Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: C7+7gOdx4osMHfh+aMy5d6q4xgz+vKmetZoSAkT4t38=
Subject key identifier: 96:37:5F:6D:7C:3A:F7:96:C4:0A:76:19:98:C7:24:AE:DB:B2:EC:98
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019F859F594FB3F2F9E874C56E0D2873C722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 17:00:40 +0000
Manifest this update: Tue 21 Jul 2026 17:00:40 +0000
Manifest next update: Wed 22 Jul 2026 17:00:40 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: THcELBYhPCGU6jAFvtVMZuJSrLYX/nrAgh8bftGcKOA=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:59:4f:b3:f2:f9:e8:74:c5:6e:0d:28:73:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jul 21 17:00:40 2026 GMT
Not After : Jul 22 17:00:40 2026 GMT
Subject: CN=96375f6d7c3af796c40a761998c724aedbb2ec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:16:55:f9:02:6d:50:37:12:4e:93:92:1c:
c9:86:bb:d0:e4:c3:fa:2e:51:77:c0:ec:c4:6e:b8:
5d:a3:32:f5:0e:dd:0f:28:69:51:a3:7c:66:75:83:
5b:f1:c2:cd:07:e6:74:d8:65:31:55:d9:ce:02:6b:
26:96:1b:f0:a1:59:b6:13:cf:95:70:4f:62:f5:98:
a5:b4:34:0e:24:f8:34:39:f7:67:ce:fc:db:3c:f4:
2b:8f:ce:b1:06:83:1a:8d:7c:a5:6f:30:e7:2e:f3:
42:8d:86:86:af:4d:b7:1c:39:e7:f2:e2:18:2a:19:
ea:81:75:75:c5:b5:6c:97:42:30:0b:1a:af:65:c8:
9a:ea:af:34:19:9a:cb:32:e1:1a:24:c5:3f:87:7e:
a8:84:03:b6:55:02:05:9b:18:26:52:d3:08:08:93:
2f:1b:1d:6c:ef:e1:b9:54:a2:1e:66:e9:af:a0:04:
02:e3:ad:fb:b6:97:91:c4:b7:e8:cb:b3:b3:4d:44:
52:4b:f3:6f:3c:2e:e5:18:e4:e4:2c:db:c5:46:8f:
cd:bf:c7:cf:bb:78:59:9c:63:88:80:92:09:b9:c8:
1a:65:5a:09:c9:f3:c3:d4:72:0d:84:83:f8:53:1f:
99:fa:12:f2:c2:ee:82:50:06:77:f9:b8:34:14:0f:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:5F:6D:7C:3A:F7:96:C4:0A:76:19:98:C7:24:AE:DB:B2:EC:98
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b3:50:ab:1e:69:4b:9e:d6:17:45:b3:22:9a:97:3c:1d:a9:
0c:75:4f:ee:4a:fd:a9:de:62:42:17:f1:b4:2b:97:76:b7:e8:
ea:00:5d:fe:e7:23:09:fc:b2:1f:27:f1:a2:8c:f3:9b:18:fa:
72:7e:1d:51:0a:33:ca:4e:3a:39:5c:42:c8:bc:15:6f:2b:bd:
30:1d:b0:07:01:89:e8:80:c7:54:6c:b0:d3:0d:0f:4a:f7:01:
2b:d8:c7:d3:33:24:e0:7e:53:08:07:c1:dd:81:db:4c:ab:a1:
10:69:d1:d1:bf:53:8a:30:2b:33:65:e3:c1:bf:f7:ec:64:e5:
37:19:d7:5e:be:8f:b5:39:65:56:41:9e:67:aa:27:cf:0e:92:
12:e2:18:04:82:9f:e2:10:71:5b:cf:84:76:8c:7c:5c:c9:b1:
ca:fc:73:68:55:12:9a:58:10:b8:47:53:5c:72:a9:e3:4c:6b:
d1:05:b6:15:bd:78:22:48:e3:00:8b:39:d3:92:05:21:f6:c9:
51:49:62:a5:c1:87:56:e7:77:53:f5:b7:a1:dc:1f:21:4d:7f:
84:50:0a:02:e8:3b:a9:0c:d2:7d:dd:10:a9:86:78:de:93:8e:
cc:97:03:fa:70:ca:fc:ca:b5:96:20:ca:4b:b7:f4:82:91:f2:
66:6d:22:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn1lPs/L56HTFbg0oc8ciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4
NTgyNmUwHhcNMjYwNzIxMTcwMDQwWhcNMjYwNzIyMTcwMDQwWjAzMTEwLwYDVQQD
Eyg5NjM3NWY2ZDdjM2FmNzk2YzQwYTc2MTk5OGM3MjRhZWRiYjJlYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QWVfkCbVA3Ek6TkhzJhrvQ5MP6
LlF3wOzEbrhdozL1Dt0PKGlRo3xmdYNb8cLNB+Z02GUxVdnOAmsmlhvwoVm2E8+V
cE9i9ZiltDQOJPg0OfdnzvzbPPQrj86xBoMajXylbzDnLvNCjYaGr023HDnn8uIY
KhnqgXV1xbVsl0IwCxqvZcia6q80GZrLMuEaJMU/h36ohAO2VQIFmxgmUtMICJMv
Gx1s7+G5VKIeZumvoAQC4637tpeRxLfoy7OzTURSS/NvPC7lGOTkLNvFRo/Nv8fP
u3hZnGOIgJIJucgaZVoJyfPD1HINhIP4Ux+Z+hLywu6CUAZ3+bg0FA/tIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3X218OveWxAp2GZjHJK7bsuyYMB8GA1UdIwQY
MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut
OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx
LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7NQqx5p
S57WF0WzIpqXPB2pDHVP7kr9qd5iQhfxtCuXdrfo6gBd/ucjCfyyHyfxoozzmxj6
cn4dUQozyk46OVxCyLwVbyu9MB2wBwGJ6IDHVGyw0w0PSvcBK9jH0zMk4H5TCAfB
3YHbTKuhEGnR0b9TijArM2Xjwb/37GTlNxnXXr6PtTllVkGeZ6onzw6SEuIYBIKf
4hBxW8+Edox8XMmxyvxzaFUSmlgQuEdTXHKp40xr0QW2Fb14IkjjAIs505IFIfbJ
UUlipcGHVud3U/W3odwfIU1/hFAKAug7qQzSfd0QqYZ43pOOzJcD+nDK/Mq1liDK
S7f0gpHyZm0iZA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:31 2026 by rpki-client