Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: juKe9H8YRZ8BRxD/3QB1ZcCpiLNeZ2C24yuHJXvf4uo=
Subject key identifier: 4F:BA:05:F6:0B:85:66:72:8B:C7:4F:ED:D9:00:0D:CB:7F:A2:81:A4
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019DCE631C1B102ED365D60FF28CD6003219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 10:01:34 +0000
Manifest this update: Mon 27 Apr 2026 10:01:34 +0000
Manifest next update: Tue 28 Apr 2026 10:01:34 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: b/2+AqgOE1GRfocKZcNmsVKwHn7vLjICeHT2jdUK5XA=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:1c:1b:10:2e:d3:65:d6:0f:f2:8c:d6:00:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Apr 27 10:01:34 2026 GMT
Not After : Apr 28 10:01:34 2026 GMT
Subject: CN=4fba05f60b8566728bc74fedd9000dcb7fa281a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:99:9d:88:8d:0b:d5:3b:2c:ae:d9:c0:e1:
21:ce:d8:43:33:4a:9a:4a:8d:92:a5:b0:24:9c:97:
c8:13:ff:a5:61:b6:8a:b7:0a:1a:b2:e4:d4:50:c1:
43:92:81:a0:87:4e:d2:52:a3:e2:19:5c:4b:87:bf:
0e:65:24:c7:a1:06:7d:d9:cd:11:8d:1c:1e:1a:d9:
88:dd:d3:1b:60:b9:a3:f2:33:e8:23:d6:0d:11:ea:
5f:0b:a7:dc:14:cf:9b:9b:0e:e4:35:03:d9:c7:0f:
96:89:72:51:ab:31:19:21:0c:57:90:b4:14:88:f3:
e3:a6:40:bd:43:ea:3f:49:79:e0:d3:d7:ac:0b:25:
22:b5:79:db:31:f4:e1:a5:94:e2:8e:c0:37:16:68:
0a:94:68:68:1b:95:fb:e3:30:8d:32:00:e6:d6:b9:
7a:a4:a5:40:a1:17:7c:eb:44:1d:df:d8:5d:7c:30:
34:45:2d:ac:5e:5f:ca:1c:34:c7:ef:d6:61:fd:04:
7f:77:c2:04:4c:f1:1a:ab:37:05:dd:ce:3b:56:aa:
b9:4b:99:ac:c3:2f:79:de:14:fd:22:5d:f7:90:6e:
90:0d:8a:ef:dc:ca:f9:ac:f0:2e:c2:ce:5e:e9:fa:
72:03:fe:e1:67:b4:a0:d9:0d:b8:c6:0e:18:37:92:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:05:F6:0B:85:66:72:8B:C7:4F:ED:D9:00:0D:CB:7F:A2:81:A4
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:49:0e:38:b0:f6:27:4e:ef:46:2d:d7:30:b2:71:cb:53:
9b:c3:4d:e6:27:18:9b:9b:7d:f0:ba:75:f4:e4:42:94:7f:97:
f1:27:fb:9d:1a:98:54:7c:10:a2:71:c1:c5:1b:18:be:08:c8:
4b:a5:ff:7e:76:40:c5:46:14:66:ff:0b:ca:de:6e:7f:5e:e5:
ce:90:ec:e0:6f:d1:f9:67:ec:62:92:a4:76:21:fb:ba:6b:5a:
eb:b7:85:c0:bc:1e:eb:22:9f:68:fd:d6:7c:93:e2:71:59:bd:
07:84:94:f1:39:8d:80:87:fa:e8:cf:90:2b:3e:06:d1:1f:64:
94:37:4a:d6:ff:70:d7:b8:5d:17:ab:c4:49:ce:5c:65:8f:18:
b2:1c:1f:c9:7d:6f:22:cf:0d:bf:4f:40:52:2f:41:4a:4c:fe:
2e:7d:64:39:bd:e8:87:77:b5:8c:7d:fb:47:28:78:16:0d:82:
93:bd:95:77:72:f5:45:1e:89:1d:77:9e:a5:5d:7b:a3:0e:a4:
fd:db:76:8b:84:aa:36:fd:fd:2b:33:c0:e0:8d:ff:35:6b:70:
f7:a6:28:d2:7d:d6:c4:1d:a6:29:e0:c4:30:6c:55:c0:0e:59:
d0:92:4c:37:5d:48:ae:49:de:03:8e:e3:b7:60:e7:14:7c:e3:
1f:43:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:45 2026 by rpki-client