Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: A9jW3F1Kpr7AMTQqSXHBoZX+rUyYeA1jdj8+yrLsGiI=
Subject key identifier: 04:2C:35:5B:85:48:A1:74:B6:E5:0C:50:B3:C7:DD:E3:55:BF:9D:1B
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01A08AFAFC180326B3C02346303F4C5297E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 1748
Signing time: Thu 10 Sep 2026 11:01:39 +0000
Manifest this update: Thu 10 Sep 2026 11:01:39 +0000
Manifest next update: Fri 11 Sep 2026 11:01:39 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: K8XmxtvlHmTdyT9Nel9aKKyrNO7ww96JEczXjOv3QB4=)
2: mND-0a4yL-tXy2VnOslNtViZ0Fc.roa (hash: frqpwZCsuVguOXwWS0XNoRbXaDgKyEQgFFhJPereFqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:fc:18:03:26:b3:c0:23:46:30:3f:4c:52:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Sep 10 11:01:39 2026 GMT
Not After : Sep 11 11:01:39 2026 GMT
Subject: CN=042c355b8548a174b6e50c50b3c7dde355bf9d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:49:85:c3:ca:24:53:60:42:bd:cd:17:ca:
fe:8a:e7:d7:fe:a3:cb:3e:f6:4b:d4:8b:21:fc:96:
c5:de:f2:d2:5f:6b:48:c3:fb:e7:bb:1c:e3:43:e6:
94:25:ec:59:1a:0e:9c:91:1f:51:55:95:2b:5d:45:
7e:60:3e:1d:81:fb:a9:5e:25:7e:2b:2d:5d:f5:fe:
56:e2:f7:ae:8c:22:ff:0c:c8:b1:ff:70:33:8d:32:
bf:c5:49:b5:92:8a:ea:55:37:0b:d8:b8:66:61:cc:
41:b2:0e:54:37:a0:9b:9e:86:c6:7a:a8:7c:d4:b2:
91:6c:a1:40:88:4a:9b:ae:dd:61:05:10:3e:e9:c2:
c7:35:4e:1b:97:df:62:ab:af:80:8a:a1:1e:c4:ba:
42:b3:3f:75:03:e5:cd:c7:47:6c:6b:c7:1d:44:ed:
76:df:17:93:81:84:1a:11:5e:a5:bf:7f:66:0f:7a:
40:43:78:fe:66:ad:0d:a2:27:8d:92:45:4b:a5:a7:
d7:c7:be:84:fa:38:41:1a:42:9c:ab:77:6d:92:5a:
f9:96:13:0d:e5:df:be:35:1f:14:4d:7a:d2:10:fb:
89:eb:60:e0:25:6f:73:a4:c2:88:2b:34:10:21:37:
3d:39:b6:e7:0b:e2:52:2b:06:ee:32:db:50:be:30:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2C:35:5B:85:48:A1:74:B6:E5:0C:50:B3:C7:DD:E3:55:BF:9D:1B
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f5:7b:76:c8:42:43:36:9e:d9:9f:bd:63:0f:ef:7b:c7:f2:
dc:c2:8b:09:ba:40:1a:d0:a6:31:ca:d9:2a:d9:b1:20:7b:df:
2d:1a:7b:71:97:58:3d:78:1e:4a:01:5a:d6:7c:06:3f:08:16:
c9:3d:04:c4:5c:f3:c7:4b:98:3d:71:ed:6e:9f:4d:ca:f3:de:
5a:b2:cf:6f:50:bc:ea:cd:3f:66:b1:00:e6:1a:f0:b8:a9:11:
50:cf:71:65:af:b3:30:34:77:11:f8:1e:11:ca:e7:88:0d:6c:
22:b1:32:2d:80:4d:aa:fc:34:fb:b0:b5:96:30:30:39:b6:8a:
e8:00:83:8f:89:77:4c:d3:9d:cd:40:3a:d2:f6:d5:b3:56:41:
85:6c:13:7e:e4:a8:77:5e:35:65:b2:e1:37:7a:92:d3:65:cd:
14:9f:c3:3b:3d:64:b6:b5:a4:40:b1:52:d4:bd:2b:48:44:35:
77:72:b6:5d:cf:73:cc:cd:6e:ed:eb:8a:d9:b2:ac:94:b8:9a:
02:93:4f:18:8a:84:ad:f4:d2:9f:be:07:13:6b:df:07:d8:e8:
9b:e3:da:0f:62:5c:1d:df:80:95:a3:91:45:83:e1:c3:83:cc:
da:1c:02:de:b5:54:d7:2b:88:fe:ee:c5:60:15:18:de:95:61:
cc:5f:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:28 2026 by rpki-client