2:cb:c5:
f2:4a:c6:c6:f9:13:23:ed:cc:7b:21:b6:60:07:2f:5b:fc:d6:
aa:5f:85:b3:86:e7:2f:cc:c5:7c:01:95:d4:fb:58:fb:8a:70:
ed:00:bc:0c:57:b4:ea:e6:01:40:f4:12:f5:ee:de:71:d5:1e:
a2:b7:a6:5e:a8:e4:77:3f:ad:af:8a:d9:5e:59:13:88:1f:bb:
b7:d7:3e:2e:f3:b4:c7:ad:b6:19:e3:74:f7:ab:67:c1:73:48:
e1:7c:e2:d8:9c:11:8b:6a:33:73:0d:f1:c1:96:e5:d8:28:29:
80:26:ae:53:39:aa:cb:86:f0:a4:dd:7d:2d:8f:ed:26:cb:cb:
63:08:7b:c0:d3:a0:72:4b:9b:dd:56:cd:14:fd:1d:64:3e:e7:
e7:fb:d6:7c:5e:d9:6e:52:64:89:bf:78:c1:ea:d5:f2:7c:ff:
e8:7f:52:3a:3d:98:45:a6:59:2f:ff:e7:44:d7:7c:25:6a:21:
32:57:c1:c1:ef:ea:d3:36:a7:36:d8:c2:ed:37:be:ff:fe:dc:
58:84:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:40 2026 by rpki-client