Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: N/Z34w+2XAzm8X9FMl672mVvGiy0LdhewHIZYOFjDlE=
Subject key identifier: 61:D8:88:F6:10:0A:65:7F:45:64:EA:01:D7:F4:6A:9D:D1:88:18:7E
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019E31171B9200EF577A6006F751F90B7909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 15AA
Signing time: Sat 16 May 2026 14:00:58 +0000
Manifest this update: Sat 16 May 2026 14:00:58 +0000
Manifest next update: Sun 17 May 2026 14:00:58 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: zHa/QN1uvj96YHmFZzyFLwNIYp2m2i08raD0WD7b1uc=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:1b:92:00:ef:57:7a:60:06:f7:51:f9:0b:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: May 16 14:00:58 2026 GMT
Not After : May 17 14:00:58 2026 GMT
Subject: CN=61d888f6100a657f4564ea01d7f46a9dd188187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:3e:a3:94:1f:f0:48:6a:3c:cf:1e:93:45:
8c:9c:33:07:26:e8:ee:60:e2:11:49:43:ba:e2:51:
09:ea:9b:3b:f5:af:69:ec:f2:ab:d3:0e:46:91:68:
78:e6:00:c9:d3:b8:2d:37:5d:8d:15:29:49:9f:90:
18:9e:99:60:03:82:56:33:af:b2:e0:97:f1:04:ef:
1b:4d:d4:b5:17:ba:be:25:3c:5b:2b:6a:9c:1b:13:
f5:07:65:88:a9:5d:c3:6d:35:5a:2a:46:bd:94:ad:
16:2d:32:b9:0e:a2:93:37:9c:26:10:83:eb:c6:c2:
14:0b:ba:3b:eb:eb:55:de:59:2e:ef:50:fb:58:58:
7c:58:4f:75:a0:d9:51:39:1c:7c:89:be:74:b7:92:
25:8b:a3:5a:7d:57:13:4e:ff:2f:fa:cc:ed:ad:99:
a9:b0:46:d5:76:64:8a:1d:77:16:58:ec:dc:b9:c5:
59:42:8e:1b:62:8b:19:b5:6d:75:5e:ed:53:aa:94:
ec:68:01:f7:3e:1d:bb:12:9b:86:0c:62:4f:c9:02:
c0:33:1e:0c:e7:05:52:5a:51:4e:b3:7d:27:cd:9b:
cd:e3:c6:07:62:f0:88:51:ca:87:9e:97:cd:f3:4a:
0f:f0:d9:e3:f9:0c:c0:87:ce:be:74:68:dd:c1:a4:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:88:F6:10:0A:65:7F:45:64:EA:01:D7:F4:6A:9D:D1:88:18:7E
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:03:1a:78:6e:9b:31:1a:95:78:51:33:7a:c8:75:36:1b:4c:
7d:0a:b3:06:a8:ea:8e:8d:9d:8f:e7:4e:dd:b1:5a:2d:d7:2e:
cf:4b:d3:93:bf:ce:93:32:5a:cd:4e:cd:20:09:c9:7e:df:7a:
4f:ce:13:56:6b:34:ca:2b:04:7b:a3:f3:b6:61:19:81:04:46:
9f:40:8e:92:93:7d:27:dc:2e:44:72:65:d0:16:4b:bb:fa:64:
8f:8e:ce:8e:da:6d:e7:7a:ba:93:12:b2:32:7d:eb:8a:aa:45:
fb:6c:ab:06:e2:18:b7:59:b3:e2:33:06:be:8b:df:f3:9f:a5:
b5:26:a8:46:b9:be:64:16:e4:a2:83:56:50:1b:59:2f:c1:60:
89:66:06:1a:27:c5:a4:59:0e:7d:7a:88:d6:bf:6a:23:e8:6d:
04:6f:bf:6b:7f:82:5c:f0:96:ee:2f:4e:df:38:e5:f8:f3:f1:
df:57:aa:d4:a3:74:86:3a:6f:1a:66:38:b7:20:90:da:6c:99:
b4:33:89:f9:30:e6:8e:3c:4e:a3:20:34:29:6f:cc:dc:5f:f4:
5a:2f:d1:0c:59:3f:49:7c:4f:e6:e4:88:74:e8:44:b8:c9:2e:
80:58:98:da:2b:f6:6c:ed:53:bb:40:5c:ab:10:bc:e0:d1:66:
e0:11:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:42 2026 by rpki-client