Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: I2EYZkI87RxGcRI5Tk5t/LKvn0d6DXD9A4VWmOge92I=
Subject key identifier: 56:E5:49:32:32:1B:A5:24:C6:F2:BB:D9:C3:3C:FA:80:5E:88:10:94
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019D3A8AF77D26F63C772E99DD1083853619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 17:01:18 +0000
Manifest this update: Sun 29 Mar 2026 17:01:18 +0000
Manifest next update: Mon 30 Mar 2026 17:01:18 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: PlsHolUgkZ/7xiPdJEEU09NBNH8lxSGoalyc7FIZlxk=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:f7:7d:26:f6:3c:77:2e:99:dd:10:83:85:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Mar 29 17:01:18 2026 GMT
Not After : Mar 30 17:01:18 2026 GMT
Subject: CN=56e54932321ba524c6f2bbd9c33cfa805e881094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:35:da:a7:f2:9f:54:00:7d:09:78:e4:f6:
58:1b:57:c1:c8:f7:0d:fc:f5:78:85:c3:37:e5:c7:
e7:e7:d5:1b:66:c6:bb:81:5a:ba:d4:a5:48:7e:ea:
ce:fb:84:fb:4e:fc:0d:4f:57:9c:c6:cb:30:66:62:
d7:6e:e5:9d:85:80:b7:7f:f9:58:cf:03:e2:00:df:
4a:13:d9:d0:71:2a:d3:20:92:9a:4b:3d:1d:af:31:
bc:26:36:23:4f:1b:2b:77:df:40:f6:4c:d0:f4:52:
f9:7a:21:cd:b4:db:f2:23:35:1f:5c:80:0f:aa:6b:
b3:29:bf:53:ad:ee:1c:3b:0b:a9:3e:52:65:16:b0:
60:f8:3a:c9:ca:16:22:24:b0:8c:75:f8:ce:9f:c1:
d0:34:e8:75:ae:c6:0d:47:ce:0c:6b:b0:aa:d0:77:
89:24:ab:a6:b5:a4:e6:05:d5:48:f9:46:ae:0f:42:
41:4e:d5:d6:21:7b:26:df:ee:bd:00:cd:e1:2c:5d:
40:83:6c:f2:68:6d:f3:4c:af:b3:d8:61:ae:23:62:
bc:c7:ec:0a:85:57:3c:ae:25:d3:5a:75:c4:97:28:
a3:75:ef:5c:60:4a:6f:98:2a:2f:68:37:85:e8:cf:
f7:d9:53:e2:1f:5c:a1:d4:fe:73:5a:33:4c:44:c0:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:49:32:32:1B:A5:24:C6:F2:BB:D9:C3:3C:FA:80:5E:88:10:94
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:5b:30:95:91:b0:29:ed:d6:64:e2:52:da:22:3d:31:ca:
4c:9c:96:03:a7:63:5c:54:2f:62:8a:ed:9f:20:1e:c8:39:9e:
11:e6:48:64:ab:b3:eb:9e:83:36:dc:f2:20:d4:73:97:ff:06:
c2:b2:36:c8:50:c6:1e:b1:de:e8:8d:c7:d2:16:00:2c:ee:63:
13:8f:89:bf:b2:e7:33:9c:81:02:37:74:ca:b9:66:b2:1e:5c:
89:8e:93:cb:41:47:e8:c0:53:cb:fb:98:54:c3:b9:fe:fa:67:
8f:57:e7:50:64:56:b2:8a:ce:3f:0b:56:e2:6d:7e:da:be:27:
75:f1:24:59:d9:a6:72:c5:3a:da:c2:7b:3f:99:d6:03:a5:bd:
7b:98:e1:fa:61:9d:87:af:3b:79:44:9f:8f:2d:bc:97:c0:e0:
16:60:ff:4f:c0:6a:c7:45:ec:61:9e:71:c0:a3:c6:b1:3a:81:
ae:b6:ed:6d:20:26:8d:00:b6:ed:bc:a0:6d:c0:b0:66:b1:0b:
bb:08:5b:f9:11:c9:20:1f:76:7d:ed:a1:60:64:d0:fd:c5:ac:
6f:2b:bd:f9:a7:8d:bd:f8:88:ef:0a:85:8b:5e:e0:4f:95:34:
50:2c:53:ef:1e:99:32:64:79:6e:73:b1:41:7a:23:6b:55:f0:
36:52:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:26 2026 by rpki-client