Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: Q0TwbBA4cj0eVnVgF3dAkHhRlgXnOaFlffU8OFKHoDM=
Subject key identifier: 2B:B2:9B:F9:33:8E:54:B0:7D:DD:99:66:22:53:03:4D:BC:A7:7E:96
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01A176958EA9B7A359F373E34C571F3911EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 17C2
Signing time: Mon 26 Oct 2026 05:01:15 +0000
Manifest this update: Mon 26 Oct 2026 05:01:15 +0000
Manifest next update: Tue 27 Oct 2026 05:01:15 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: yjKXs5kw2bxM5u09plYJ145a43T6WPsLfrIgIyfy27w=)
2: mND-0a4yL-tXy2VnOslNtViZ0Fc.roa (hash: frqpwZCsuVguOXwWS0XNoRbXaDgKyEQgFFhJPereFqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:8e:a9:b7:a3:59:f3:73:e3:4c:57:1f:39:11:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Oct 26 05:01:15 2026 GMT
Not After : Oct 27 05:01:15 2026 GMT
Subject: CN=2bb29bf9338e54b07ddd99662253034dbca77e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:6a:e6:62:39:87:a8:75:54:00:3f:4f:86:
91:23:0d:ec:79:70:fe:15:c0:b3:ef:4b:50:47:09:
07:d6:a3:a8:98:f2:6c:00:d5:71:93:cf:df:2a:d8:
31:2c:2b:ad:04:9f:07:c0:53:40:19:7e:2e:2d:0e:
b1:3b:61:c3:2b:84:e0:4f:cf:43:6b:22:3a:6c:4e:
be:d2:0a:b9:40:c9:98:3e:bc:4c:46:a8:f4:86:6b:
7f:60:95:fc:b2:31:6d:7d:83:3d:fd:cf:d5:49:df:
18:04:cf:6e:1e:3f:dc:85:7b:8c:c6:c6:2c:fa:c6:
18:9f:67:9c:9a:a2:e1:58:43:81:97:33:53:17:02:
ab:a3:68:69:b0:c3:68:39:0f:94:9c:e6:4b:42:41:
1c:78:c2:40:ef:1c:67:49:4a:c5:dd:eb:fc:05:f1:
a3:54:85:85:cd:47:3e:f1:85:1a:a6:bc:c1:03:b7:
d3:94:74:00:1d:7f:b8:e4:f3:ec:53:21:24:ad:59:
8e:e9:70:fb:72:11:38:5e:e7:9f:24:7e:65:a0:10:
fc:cb:5e:96:4b:0f:a9:87:a1:2f:ce:0f:11:6d:49:
c0:13:bd:d1:f4:f7:35:35:15:45:80:44:1c:b1:c8:
ca:b5:5d:34:03:bb:c5:b9:79:a5:f9:81:f1:9c:6e:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:9B:F9:33:8E:54:B0:7D:DD:99:66:22:53:03:4D:BC:A7:7E:96
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:c2:23:c0:ba:db:f7:cb:62:15:ae:fe:32:e4:67:df:6f:
1c:9b:a0:05:ab:66:88:e3:41:b9:55:31:58:90:5f:a6:40:af:
b8:78:fe:f4:82:9a:7e:da:40:53:49:51:6d:09:5a:45:0f:a9:
f6:48:51:08:ac:f2:c3:e2:16:27:5e:f2:ff:56:a3:9f:d6:96:
79:37:c7:1a:10:ff:d1:74:65:c5:cb:6a:86:bd:b0:75:b0:80:
82:93:10:86:97:58:24:8c:e2:12:80:bc:d2:6c:8e:6e:ff:d7:
75:01:6c:de:4e:9f:71:ee:db:f4:5d:56:fc:09:b4:bc:f1:a0:
55:a0:07:35:af:e3:ed:2b:eb:e9:ed:18:fe:a0:0b:82:b5:31:
2b:c7:dd:81:50:7b:55:4c:ad:0e:00:ef:d7:bf:79:6a:ed:6f:
81:08:4a:94:ad:ce:c3:35:0e:9b:5d:2e:76:46:cb:3b:61:9f:
c1:ea:ee:77:6b:bf:f0:79:a7:91:e7:0f:a3:57:58:e2:08:74:
01:96:46:cf:d1:0b:7d:7f:c5:b2:35:f5:01:54:32:e0:fa:26:
28:62:c2:16:0d:33:90:cc:92:1e:17:46:96:73:e7:e6:6b:a9:
07:50:7e:15:59:3c:72:dc:0d:8c:b0:fb:ef:e7:f8:d5:8c:2f:
04:24:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:48:34 2026 by rpki-client