Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: C8Wxmmix0Ni3p+oer8PvmXVEoDcdlWorXbXC6K4sbgw=
Subject key identifier: 8A:FF:B5:CC:97:8B:4A:07:2B:35:55:D6:6C:46:8D:EF:B2:5D:31:D3
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01A180AB8E4AEE234A2189D128056A63645B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1AD1
Signing time: Wed 28 Oct 2026 04:01:29 +0000
Manifest this update: Wed 28 Oct 2026 04:01:29 +0000
Manifest next update: Thu 29 Oct 2026 04:01:29 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: Q0I+w6jtQ46jxATZFGlN+7SJVwP7u2kLR9V4anrLfoM=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:8e:4a:ee:23:4a:21:89:d1:28:05:6a:63:64:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Oct 28 04:01:29 2026 GMT
Not After : Oct 29 04:01:29 2026 GMT
Subject: CN=8affb5cc978b4a072b3555d66c468defb25d31d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:15:e3:16:fe:ae:10:46:35:f4:4e:32:65:
cd:50:a4:f2:b6:90:c9:83:e5:ae:d9:67:84:93:7b:
3c:7b:70:83:d9:a1:21:be:44:2d:e0:da:0d:84:8f:
37:6d:09:5a:ed:85:c8:26:7d:ee:30:9a:e7:f6:99:
1d:96:e2:19:2b:d9:9f:3b:ea:f4:89:25:0f:c9:21:
11:a5:eb:a8:2f:50:22:d2:24:95:a8:88:bc:4c:4d:
45:f0:72:ba:df:19:99:21:62:3a:08:26:c9:6b:23:
07:d3:7e:8a:46:c3:4e:5b:a6:03:d8:1d:d8:86:3e:
89:b0:03:54:69:c9:3d:31:a8:89:2f:e9:9d:cd:66:
1e:0f:0c:70:92:1b:a1:2a:4d:e4:04:ce:0d:bd:43:
33:e7:56:50:41:e9:75:87:91:32:42:9f:ed:50:30:
6f:0d:ec:20:29:8d:37:07:58:6b:e3:aa:35:10:c5:
0b:bb:9f:7a:5e:da:bb:32:dc:12:22:00:92:95:df:
61:7d:c0:7c:ca:00:a8:ec:fe:ed:25:db:90:3c:01:
f6:96:04:3e:f9:95:e1:d0:4f:96:16:4d:f0:70:d1:
a3:e7:e4:28:92:8f:97:8e:2a:62:29:f4:93:91:53:
7f:03:24:df:29:96:ad:b7:b3:1e:ad:15:56:ab:a3:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:B5:CC:97:8B:4A:07:2B:35:55:D6:6C:46:8D:EF:B2:5D:31:D3
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:87:51:f6:6f:65:1f:4b:5d:f3:e1:47:d0:93:8d:92:26:
8a:01:3b:75:0b:4d:30:3e:8b:82:cc:b0:29:99:c1:ba:06:4a:
b3:e0:84:fd:22:f1:31:09:cc:48:06:38:65:b4:cc:a9:c6:13:
2b:47:1c:f5:b9:8f:68:bc:0f:8a:8f:8b:4a:bb:33:eb:c5:66:
e9:d1:3c:1d:5c:42:49:1a:7c:7d:8b:34:f3:74:a6:94:b7:e6:
fd:d4:b1:30:84:e9:25:9f:f9:38:59:b8:4b:b3:c8:97:93:0c:
61:17:91:73:a5:83:9a:2d:a0:a6:27:3f:fe:a7:aa:f9:e4:f6:
75:5f:9f:0c:3a:f0:15:17:aa:b9:29:83:cb:95:c9:c0:ae:4c:
34:e5:d4:62:2e:1c:78:6a:a6:07:fb:6f:37:64:64:cf:2e:94:
56:5c:85:9f:b4:81:27:d0:fc:6a:8e:d0:5d:74:40:73:cf:74:
ed:e9:f0:52:45:24:b4:a5:2b:da:55:0e:ad:2e:0a:b3:8d:92:
33:dd:2d:f1:92:60:69:32:d0:ca:d7:9c:86:0b:3b:ce:17:d8:
aa:8c:33:5b:b6:b7:0b:58:7d:0d:c3:f4:1c:f5:0f:4b:18:cb:
d4:7a:29:e5:5a:5e:6d:83:81:ae:66:47:e9:bb:4d:75:21:a3:
8e:0b:70:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAq45K7iNKIYnRKAVqY2RbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk
ZDVjNGIwHhcNMjYxMDI4MDQwMTI5WhcNMjYxMDI5MDQwMTI5WjAzMTEwLwYDVQQD
Eyg4YWZmYjVjYzk3OGI0YTA3MmIzNTU1ZDY2YzQ2OGRlZmIyNWQzMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcAV4xb+rhBGNfROMmXNUKTytpDJ
g+Wu2WeEk3s8e3CD2aEhvkQt4NoNhI83bQla7YXIJn3uMJrn9pkdluIZK9mfO+r0
iSUPySERpeuoL1Ai0iSVqIi8TE1F8HK63xmZIWI6CCbJayMH036KRsNOW6YD2B3Y
hj6JsANUack9MaiJL+mdzWYeDwxwkhuhKk3kBM4NvUMz51ZQQel1h5EyQp/tUDBv
DewgKY03B1hr46o1EMULu596Xtq7MtwSIgCSld9hfcB8ygCo7P7tJduQPAH2lgQ+
+ZXh0E+WFk3wcNGj5+Qoko+XjipiKfSTkVN/AyTfKZatt7MerRVWq6O7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr/tcyXi0oHKzVV1mxGje+yXTHTMB8GA1UdIwQY
MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt
NzYxMGFhYmFhMjc0LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0
LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuWHUfZv
ZR9LXfPhR9CTjZImigE7dQtNMD6LgsywKZnBugZKs+CE/SLxMQnMSAY4ZbTMqcYT
K0cc9bmPaLwPio+LSrsz68Vm6dE8HVxCSRp8fYs083SmlLfm/dSxMITpJZ/5OFm4
S7PIl5MMYReRc6WDmi2gpic//qeq+eT2dV+fDDrwFRequSmDy5XJwK5MNOXUYi4c
eGqmB/tvN2Rkzy6UVlyFn7SBJ9D8ao7QXXRAc8907enwUkUktKUr2lUOrS4Ks42S
M90t8ZJgaTLQytechgs7zhfYqowzW7a3C1h9DcP0HPUPSxjL1Hop5VpebYOBrmZH
6btNdSGjjgtw5Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:55 2026 by rpki-client