Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: 7Za9nOgZMVY0c8tGyQM8aY0WTj0xxUxKzwHFwltr0VQ=
Subject key identifier: AB:48:41:E6:2D:8C:0D:F0:36:6D:84:24:E1:BD:63:9A:00:6A:D7:9B
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 019CE5C97CCE7E991F2BE781B305BA95E700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 04A6
Signing time: Fri 13 Mar 2026 06:01:52 +0000
Manifest this update: Fri 13 Mar 2026 06:01:52 +0000
Manifest next update: Sat 14 Mar 2026 06:01:52 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: OLaHqG3a6Xkgqu+hRZfhHXUk+hjwD9oxV+vtCKt6OKg=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:7c:ce:7e:99:1f:2b:e7:81:b3:05:ba:95:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Mar 13 06:01:52 2026 GMT
Not After : Mar 14 06:01:52 2026 GMT
Subject: CN=ab4841e62d8c0df0366d8424e1bd639a006ad79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:4d:5c:4e:1e:3a:5d:51:34:a0:41:5d:e0:
91:31:ba:62:92:8c:35:91:33:e5:28:b7:ce:e1:08:
78:f6:2b:77:05:ef:3c:65:f4:ae:da:5f:fb:e5:20:
9f:86:c4:48:49:f0:e2:5c:5f:aa:e2:c3:94:b5:00:
26:18:71:da:11:f1:49:f3:ad:f9:c8:da:bf:4d:62:
c1:68:fa:4a:30:b1:df:11:1f:7f:2e:42:4f:ef:5a:
24:39:95:ee:6b:ca:c8:d0:b6:42:15:cc:20:08:b9:
4c:08:db:fa:36:b7:0f:be:3a:e6:d3:b7:cc:c3:17:
75:37:c4:76:89:ed:8f:c1:87:77:19:27:17:05:67:
df:d6:d3:aa:34:5d:69:c6:7e:bd:06:a9:8b:c9:b7:
48:a7:b2:33:12:e5:b2:47:6f:bd:e4:7c:fe:b5:7f:
2d:75:85:6b:9c:3c:25:42:cd:69:11:d7:e8:74:d4:
c9:74:43:92:9e:2e:a9:cc:19:97:45:93:f2:e5:32:
33:9e:be:3f:81:b0:73:14:c2:22:07:8d:01:af:99:
58:5c:d0:fe:a8:7d:c3:ba:22:62:b9:38:fb:9c:e0:
c2:2f:6b:88:4b:0d:76:75:f7:40:a2:e2:92:12:4f:
dd:f4:78:c8:e3:63:2b:53:47:a1:38:61:f2:b5:87:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:41:E6:2D:8C:0D:F0:36:6D:84:24:E1:BD:63:9A:00:6A:D7:9B
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:74:ee:b3:07:48:24:07:98:cf:c8:75:f7:20:1e:79:4e:15:
46:56:0e:37:52:d0:b5:bd:d2:5f:b6:d9:54:f1:56:a0:c1:dc:
53:61:18:eb:74:d3:3e:7f:79:e9:0a:3e:50:7d:c6:e5:a2:fe:
f2:af:ee:8f:33:fb:37:83:7f:98:9d:68:59:9b:50:3e:b6:67:
7d:eb:cd:b2:24:09:01:e3:d2:57:2c:36:88:12:bc:41:f3:2f:
d1:9a:c3:bd:be:1f:4b:32:7a:3c:9c:68:90:6e:f3:b2:21:55:
d4:ec:df:91:ce:3a:8e:ce:67:e0:ce:57:04:a0:37:57:9a:54:
2a:0d:e1:db:90:63:e2:5f:46:72:b2:45:3c:cc:aa:b7:8a:13:
19:f4:33:18:ff:98:08:99:4e:0d:f0:80:91:eb:4f:e6:5b:5c:
ef:e1:d6:e9:ba:83:77:b3:6a:64:43:a7:c5:7a:3e:a1:50:cd:
36:69:ef:cd:2a:89:e5:64:e3:24:4b:75:b2:e4:9a:61:57:ab:
65:a1:b5:55:e2:d9:c4:62:13:c0:33:a7:9a:49:61:03:14:21:
2f:01:84:64:ac:fc:c9:84:74:41:d9:e6:1e:fe:56:c4:56:05:
c7:5b:67:a0:97:9c:5d:d9:24:32:80:39:1f:42:c5:ec:81:3f:
18:75:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:09 2026 by rpki-client