Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: xJ5l0KOOeYkUrWv244Uw+a9KmDdoCGgPu6zfnY9SXWg=
Subject key identifier: DB:6C:47:76:CE:6D:09:70:CB:08:1C:87:CB:9F:C2:C8:44:98:EA:39
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 01A08A8D58A252664A604DC5DB7649596AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0689
Signing time: Thu 10 Sep 2026 09:01:54 +0000
Manifest this update: Thu 10 Sep 2026 09:01:54 +0000
Manifest next update: Fri 11 Sep 2026 09:01:54 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: SIaQPBWJy3j0FmGiPbGt1Cz2oaKQ/4XY83wBBov4OwA=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:58:a2:52:66:4a:60:4d:c5:db:76:49:59:6a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Sep 10 09:01:54 2026 GMT
Not After : Sep 11 09:01:54 2026 GMT
Subject: CN=db6c4776ce6d0970cb081c87cb9fc2c84498ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:57:03:72:0f:85:50:1d:7a:b6:ad:f4:c0:
21:2d:d5:8f:7b:5a:2a:d2:2d:60:7c:2d:ca:d1:78:
bc:24:6f:9a:3a:01:e9:09:4d:ef:53:a5:cf:0a:ee:
3b:88:d3:77:ae:4e:86:c1:3b:1c:a3:64:3a:ab:b5:
80:2c:35:98:ab:30:82:e2:c4:81:06:29:6f:e0:36:
22:57:05:73:4e:3e:3c:fc:7f:1b:37:6a:48:fe:04:
56:79:fe:fc:83:d4:12:27:64:73:9c:4f:00:6c:6e:
83:6f:ce:6b:b7:23:f5:c9:f4:98:2f:31:5f:5e:53:
19:d7:ca:15:e8:86:6c:78:8d:94:2e:d1:76:ed:20:
8d:fb:97:06:02:8e:27:54:33:8a:67:c6:b5:bd:fb:
6d:35:28:56:3b:ce:44:58:e4:c1:a4:2b:c1:25:7d:
eb:0b:57:4d:b1:92:f9:97:6c:2e:67:34:40:fb:72:
3f:d9:49:89:d3:37:09:ad:c9:b7:f7:ea:84:ac:b7:
9a:6e:a2:c2:bb:a9:29:e1:86:47:39:c7:50:6f:20:
87:42:69:5c:9f:d6:b6:a6:58:00:05:1d:db:88:32:
70:66:a3:b6:dd:88:7a:c0:01:b2:bb:e5:71:6c:ff:
da:cb:22:0a:b3:5d:c7:48:0b:0b:7e:44:62:e6:1e:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:47:76:CE:6D:09:70:CB:08:1C:87:CB:9F:C2:C8:44:98:EA:39
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2a:ab:33:71:87:a4:4a:96:bf:ec:6b:9b:88:81:7c:2b:63:
76:85:14:b6:75:98:00:22:88:c0:13:a1:a4:3d:72:31:ee:12:
46:b2:53:70:eb:af:f6:ef:f0:c7:cc:d0:39:d9:69:02:93:8c:
47:73:59:e9:a5:d6:98:65:24:d2:8d:d6:3b:1b:5a:25:d8:aa:
74:8e:3e:f7:7a:2c:d3:a9:82:7a:39:77:21:33:40:23:45:25:
17:70:52:2e:90:6f:b4:8d:7a:a2:e6:b3:a9:6b:39:f3:b4:2a:
8f:ec:11:0f:d6:e3:e3:4d:0f:f6:e6:40:5e:21:4f:a2:aa:ca:
61:1e:ff:1f:f9:70:59:56:5e:5e:d9:11:a9:8c:84:4e:e6:97:
7d:b8:9d:14:7e:ef:25:b4:ee:a7:35:40:6d:cb:cb:de:b2:58:
3a:58:6b:9f:79:b6:40:bc:d1:f3:f7:2d:9b:05:66:38:d3:b5:
3d:e9:07:e7:67:88:26:2d:9a:b8:3c:f7:9f:8e:8b:5b:59:16:
0e:7e:e7:ee:a0:9c:ee:e9:17:91:ef:33:11:03:b7:5f:b6:e9:
da:5b:f9:83:a7:63:71:07:6e:c1:f1:63:e8:ac:1a:1a:c2:e3:
e7:ac:d5:2c:04:bd:76:1b:8d:be:10:16:28:88:f8:c3:87:0e:
68:a7:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:03:58 2026 by rpki-client