Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: lDzBKSgVClCN4Q8XL9LhNF5w8IF7EHIynOow8mcP1CE=
Subject key identifier: 89:38:EC:EC:42:68:88:D8:3E:22:DC:51:C3:0B:8B:CE:99:12:D5:61
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 01A1781648F1DF7619BF2C73954343DF6972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0704
Signing time: Mon 26 Oct 2026 12:01:28 +0000
Manifest this update: Mon 26 Oct 2026 12:01:28 +0000
Manifest next update: Tue 27 Oct 2026 12:01:28 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: +HcL9+MBIvWJKTzcEkEN8/ckzQqGA3mkgudeCPgC5n4=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:48:f1:df:76:19:bf:2c:73:95:43:43:df:69:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Oct 26 12:01:28 2026 GMT
Not After : Oct 27 12:01:28 2026 GMT
Subject: CN=8938ecec426888d83e22dc51c30b8bce9912d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:6d:51:cb:9d:64:7d:58:09:6f:83:5e:6c:
ec:d2:c8:90:86:3a:3d:b0:71:4b:63:89:c4:b6:b9:
95:11:d6:b2:6b:23:bd:b8:ba:2d:28:f2:4c:bd:be:
d9:b0:59:00:01:39:f4:57:4a:15:83:8e:be:ac:4b:
ca:28:e4:70:5b:1e:6e:61:6a:7f:88:1c:3f:f6:5e:
ea:9f:67:fd:32:c1:18:02:6f:4e:51:cd:96:7c:b9:
07:b4:b9:c7:1b:ed:db:77:40:8d:9e:1c:39:4b:e8:
de:41:b3:7a:fd:2e:07:dc:2c:15:6e:01:a6:40:7c:
8b:77:8b:79:aa:18:22:ea:7e:ac:d3:0c:57:5a:26:
6c:05:b1:fc:ed:e6:8d:e6:19:e4:47:d6:55:a6:8e:
4a:de:2b:77:4f:65:f4:cb:ef:2b:a9:1a:a2:57:47:
74:5f:10:39:c0:53:ea:32:20:03:ae:41:06:aa:c5:
0c:07:e3:d2:c2:9b:99:f5:57:a9:22:53:12:67:d0:
b0:1b:49:20:df:e2:41:51:b1:7e:e7:d5:67:c5:d1:
37:05:48:50:24:62:70:bc:0d:4b:d8:d4:73:4d:f9:
c1:e6:41:bf:cd:5b:54:17:bc:aa:dd:0a:62:7c:85:
a9:08:40:df:12:e6:6f:6c:6b:b5:65:9e:a9:8d:c8:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:EC:EC:42:68:88:D8:3E:22:DC:51:C3:0B:8B:CE:99:12:D5:61
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:79:cd:09:a8:03:8b:5f:2c:97:76:27:73:43:54:7e:06:b2:
52:b3:37:80:13:20:3c:9a:ee:8b:54:c7:66:65:74:ab:af:79:
35:71:fd:41:a5:6c:95:79:3a:1c:e8:5f:d5:b7:b0:70:88:d1:
2a:a0:8a:1b:3d:98:82:8a:7f:0c:6f:f5:03:a1:6c:59:38:90:
40:d6:c2:91:81:e9:02:72:73:f0:69:36:0a:31:c4:29:dd:42:
cd:d7:28:31:eb:92:2f:8a:47:46:72:b3:5f:d9:01:20:27:84:
19:14:6a:d1:77:c6:2c:b5:c5:89:6b:ad:fa:22:15:7f:fd:6f:
5f:ba:7a:f5:7c:30:c1:b4:b1:17:db:1f:28:74:2d:21:4b:c7:
ce:05:cf:2c:bd:09:a4:4c:b4:f7:f3:2e:6f:4b:76:34:46:a4:
6e:f5:4e:4d:2d:e5:26:ee:1c:e5:33:66:1c:19:83:02:ca:58:
b9:ce:42:5e:fa:e7:85:aa:72:f7:7d:99:8a:c9:87:1a:1d:3d:
18:ac:88:fc:8d:e1:b8:2a:39:25:63:14:78:c7:80:eb:43:c0:
d4:96:db:cf:e3:88:fb:cd:fc:33:9e:c9:8f:d7:b1:ec:83:1a:
e9:d2:c2:fa:c8:25:bf:be:d5:51:d8:87:cd:bd:96:1e:e5:22:
fd:34:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:52 2026 by rpki-client