Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: WcotxHwdgqXZvqU505kAN4tia9+Mc/ypnc/GkO8t8lg=
Subject key identifier: 68:FF:08:91:AE:2E:69:F9:6A:09:72:6C:04:6D:74:CE:2D:64:13:A0
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 019FCF02B18D05FC8F82ADD03143AB490F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 19E1
Signing time: Tue 04 Aug 2026 23:01:27 +0000
Manifest this update: Tue 04 Aug 2026 23:01:27 +0000
Manifest next update: Wed 05 Aug 2026 23:01:27 +0000
Files and hashes: 1: H9_ZTYtZp9v4GZQypM7FAWOQRdk.asa (hash: nKQ/tJ0O647gIJ755Jq4/51aPm9b8dEzxM8goPq77Mg=)
2: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: VJwH3n0dpIbLEqGlnhq3yu7one+jFwkLs5504deGWd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:02:b1:8d:05:fc:8f:82:ad:d0:31:43:ab:49:0f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Aug 4 23:01:27 2026 GMT
Not After : Aug 5 23:01:27 2026 GMT
Subject: CN=68ff0891ae2e69f96a09726c046d74ce2d6413a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:fd:b4:38:e9:f5:95:7f:02:83:af:05:4b:
31:07:ab:4e:5f:52:83:e3:7a:7b:a1:4c:07:bc:37:
34:69:cc:47:b7:bf:d9:fe:4a:37:ef:1d:90:87:ba:
56:5d:40:fd:fb:ec:b4:ba:1d:e8:46:06:a2:7d:1c:
4d:4e:00:c4:ae:7e:af:2b:d2:11:53:b8:9c:01:f1:
10:cd:87:01:87:7c:e3:8a:66:ee:e7:50:cc:8a:9c:
2e:24:a0:db:4e:a5:66:08:12:63:e4:bb:81:cb:31:
92:8a:96:89:75:db:f0:09:b2:06:50:64:09:81:7f:
5f:8e:1a:b0:f8:31:49:28:f1:79:ca:55:5e:4e:31:
09:66:c1:8b:e3:a7:fa:6b:f1:fa:ea:8f:6e:5c:b7:
b8:1c:dd:f6:75:55:90:88:30:14:d6:93:94:f4:c9:
80:90:80:ac:67:05:84:a6:60:e9:43:a4:c4:1c:a8:
b9:01:55:65:3d:7d:4a:b7:9f:13:7d:5e:85:57:5c:
bf:e0:8d:5b:1e:34:e1:a7:62:3b:ed:71:0e:29:0e:
a6:62:f9:1e:91:aa:53:4f:20:fa:64:50:bb:62:dc:
02:e6:5a:89:0f:9d:4d:bb:d7:16:6f:84:de:d2:83:
2e:03:94:ae:bf:a2:c5:35:9d:0d:f6:ca:54:3b:95:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:08:91:AE:2E:69:F9:6A:09:72:6C:04:6D:74:CE:2D:64:13:A0
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:be:f8:5a:11:05:27:ea:62:f7:a8:7c:d6:e1:48:da:9e:5e:
5e:0c:63:94:b2:ae:91:d9:65:bb:4d:3a:ec:95:e5:90:9e:83:
6c:df:db:7b:fc:25:df:cc:e7:5e:b1:3b:73:74:7e:63:18:f2:
81:ce:ba:4e:96:86:03:d4:17:11:48:63:f4:bc:3b:8e:28:4e:
60:c0:9f:6b:79:57:03:2b:28:52:da:12:f7:1b:70:4f:d0:cf:
fd:b4:94:0a:0b:02:e6:fc:88:c4:59:b5:93:2e:1a:07:c9:6d:
76:bb:5c:82:74:83:07:72:57:60:71:09:e7:f2:03:ee:06:ea:
44:07:d5:47:f9:15:c4:ca:99:d9:52:42:d8:53:84:0d:a3:51:
0d:a6:48:ca:53:c1:e0:d3:8c:ac:aa:84:c4:80:6d:51:d7:af:
99:fe:ad:e5:33:40:4a:50:03:be:42:93:9f:f5:e6:ec:80:6c:
e4:8a:59:20:58:2c:ac:28:7e:01:4a:be:54:6e:e7:59:61:7a:
4e:26:64:08:ef:50:46:03:d9:f2:25:ac:d2:75:cf:a4:cb:07:
92:9f:07:d7:c4:40:6a:5b:c2:2e:3a:5b:f2:2f:1e:af:9a:e2:
d7:d4:5f:fc:65:7e:28:a1:3c:58:96:2d:7c:2f:cf:1b:33:1d:
b4:c2:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:53:34 2026 by rpki-client