Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: uma25zv6XT2Sl03v842ZREEJVCseNMxyA4NQiS6bw9I=
Subject key identifier: 1B:D4:34:5C:02:68:D6:E2:BF:AC:9D:E0:C6:3F:50:CE:E4:16:05:96
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019CE6A3BCEA4B4438FB5ADA329EEDB9C1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 186F
Signing time: Fri 13 Mar 2026 10:00:16 +0000
Manifest this update: Fri 13 Mar 2026 10:00:16 +0000
Manifest next update: Sat 14 Mar 2026 10:00:16 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: pjJNe6i08efnfVJMokevp+XVpHhHCy7n8t55vALm9SI=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:bc:ea:4b:44:38:fb:5a:da:32:9e:ed:b9:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 13 10:00:16 2026 GMT
Not After : Mar 14 10:00:16 2026 GMT
Subject: CN=1bd4345c0268d6e2bfac9de0c63f50cee4160596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:e4:ea:60:6a:83:db:d2:e7:98:9d:96:9d:
d6:36:50:45:94:55:43:30:87:8f:0c:cf:b3:43:0d:
74:78:c0:ab:59:b1:da:b2:e1:e8:e3:bb:f9:a0:b6:
f1:33:59:99:28:ad:d7:ed:2b:2e:54:3a:bf:46:78:
6a:0b:cc:8f:fe:48:23:9a:39:1a:40:02:62:8e:d1:
8d:cd:cd:a0:38:95:3c:40:30:4a:ae:fc:cb:5d:66:
e6:81:b7:f7:fb:af:93:cb:a2:e1:90:46:b7:b3:60:
31:09:a1:3c:83:d2:f4:41:0f:6d:ea:91:93:2b:76:
d0:ef:a8:4d:f4:0b:ea:f6:b7:ee:2e:53:bc:75:b8:
4e:12:5e:aa:fe:e3:2b:97:35:52:8a:d1:81:3d:00:
d7:63:c7:82:76:36:6a:5e:56:38:3f:f3:9b:e7:96:
aa:91:ef:92:bc:46:98:13:8b:77:30:9a:87:03:83:
15:0d:9a:75:97:b3:81:f0:ee:be:34:34:53:78:53:
0f:ef:be:2a:45:61:24:51:0c:91:15:70:b8:b5:13:
1d:7d:75:77:04:45:af:ce:11:b6:a7:63:28:cd:74:
dd:49:bf:b0:07:dd:94:14:bc:93:5e:0d:ea:d0:be:
cd:67:00:03:1a:41:91:4a:fd:49:e2:7c:ed:d4:67:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:34:5C:02:68:D6:E2:BF:AC:9D:E0:C6:3F:50:CE:E4:16:05:96
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:c0:92:9e:55:ad:2f:b1:9e:54:15:d1:47:8a:2d:2d:7e:
2f:bd:25:5e:bf:16:11:69:61:ec:4e:2d:9a:d6:89:41:41:bf:
44:83:6f:34:c6:5a:f6:9a:f2:27:19:7f:41:ef:12:14:7d:1e:
6b:5b:77:77:f4:98:44:c7:13:91:f3:11:e7:ed:73:48:81:94:
58:df:21:60:a2:bb:67:69:fd:cb:82:86:64:32:4a:a5:70:4a:
6c:1a:f9:a4:ac:66:72:fa:0b:10:0c:fb:a2:56:32:b5:68:95:
d9:11:a5:f8:bb:23:8a:c1:6a:e6:0f:34:41:e9:1f:fc:70:a0:
10:87:7e:68:17:9d:1a:64:94:98:ab:d8:c5:b9:d4:2e:5a:4f:
58:0d:b2:d7:c6:36:f9:96:46:e3:aa:29:9f:82:ce:6d:32:c4:
e6:ee:1d:02:0b:33:17:cd:1a:ef:0f:b9:21:0e:15:9a:72:51:
c1:9d:18:8d:95:e0:8a:d8:00:f1:1a:3e:eb:31:aa:fd:da:05:
a8:82:5d:ce:2e:10:58:66:9c:d8:90:b1:39:ed:69:4e:3e:c6:
01:b8:ec:6c:ae:ee:bb:41:c4:f6:34:9b:9c:14:84:31:4c:a8:
b0:f6:4d:5c:08:35:87:28:5e:3d:6c:dc:90:16:54:e8:d4:95:
c5:be:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:31:51 2026 by rpki-client