Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: 92Pc+KB3sYbG0sBM3Snoz73YfIK5TOw7edGuPhFkoFY=
Subject key identifier: A9:EC:43:74:85:08:DB:71:A9:90:EB:75:54:BE:9C:84:8A:CA:19:7F
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01A148E0AA6C279FD05FD210651C004556C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1744
Signing time: Sat 17 Oct 2026 08:00:45 +0000
Manifest this update: Sat 17 Oct 2026 08:00:45 +0000
Manifest next update: Sun 18 Oct 2026 08:00:45 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: NyEL1NDhmw0fz5JYpp65qaoorNzwwj5Zx2HIZ3QgV6Q=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:aa:6c:27:9f:d0:5f:d2:10:65:1c:00:45:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Oct 17 08:00:45 2026 GMT
Not After : Oct 18 08:00:45 2026 GMT
Subject: CN=a9ec43748508db71a990eb7554be9c848aca197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:f3:f4:61:1a:ec:12:8b:f3:f7:c5:b2:de:
e5:cb:fc:1d:9b:c3:9b:65:59:e5:34:5a:24:3b:28:
a5:56:21:7a:13:e8:90:61:db:83:38:d8:b2:c7:4b:
03:6d:e0:a2:5a:16:c4:c6:44:76:d3:1f:74:7c:32:
bc:0e:ba:f8:94:52:c5:93:9e:f6:03:aa:c5:a4:af:
f5:e8:b3:31:10:35:6d:d5:d6:61:e1:8e:bf:db:ae:
21:32:3d:ba:d5:a7:e9:f0:b8:09:c1:bf:4f:34:5c:
03:b6:96:42:d2:fe:83:94:14:aa:92:df:2d:28:e0:
f6:21:d5:65:cf:5e:80:2f:03:0f:0e:f5:9e:fc:bf:
65:33:e3:ea:c9:95:a6:b3:8a:f3:1c:33:c0:07:7f:
92:92:5f:3b:97:83:84:56:ac:d9:c3:23:27:b3:d6:
6f:4a:a3:4a:6c:68:a0:51:01:7c:c2:33:85:e5:c9:
85:02:57:0c:9c:b2:74:d4:8e:16:1b:3b:64:1b:83:
e6:2e:ee:a0:6d:10:42:4a:7d:aa:8d:6b:3b:bb:1e:
52:2a:c7:41:ea:2f:04:36:1b:0e:f1:a5:39:5e:6c:
c3:68:3a:01:98:fe:94:ac:33:5d:2b:62:b8:f4:3c:
a4:ce:da:b3:e1:33:45:a1:22:c5:db:98:3c:a3:fe:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:43:74:85:08:DB:71:A9:90:EB:75:54:BE:9C:84:8A:CA:19:7F
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b4:a4:21:06:18:5c:8a:15:87:8d:6f:08:78:93:6d:05:0c:
8b:ac:6c:7c:72:84:26:05:6a:c6:d0:cb:f1:2d:d8:94:dd:2b:
8e:94:a2:ab:46:d2:ee:f3:0f:cc:c3:01:25:05:34:c7:1b:46:
39:9a:e2:ca:83:49:8a:b8:24:d4:d7:ce:e0:a3:3b:f8:49:ea:
b7:2d:79:08:52:5d:62:5b:4f:b2:ea:f3:03:92:17:88:72:3a:
95:69:ba:ce:f0:78:cd:28:47:e3:64:e2:39:26:df:08:96:f0:
c9:77:ff:18:fc:ed:c7:e9:aa:6a:8a:6e:77:47:37:87:19:fe:
97:e4:c9:ba:4e:d1:ab:a1:f5:11:d3:e8:52:16:46:bc:c9:0f:
da:29:13:a1:37:88:b3:8a:d4:71:ae:12:ce:76:24:4a:f8:39:
fd:84:1b:4a:3e:93:22:bb:74:65:fb:b5:ef:9f:80:3d:c9:b9:
12:95:ae:54:c0:96:6b:79:f7:f5:d3:33:f1:42:22:23:ac:da:
32:79:c4:4c:39:58:7c:f4:1a:20:bf:3b:7b:39:d8:11:39:90:
7d:67:67:4c:77:ec:22:3f:19:c8:66:72:65:52:31:dc:81:10:
9a:83:75:01:d7:f3:00:60:ae:09:5e:19:c5:c6:1b:29:0b:75:
5a:d5:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:58:38 2026 by rpki-client