Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: Crt4s6v7AUydLDFtG7BLCN2ONCvwHInQwNarofTLLlk=
Subject key identifier: 42:89:CD:C1:7C:CE:81:3A:64:BD:58:19:FA:B9:E1:46:14:83:2D:BB
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 01A03E5FF853870FEBD25CA0EA85613D6062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 14:01:11 +0000
Manifest this update: Wed 26 Aug 2026 14:01:11 +0000
Manifest next update: Thu 27 Aug 2026 14:01:11 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: d0KFyqFkKSoZSqaNDAIgjGjbwdZO6FXypzdK/3QOFj8=)
3: hbeIEnlJLGCUvc-bfFDQtYlNuoI.roa (hash: lsxRlcpEOwKSepvmoUR1XtdYnRnB8rc4Z/mYeHXQHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:f8:53:87:0f:eb:d2:5c:a0:ea:85:61:3d:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Aug 26 14:01:11 2026 GMT
Not After : Aug 27 14:01:11 2026 GMT
Subject: CN=4289cdc17cce813a64bd5819fab9e14614832dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:d7:f7:96:37:17:b9:93:c0:ad:59:24:e0:
25:1a:60:0f:e2:14:4c:33:6c:fc:76:74:55:42:72:
f5:0d:16:7c:be:2c:63:d4:52:91:6b:f0:d0:4d:a2:
a9:63:22:69:99:54:fa:c1:9b:fd:73:02:b6:94:0c:
90:37:d6:07:8a:7a:88:6d:ef:b1:58:49:f7:29:02:
e0:37:f5:53:af:7e:e5:91:79:08:7f:8d:38:8f:09:
be:8d:db:c1:95:c0:9d:e7:fb:0b:a8:03:04:1d:d9:
2a:ed:b9:1a:ff:89:29:0b:85:34:1e:97:df:0c:33:
05:e4:e7:88:63:79:0d:87:f8:69:84:4a:d3:26:8f:
f3:de:2e:cd:48:c5:37:a0:ae:eb:60:00:61:87:bc:
92:84:e4:a7:e7:81:7e:d4:7f:1d:5e:74:34:ac:fd:
8f:e5:8b:4b:94:0a:fa:6f:a0:4e:4f:09:1f:82:83:
7d:91:80:2f:dd:d8:45:a2:cb:f1:2f:37:da:2b:18:
92:79:d1:63:52:47:93:34:68:26:f5:3b:e7:8e:f5:
30:40:86:b2:42:d1:15:b4:66:dc:54:6b:19:ab:37:
83:c9:ac:1f:f1:03:f5:35:81:a3:38:a4:a4:25:e8:
46:21:e7:47:34:aa:d7:79:f8:17:8d:4e:c3:6b:9a:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:CD:C1:7C:CE:81:3A:64:BD:58:19:FA:B9:E1:46:14:83:2D:BB
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:47:4e:1e:71:d6:07:f4:f9:1c:24:a2:ea:fa:27:93:c2:63:
27:23:88:f5:a7:ce:1b:a1:8e:87:8f:83:f7:4c:4d:42:e7:9b:
8b:d3:f7:b7:8e:25:86:e3:84:ba:52:1c:aa:93:30:be:60:25:
d4:58:f3:60:e8:c1:43:1f:1f:a4:5a:a1:ff:c4:59:8d:8a:7d:
cc:ec:30:8e:11:51:8b:24:2a:d7:79:5c:83:6a:16:93:d2:41:
03:54:d4:87:6d:0b:6f:09:de:b9:42:47:30:5e:a3:37:45:93:
41:84:01:53:c2:0c:ab:d4:2c:dd:0b:07:e8:d7:e3:c5:6c:27:
d3:88:70:d2:9e:ac:eb:2e:43:b9:68:af:92:52:b6:9c:ec:b0:
2a:36:92:27:1e:16:ec:e3:b0:2c:51:3a:ee:78:97:36:c3:9e:
e1:4a:f9:6a:21:d4:6b:f2:88:95:8c:0f:2d:96:b2:c7:9c:20:
0a:f9:1b:d6:ce:8e:c3:05:c5:ce:e0:3f:6b:69:61:f6:6f:f4:
7f:44:42:7d:c8:63:0e:09:80:cf:27:45:03:a3:4a:3f:d9:6c:
eb:d2:87:f8:00:e2:e0:bc:19:4c:d9:5c:3e:9a:de:93:0f:34:
54:a5:f8:cc:e3:51:3b:b9:8b:2d:42:63:42:63:8d:6b:b4:db:
bc:22:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:41 2026 by rpki-client