Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: xvHVfOWRCRxuBZOH4BK4bcmrWbo2fNfKGLnBPCzHHtM=
Subject key identifier: 86:B0:77:75:71:23:49:C3:A3:03:56:34:8E:E9:7A:08:87:08:DB:74
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019D37F7697A639B028931743C8AC70F5670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1529
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: arApZNeAYhf8Z1kSqirzQw5z7xgv0iGEWlHBwljTOww=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:69:7a:63:9b:02:89:31:74:3c:8a:c7:0f:56:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=86b07775712349c3a30356348ee97a088708db74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:51:4c:d0:48:26:f4:3f:d8:a2:d2:d0:f1:11:
d5:7b:39:c3:41:5c:3d:6e:cf:c2:25:df:b7:8a:a4:
d0:d5:4e:91:64:a7:4b:2f:d4:67:25:17:86:0b:f6:
f6:43:23:ad:82:3f:cc:32:ce:ee:0b:62:7a:d5:75:
93:c6:26:cd:c7:a3:b8:0a:6a:2d:81:df:bf:4d:4b:
da:08:dd:38:b8:34:aa:61:fd:cc:93:b0:1a:36:e8:
4b:e0:5d:26:19:12:6e:54:69:5f:ac:8e:42:ea:f2:
e3:1c:b0:29:42:df:a5:c6:09:c0:33:bb:f9:90:b8:
01:b4:a5:6d:f3:c8:7b:64:82:bc:2c:b9:da:24:b8:
4a:7c:59:f0:0f:b5:0a:d6:c8:cc:67:86:ae:79:f1:
37:4d:b9:a2:d4:4b:f5:5a:c0:de:a9:b2:6f:8c:eb:
4a:87:bf:66:33:8f:a0:b0:10:79:d0:6d:d4:91:42:
c8:fc:63:ca:60:4b:f3:73:17:b8:aa:5d:1d:36:c5:
6e:32:fe:f5:8e:29:76:36:14:25:1e:c3:ef:92:6f:
14:da:64:c1:78:9a:47:24:72:47:21:a3:2b:df:8d:
51:7f:b1:3b:f0:b7:1b:9d:ef:3b:89:08:ae:6c:85:
a7:43:1c:f5:cc:c1:a9:1e:c8:be:1b:4b:2e:23:1d:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:77:75:71:23:49:C3:A3:03:56:34:8E:E9:7A:08:87:08:DB:74
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a1:9a:f4:33:d8:0d:ac:3a:aa:38:70:51:bb:2a:6a:b1:bf:
aa:74:41:e4:b7:53:5e:f3:31:34:0e:e9:98:ea:3c:91:a4:7d:
b5:ee:ba:36:6e:2b:c6:40:6e:5f:66:4b:37:ed:0f:10:51:10:
e6:d2:27:e6:3a:0c:35:2c:e2:46:46:d3:64:cf:82:4c:2d:37:
19:42:a3:ab:24:59:fa:bd:a2:fa:af:2e:36:5e:1b:32:bd:f9:
77:ed:20:50:fe:28:96:8a:22:05:a1:63:89:ad:d9:91:46:34:
a2:0f:d5:30:0c:7e:25:48:00:01:4f:f0:29:d6:47:ad:79:5c:
c3:ff:ed:ef:80:ff:48:aa:91:74:ba:c4:f3:97:ab:fc:7d:cd:
06:79:99:53:96:b3:06:7d:9a:83:9b:03:42:44:fe:06:4e:44:
2f:8b:63:a9:89:2d:28:14:ec:b7:64:b7:aa:91:49:5c:91:2a:
7f:c6:90:68:19:ba:48:76:0d:eb:03:f5:34:67:b8:13:fb:1c:
6f:a2:9f:3e:06:5d:e2:d6:d7:46:d3:e3:d0:27:35:64:d0:49:
37:af:82:cc:13:39:53:3e:2d:09:3b:07:18:e9:0c:df:e1:e9:
e2:b6:a0:cd:77:78:b0:c7:f4:3b:5e:14:fb:e0:57:43:00:15:
61:70:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:53 2026 by rpki-client