Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: Yf2ES4vlC9RglZHwDehvRpQ8y4rkrDIVLKSPYusKnxo=
Subject key identifier: 40:2C:51:69:3A:DF:89:3A:B5:1A:A9:76:BD:6B:C1:E9:0B:9A:BC:84
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01A17A71FCD72ECC5206863C8EEFBB50DAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 17C4
Signing time: Mon 26 Oct 2026 23:00:52 +0000
Manifest this update: Mon 26 Oct 2026 23:00:52 +0000
Manifest next update: Tue 27 Oct 2026 23:00:52 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: InQdF2R231HS2tSJAQBu0UNWEz2QORHjoMVIwH1kq+4=)
2: mND-0a4yL-tXy2VnOslNtViZ0Fc.roa (hash: frqpwZCsuVguOXwWS0XNoRbXaDgKyEQgFFhJPereFqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:fc:d7:2e:cc:52:06:86:3c:8e:ef:bb:50:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Oct 26 23:00:52 2026 GMT
Not After : Oct 27 23:00:52 2026 GMT
Subject: CN=402c51693adf893ab51aa976bd6bc1e90b9abc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:4b:0a:82:e4:de:bb:61:65:1a:d4:da:bc:
d1:ba:53:6d:67:ed:96:16:de:8e:30:4e:dd:ae:a6:
a0:e9:40:b8:2d:6c:02:ec:56:94:60:f5:60:d1:b7:
09:8f:1d:45:de:86:95:95:33:63:39:33:02:29:da:
96:b8:64:bb:4f:18:f1:d4:c2:ad:9f:a8:74:c6:c3:
6f:61:e6:d1:99:95:90:0f:96:84:7f:a6:be:58:a0:
8e:3f:3b:59:28:62:89:ef:e6:60:e3:7b:17:8c:c3:
ee:99:37:02:17:c0:f0:9d:14:39:c0:6a:7f:8f:52:
ad:5f:71:34:fe:bf:12:a6:6c:29:50:9d:d7:91:c2:
f8:27:a3:c7:a1:cf:e0:5f:b3:06:4a:8e:20:41:7f:
e9:71:b6:5d:5a:66:61:c8:68:02:1e:ef:ef:a3:0f:
02:f8:ca:a2:46:0a:72:cc:00:a2:13:23:fc:9f:ba:
ea:17:27:ac:ce:49:eb:03:b1:c2:1f:66:5b:54:cb:
68:a0:87:1e:b2:37:e9:09:44:73:4a:77:76:00:bf:
6d:10:b3:0a:9f:b6:30:a9:d1:fc:f7:15:24:fe:1c:
0d:13:f8:95:ca:ef:e8:fc:b9:3e:a0:f1:ff:0e:d0:
c1:b6:e5:39:5b:e1:1f:01:70:4c:01:3f:2e:4e:34:
e1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:51:69:3A:DF:89:3A:B5:1A:A9:76:BD:6B:C1:E9:0B:9A:BC:84
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:37:ab:c3:f1:c8:22:d9:87:ed:8d:85:4a:64:96:00:c8:7a:
39:d0:4b:af:2e:2e:13:33:d8:e1:9c:81:42:bd:b5:ad:89:19:
42:18:e4:72:72:a8:4a:ac:bc:1c:5c:1e:0d:ed:f8:1a:b8:6d:
06:ac:82:71:ee:4f:ee:52:b8:eb:a3:28:d5:e9:f8:04:ec:de:
1d:1b:6f:07:75:37:f4:60:9f:03:41:3d:b2:61:ec:91:8e:2a:
02:21:cb:1f:e3:ad:de:ad:d7:b7:f4:9c:f7:c3:11:6f:02:1d:
89:7f:39:c6:d9:fb:5a:11:ca:f6:0f:4a:56:b4:a8:e8:b9:f2:
74:85:df:9d:48:99:0b:ec:3e:47:cb:b2:c2:4c:af:eb:b6:34:
c3:94:1d:cc:3d:22:5c:28:98:5d:d1:16:27:a3:0c:7b:e2:42:
6f:1d:be:bc:44:c4:49:12:54:20:fb:ee:07:d5:3b:fd:00:d8:
1e:8d:67:65:eb:34:0a:64:1d:5c:c1:8d:5c:f3:1b:26:27:f6:
90:ee:8e:fb:9c:af:2f:76:63:60:ce:d0:44:14:69:3e:d4:e0:
82:c1:63:37:8d:f1:52:d3:b3:08:7e:de:39:32:3e:af:96:b1:
eb:ac:01:95:78:c4:99:1c:e8:06:b2:8a:15:47:0e:2e:73:45:
13:c5:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:44:53 2026 by rpki-client