Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: pv+UpLwuyck+qQMiFEHSLKhQK/RjbF5/vFYGMwX35QU=
Subject key identifier: 5D:F9:AD:B8:AF:F9:58:BC:5A:BC:C6:40:35:46:F2:8A:F3:1E:9E:07
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019F1AC3D5AD47EB6761D01FF653ECEEA565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1623
Signing time: Tue 30 Jun 2026 23:01:09 +0000
Manifest this update: Tue 30 Jun 2026 23:01:09 +0000
Manifest next update: Wed 01 Jul 2026 23:01:09 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: i8USl6bfDqmtMzjuMp5dSCXa3GViWrHeJemdcHWRlao=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c3:d5:ad:47:eb:67:61:d0:1f:f6:53:ec:ee:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jun 30 23:01:09 2026 GMT
Not After : Jul 1 23:01:09 2026 GMT
Subject: CN=5df9adb8aff958bc5abcc6403546f28af31e9e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:82:ca:db:d4:60:b3:db:5c:30:cb:f7:e8:
fd:b6:1a:07:ff:7c:1e:23:80:b0:5b:10:c7:ab:f0:
5b:90:e1:45:3d:2a:83:4b:80:62:c9:fb:b6:4d:f5:
9a:dc:74:9d:7d:aa:c9:a1:b7:81:64:37:a9:09:4a:
d8:7d:6e:7a:34:bf:8d:93:34:9a:21:89:c1:db:5b:
fa:0c:b7:5c:4c:e7:17:29:bf:65:51:8a:4a:fa:b0:
3b:a8:eb:50:4b:ac:4c:78:89:90:5a:a6:49:2f:dc:
7d:93:80:c2:90:58:44:21:a1:e6:83:de:38:a0:46:
c2:04:3f:64:4d:22:f7:b7:29:61:62:8d:18:b7:60:
ef:08:70:b0:0c:be:cb:b1:f7:40:98:cf:94:7d:b7:
18:1b:ed:de:b1:b9:f7:65:a2:04:55:ff:d5:ed:d1:
ef:eb:a1:47:ad:36:9e:0d:0c:c0:67:cb:cd:f3:a2:
8e:59:1b:d2:42:4b:c7:3f:50:f2:c9:c5:d8:68:37:
39:eb:68:5e:29:2c:30:da:74:64:3a:62:01:cb:f6:
b9:6a:ce:39:74:08:e3:c1:56:47:08:3f:9e:75:56:
f4:bd:76:df:25:87:70:64:bd:59:f4:53:89:04:ad:
f7:87:cd:bf:a5:a8:d7:05:6c:70:ec:51:d4:ec:de:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:AD:B8:AF:F9:58:BC:5A:BC:C6:40:35:46:F2:8A:F3:1E:9E:07
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:59:b1:40:1e:33:a4:aa:63:5e:ba:3f:1e:d4:1c:de:33:
2e:b0:27:08:a5:76:55:f1:b6:bf:31:f0:66:a1:b2:6d:7c:82:
73:56:cf:a3:49:4f:ec:9f:a1:39:07:e0:ae:49:08:f3:6f:7c:
5a:82:3b:1f:bc:d7:5f:25:e6:cd:92:5e:5d:69:ee:73:36:e6:
5f:fa:9d:21:77:af:f2:62:dd:4b:9c:37:b7:a3:dd:90:43:fe:
10:85:2c:88:5e:ee:3f:3c:ee:d8:b7:1f:86:39:bc:0c:59:bd:
e2:fd:33:d5:4c:bc:be:bc:95:51:53:85:9c:35:12:57:02:da:
bb:a1:86:20:62:21:2f:4b:62:22:2b:fd:15:d1:28:2f:5f:ef:
f4:72:c2:60:27:f8:c3:c7:73:6b:57:2f:da:75:f4:83:19:e0:
3a:02:02:00:18:8a:c9:dd:18:02:e2:4e:9b:b1:0d:5c:9c:49:
ae:73:fc:ff:4f:48:24:aa:a5:25:90:20:88:d5:28:9b:d9:d0:
b9:b8:18:2d:ea:ee:69:f4:08:43:a2:04:6d:a2:9f:11:0f:4d:
df:4e:c4:5c:16:07:84:86:72:5f:75:60:73:ea:02:d3:f3:1e:
13:df:06:9a:df:af:fd:fa:8b:71:20:00:0e:6f:4d:a9:b9:79:
85:d4:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:55 2026 by rpki-client