Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: WbmpnG92vmA+LH+WBm2WC+5UAwIDKQcXLP3lX0ei+fE=
Subject key identifier: BF:63:62:AE:AA:3C:8F:B5:3E:F4:DD:8D:B9:D2:5A:62:DF:6C:B8:4B
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019FA1BB1A25960D3D4FCAF19D1A51D1A3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 19D9
Signing time: Mon 27 Jul 2026 04:00:21 +0000
Manifest this update: Mon 27 Jul 2026 04:00:21 +0000
Manifest next update: Tue 28 Jul 2026 04:00:21 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: yH4bPaLi4L67K5qdCoc83D9EZqs8xJL6sC8bRrl1/dw=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:1a:25:96:0d:3d:4f:ca:f1:9d:1a:51:d1:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jul 27 04:00:21 2026 GMT
Not After : Jul 28 04:00:21 2026 GMT
Subject: CN=bf6362aeaa3c8fb53ef4dd8db9d25a62df6cb84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:21:4b:16:bf:9a:fb:28:e6:11:e6:f2:5c:
58:9e:bc:c8:b9:8a:71:9d:44:0f:8c:db:35:8c:53:
60:3a:7a:5e:f0:d3:e4:76:78:c4:0f:55:0e:85:a1:
f7:df:3c:af:05:4d:86:23:5f:8b:54:4c:e6:72:90:
b0:13:f4:7f:f2:41:a1:fe:62:dc:1d:40:85:63:19:
1d:74:50:75:3f:ea:b3:84:a8:eb:20:4c:7d:02:7a:
fc:63:e4:a0:09:d7:ed:7f:44:79:4f:92:95:28:16:
21:e4:8f:6e:1f:2d:fe:e7:8f:c8:c9:e4:e7:92:82:
06:ae:69:4d:3e:24:8d:a7:62:e5:dc:b1:59:99:f3:
a1:e4:72:6f:79:ec:91:f1:b7:8e:af:31:cb:15:ff:
5c:cf:62:ee:25:49:b4:d6:5d:b9:5f:e6:ab:5f:5e:
9a:94:5f:e9:9c:b0:6e:a6:69:19:7c:cc:04:08:70:
f5:a2:dc:5c:dc:72:64:de:11:b2:9e:80:ed:1d:11:
a6:56:c1:4e:4c:56:28:c2:f3:48:bf:fd:5b:6a:a1:
16:72:8f:53:04:c1:ee:13:8c:14:d9:7e:00:9b:49:
76:56:a6:c3:6a:6c:7b:b8:16:45:41:f4:1f:a8:79:
be:48:aa:ec:d2:ca:3e:e8:cf:11:39:2a:ed:19:10:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:62:AE:AA:3C:8F:B5:3E:F4:DD:8D:B9:D2:5A:62:DF:6C:B8:4B
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:e9:be:09:2c:4b:39:72:fc:2e:1f:63:81:dc:8b:50:e1:
93:2d:a6:2c:ee:b3:8b:94:50:68:45:d7:97:3b:a9:1d:9d:58:
41:e4:15:06:cb:6e:39:ca:d7:2f:86:f9:36:aa:b1:8e:02:75:
31:d5:17:74:ac:76:84:39:ad:10:8a:4f:73:c0:09:63:7a:0a:
f8:d4:75:cf:b2:97:57:6b:f8:ae:22:8f:92:50:16:17:14:39:
bc:5a:44:18:78:8a:42:cf:fe:52:8d:27:2d:26:85:e8:d6:a4:
3c:7a:e9:ea:f0:2b:e8:c8:51:76:0e:50:0b:ed:41:3d:51:2e:
7a:d2:cd:bf:e6:da:ea:38:75:16:d5:7a:c5:2e:f7:0e:35:5f:
a1:25:44:0c:d5:4f:68:97:db:cb:da:6d:59:18:cd:80:04:dc:
9a:9b:a3:be:f9:12:25:0d:d8:8c:6c:96:8e:0e:61:12:54:69:
67:f5:22:00:1f:84:9b:7f:c0:21:66:8b:f6:2f:5f:cf:b4:46:
7b:4e:53:63:23:50:fc:e7:cb:1e:dc:4e:d7:12:f4:9b:7a:ef:
86:68:81:a6:be:9d:3c:b5:df:54:98:bc:e7:7a:0e:25:3f:a5:
01:5b:c4:ef:d8:e2:7e:f3:aa:49:27:05:7a:60:1e:55:fb:97:
c7:31:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:35 2026 by rpki-client