Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: FRWG+rdqFZc0/71Zq/qWbuJChQHxmqbdQEpetM5T9Fs=
Subject key identifier: BB:EF:05:04:16:13:8C:05:3E:E4:87:7E:4A:05:5C:83:75:54:67:24
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019D389C3CD220C3CC9CC04C5FFB10383CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 05F5
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: M1sOWrOzqN6vMdQLTIsLUWEDld29VwO8ogXnd762Zgw=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3c:d2:20:c3:cc:9c:c0:4c:5f:fb:10:38:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=bbef050416138c053ee4877e4a055c8375546724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:20:47:3c:28:5c:5b:73:b8:c0:99:4c:2e:
c4:ac:01:6f:e3:24:c3:62:c5:24:42:00:79:73:7c:
63:e4:44:76:40:a2:51:a8:69:c8:f7:fb:02:97:f1:
e7:6e:7c:96:96:d4:a0:e1:13:11:10:f0:77:6b:19:
0d:6c:fa:17:26:28:c7:a2:03:f5:29:46:37:87:83:
8d:28:64:cb:b5:ee:3e:86:a2:2b:b8:08:ed:68:a0:
1c:1a:92:34:c7:43:1d:fc:80:26:0a:ff:1c:01:c8:
dd:3c:bd:ab:55:42:91:20:6c:9d:29:46:fd:24:6b:
d1:28:b0:f9:e6:4b:7a:1a:04:5f:06:d6:f7:9a:8f:
00:48:8b:d0:5e:eb:d3:89:a5:d2:5f:9e:a5:69:7f:
90:52:bc:a2:c0:44:f9:cb:4a:00:1f:4f:d5:ad:f5:
ec:05:20:ed:ca:08:af:c5:7e:90:52:eb:88:68:d2:
04:4d:3a:c0:5e:9e:b1:a7:2c:37:cb:f9:a8:74:61:
fc:27:0c:69:af:6e:c4:89:28:bf:90:09:10:ca:d6:
4a:58:06:a0:b2:b8:fa:1d:8a:e7:98:ba:9f:8d:f0:
b2:40:97:50:37:b4:07:c4:72:5b:9d:64:a8:8a:68:
9f:13:4d:be:5f:54:42:0e:99:66:35:df:30:60:28:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:05:04:16:13:8C:05:3E:E4:87:7E:4A:05:5C:83:75:54:67:24
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2c:bb:d9:e4:f5:7a:91:17:c3:eb:42:d4:13:56:2b:b2:b7:
f5:bb:1c:8a:63:be:0a:c7:81:e1:94:af:de:d0:3f:41:90:fc:
73:44:d0:5c:a1:8b:23:b2:45:f1:15:b2:30:24:4b:c3:6e:64:
ca:ad:45:1e:f1:1b:35:ef:fd:41:68:40:e8:62:f1:5d:65:53:
eb:ce:fc:a5:26:f0:d8:85:00:4e:7f:4b:a3:83:77:72:f3:af:
1e:4e:39:d3:58:bf:21:85:c4:66:dc:80:a9:b1:77:9b:2a:7a:
bb:b6:a0:c1:ff:bc:05:c8:53:16:5b:a6:20:fd:8b:ce:40:89:
49:72:6b:43:57:07:bd:c2:ee:0b:19:54:20:e8:8a:48:52:15:
a5:c4:d0:19:d8:d7:13:8e:27:bc:cf:6c:08:87:07:0d:9f:67:
cd:80:ba:ad:71:27:95:c7:fe:0d:56:05:34:6a:99:03:00:41:
32:31:9b:32:95:87:cc:9e:6d:a6:9d:fb:e9:4e:59:c0:8f:12:
94:88:3d:4e:1c:5d:54:9f:7b:8e:ea:5e:36:b8:56:df:bd:6f:
16:c8:51:e7:c9:05:f4:97:43:a8:84:1b:aa:bd:06:75:76:b6:
5e:b3:7a:0c:a1:e7:16:c8:48:aa:d6:2b:f3:29:25:c2:89:a0:
71:5f:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:30 2026 by rpki-client