Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: yPOajEQDS9TDbF+wwajPdkMOSN7rM/4IUVeGOh75xVA=
Subject key identifier: FB:69:AF:35:89:75:74:F8:98:79:63:F4:82:37:47:EF:71:52:AB:6B
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 019F1C0D7045E94D1B254495B04ABBA0E60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1989
Signing time: Wed 01 Jul 2026 05:01:10 +0000
Manifest this update: Wed 01 Jul 2026 05:01:10 +0000
Manifest next update: Thu 02 Jul 2026 05:01:10 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: ROWzJYAt8oISudeFTdg251grEaMCJIFnU9g8sFdzB80=)
2: Fa37sgJ0KEgxPOoDaXh31g5a4H8.roa (hash: mNF5TDQzIO8pXqi/tpiKK9BXHWuK4DjnzUPJ4cKM8kw=)
3: Ks1siXudDP7UhfleUk0HqiWJhus.roa (hash: 1NzCZJi9208gkBcW8iQCaIa1aBFHGt3mrmc2W81HwZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:0d:70:45:e9:4d:1b:25:44:95:b0:4a:bb:a0:e6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jul 1 05:01:10 2026 GMT
Not After : Jul 2 05:01:10 2026 GMT
Subject: CN=fb69af35897574f8987963f4823747ef7152ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:90:56:91:ef:40:1e:9b:c1:4c:72:67:67:fd:
4b:02:88:e1:61:8c:81:44:09:c5:6b:fa:79:d8:3e:
2b:00:9d:17:56:a4:50:2c:e1:c2:a0:84:f4:3d:67:
09:e6:d6:72:f1:04:e9:f6:d1:0e:55:38:97:d6:42:
c2:c3:07:40:d8:b5:92:0c:1d:de:a2:db:47:92:5e:
77:41:be:30:e3:77:9b:14:5f:47:9c:61:a5:49:41:
06:9f:38:ff:e5:99:5b:88:54:7f:05:fe:79:b4:af:
63:29:c2:f4:b4:46:65:31:a3:cd:42:2d:31:d8:b1:
21:cc:ac:5c:f2:46:47:9c:5c:a9:f0:0b:bd:ea:2e:
a4:0c:40:05:78:03:b3:a9:d1:8f:11:19:76:80:b8:
4a:e0:55:45:85:4f:a3:07:d7:61:98:3c:b8:95:b7:
9a:c5:04:61:eb:4c:2e:d1:5c:d2:e9:81:64:ef:4a:
8b:63:0f:6d:f4:b7:13:58:06:dd:fb:23:ca:03:6c:
00:9e:b4:d8:f0:69:f4:39:4f:0d:11:c6:b9:38:0a:
cd:33:be:79:bf:cd:2a:59:48:eb:f9:a5:ea:1a:04:
f7:29:3c:d7:49:9f:a9:47:42:12:ea:59:ca:71:0d:
6f:1c:7d:c6:92:68:bb:32:f3:b9:66:e9:bb:54:9a:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:AF:35:89:75:74:F8:98:79:63:F4:82:37:47:EF:71:52:AB:6B
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8f:c2:73:6e:2f:24:40:f5:1f:40:98:cb:09:82:c2:bf:fd:
6b:01:44:b3:a8:9d:d9:62:81:b5:18:85:43:37:e1:d8:70:cc:
93:50:85:70:38:9f:23:10:9e:47:b3:76:fb:cd:0d:ad:c0:38:
14:ba:7b:75:4e:8f:f2:c7:d8:35:f8:b0:92:e9:84:ac:ad:3b:
85:32:09:e6:34:f6:75:1b:e2:43:42:b1:a4:f8:9e:dd:92:e6:
5c:ba:11:b3:fe:25:ae:24:f3:c7:4e:2a:20:87:aa:4f:03:91:
66:e0:b7:e5:65:ea:aa:26:28:01:dc:c1:70:ff:d2:89:69:33:
fa:33:08:e1:61:54:d6:53:c7:bf:eb:64:3f:96:a5:d1:fe:06:
56:e0:00:4c:de:bb:6d:45:c2:f6:af:5b:f6:3f:06:9a:e1:a9:
bd:d7:44:6b:f8:75:66:f4:71:4b:e4:f7:fd:20:c8:2a:11:86:
71:5a:60:f7:7f:89:58:e1:92:4d:53:80:57:5d:25:01:4d:03:
5a:e9:79:92:0c:bc:f4:6c:9b:3c:ce:39:82:6a:66:31:da:14:
3c:4d:dd:c4:50:ca:90:d3:f2:bf:aa:7c:fe:a7:a8:12:86:ff:
f2:53:91:c7:08:2f:76:20:2f:9c:b6:66:a1:5e:1d:cb:69:7a:
ca:58:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:00:47 2026 by rpki-client