Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: o4VkKa+bgAqdAGl3TppXZvUpZJWETkXy8zgE2SD03SM=
Subject key identifier: 1D:27:40:A8:63:06:EC:D1:9B:9B:36:7E:E0:4F:3B:B6:FB:7B:13:B6
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01A08B68B007C563908172FC8228E8644304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1A52
Signing time: Thu 10 Sep 2026 13:01:28 +0000
Manifest this update: Thu 10 Sep 2026 13:01:28 +0000
Manifest next update: Fri 11 Sep 2026 13:01:28 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: JFBIZxNoqC2Cmc9InKDkFA3axVEBKXPOss/NSMwzr4E=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:b0:07:c5:63:90:81:72:fc:82:28:e8:64:43:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Sep 10 13:01:28 2026 GMT
Not After : Sep 11 13:01:28 2026 GMT
Subject: CN=1d2740a86306ecd19b9b367ee04f3bb6fb7b13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:74:4a:a9:e4:8d:b0:90:88:c9:27:f2:8c:
06:51:9a:7e:2a:ae:8c:ee:89:94:04:1f:73:d6:23:
c5:41:65:2f:79:07:2e:6e:13:ad:f0:7b:58:4c:72:
58:67:03:03:9b:44:5d:2f:23:cc:8a:5e:52:3c:e5:
96:f7:fd:7f:04:8a:28:c3:3c:f3:da:fa:b3:e2:7f:
1c:3a:ec:8b:f8:3d:df:9a:6b:e9:35:c2:a1:8e:91:
7d:13:79:ff:11:73:7e:ad:bd:34:38:b7:07:4a:d4:
c1:c3:65:34:87:53:7e:a0:34:b0:6c:83:1c:da:dd:
67:86:4c:69:aa:f3:08:6e:5e:82:ee:6c:18:f4:38:
cb:c0:9d:88:09:b7:df:f6:60:5d:8a:55:c6:b2:18:
51:a8:e6:ca:ed:be:0f:71:99:7d:39:90:64:b0:31:
d4:5f:1d:86:04:22:31:37:98:c3:34:28:70:5f:05:
2f:f7:29:b0:59:62:d4:21:39:88:c1:8d:26:10:4e:
45:6c:06:61:f5:b0:0c:b6:16:b4:ad:ba:b5:ca:4c:
c4:86:33:b9:8f:38:7e:b0:c2:fe:b8:80:3d:80:83:
99:77:45:01:0d:1f:c5:cc:7e:a0:16:3a:a8:91:8a:
98:fc:c1:ea:f2:bf:06:2c:91:18:b2:d0:00:6f:0e:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:40:A8:63:06:EC:D1:9B:9B:36:7E:E0:4F:3B:B6:FB:7B:13:B6
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f7:db:a0:24:35:f0:5d:d4:e6:bd:39:7e:43:28:61:95:1d:
82:e5:e4:63:e1:04:a5:fb:31:24:a1:d6:9c:95:c7:97:84:3e:
58:3b:4b:cb:a5:e1:bc:9c:df:b7:36:0e:b0:06:4a:71:cd:04:
3d:57:50:db:c6:27:19:79:5e:8e:ce:62:c5:38:01:61:08:2c:
82:c5:b2:5c:f1:9d:69:24:52:d7:9a:a6:38:c0:1b:7b:f7:5c:
b5:9a:db:19:9f:74:38:39:20:1d:0b:47:e1:f2:be:69:36:0d:
ff:55:05:f6:e3:85:29:0b:55:1e:f8:80:30:d4:27:f2:dc:7c:
90:21:37:84:5c:4f:36:ed:ec:5e:34:85:f0:3a:1d:fb:d7:2e:
27:84:60:03:80:27:fd:dd:14:81:91:10:d2:11:55:77:19:14:
f7:ac:58:b6:f3:97:c4:f5:6d:87:f9:ec:16:f1:3c:61:04:17:
36:ed:c5:f6:0a:b6:c9:dd:5b:58:d2:4d:d1:e8:c0:b6:4f:b9:
f6:6a:0c:35:1a:6c:8a:1d:b0:89:27:67:f8:09:3b:3e:74:13:
61:0f:28:16:53:61:2f:02:da:7f:e9:d9:8b:91:ce:65:93:40:
ca:51:05:43:09:99:45:52:d4:2e:68:81:f5:8c:01:43:1d:2e:
ed:ed:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:10:33 2026 by rpki-client