Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: nCWpdL1awxFRoHiTQBzC+d8Bowv+n8aFMmuOSJz5hrE=
Subject key identifier: BA:6D:42:B4:43:75:3A:C4:6E:8D:93:6C:42:28:11:9F:F7:DB:69:64
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019F111BF1B65121B6748123D7284F96A99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 02:01:11 +0000
Manifest this update: Mon 29 Jun 2026 02:01:11 +0000
Manifest next update: Tue 30 Jun 2026 02:01:11 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: Da4I1voTRqPxb+pap0mJNpYPYTF/8voOKZQtMjHgzZo=)
3: hbeIEnlJLGCUvc-bfFDQtYlNuoI.roa (hash: lsxRlcpEOwKSepvmoUR1XtdYnRnB8rc4Z/mYeHXQHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:f1:b6:51:21:b6:74:81:23:d7:28:4f:96:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jun 29 02:01:11 2026 GMT
Not After : Jun 30 02:01:11 2026 GMT
Subject: CN=ba6d42b443753ac46e8d936c4228119ff7db6964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:e3:95:db:9f:20:2c:88:d7:0a:34:2c:6f:
49:a9:fd:61:c4:6a:20:87:7f:95:a0:90:03:ef:4f:
8c:b4:c4:3d:47:85:2c:43:bb:92:46:57:48:36:61:
1d:af:65:fd:18:f8:4a:9c:2f:0c:ed:bb:0e:08:e2:
4b:58:aa:a2:79:69:d7:70:e3:2e:ef:69:a9:e0:b0:
da:6b:98:d5:39:53:b4:f5:8e:87:b6:64:14:ee:9a:
77:17:3b:df:17:1d:b3:86:d4:30:6c:92:5d:67:ac:
f4:97:25:2f:76:f6:88:e0:09:0a:96:2d:61:bd:3f:
b5:77:f9:aa:74:db:fb:5f:67:2a:e7:cf:a9:47:94:
49:75:9d:bf:76:34:96:ce:3d:0e:44:10:2f:fe:1e:
70:a6:f7:98:ef:db:4a:ce:f4:11:a5:c8:4b:0b:31:
47:ae:03:69:03:21:9b:f2:0f:1c:04:5d:18:ae:a1:
da:e1:8e:23:bd:b9:5e:e4:2f:c9:df:a7:37:79:dc:
54:1a:4b:f2:46:5a:1c:21:31:6f:bd:c2:2e:ae:95:
ce:52:e8:98:b0:f7:79:0f:74:7f:c5:98:8f:eb:c8:
bd:75:61:85:7a:b4:a5:df:5b:c5:2d:79:2d:f2:03:
e7:13:46:93:6a:68:8e:3e:44:ea:4a:82:14:81:ab:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6D:42:B4:43:75:3A:C4:6E:8D:93:6C:42:28:11:9F:F7:DB:69:64
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:a2:84:e1:2d:4b:42:00:ec:a2:d4:21:83:59:7f:c3:36:
40:d5:c1:4a:8f:6f:53:ba:47:91:71:b1:6e:69:7f:85:1d:62:
f6:71:0f:f9:3d:0e:e4:71:d9:ef:2e:60:64:e4:9a:1a:07:fa:
b3:9b:28:b4:55:d6:53:87:c9:bd:a5:fb:a6:c6:97:46:e9:f4:
59:d5:ef:1d:1a:cc:3d:aa:7a:be:63:ea:b1:50:f2:83:dd:74:
2c:d8:74:85:a8:ec:9a:fe:0b:a2:e1:48:28:6e:6f:95:73:b3:
10:b9:0f:0d:aa:de:ee:40:ed:70:c0:24:28:ed:67:af:77:89:
2c:80:8b:1c:21:e0:78:8c:d6:12:f8:0d:13:6c:15:26:af:32:
f9:1c:1c:ef:5b:91:ab:9f:08:d5:6b:47:6c:01:7b:50:b7:33:
66:76:21:5d:21:35:2f:13:da:5f:9f:97:00:43:ce:67:04:6f:
81:a0:ec:2f:70:3a:a1:b1:ea:70:fc:39:8f:16:68:54:53:53:
24:f9:91:a2:a0:9e:8b:58:fd:0e:d7:af:2b:ea:11:7b:9f:35:
5c:f1:7d:73:ca:37:4b:93:d6:03:39:94:0a:de:81:c7:92:3b:
b6:4a:40:af:b5:92:e4:77:10:2e:38:8d:b6:82:b9:9c:10:bc:
6a:9e:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:36 2026 by rpki-client