Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: PW76/bsr8enGcgecdWFqVxri1fyQZVBMxkdazgPc50E=
Subject key identifier: BA:32:E2:17:51:53:E2:CE:BB:9E:C8:13:2D:9E:A6:EB:05:11:2E:2A
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01A17BBB846278A29E49E2AC090F05BDB9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 05:00:48 +0000
Manifest this update: Tue 27 Oct 2026 05:00:48 +0000
Manifest next update: Wed 28 Oct 2026 05:00:48 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: /Vb7yyzI4b68eFh6Pg/zhMKJ6mSzgt/t8rfF1ayW0ic=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:84:62:78:a2:9e:49:e2:ac:09:0f:05:bd:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Oct 27 05:00:48 2026 GMT
Not After : Oct 28 05:00:48 2026 GMT
Subject: CN=ba32e2175153e2cebb9ec8132d9ea6eb05112e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:a4:a8:90:f0:b3:35:51:b0:dc:0a:ae:05:
b8:d0:e9:b9:cf:71:11:e6:39:e2:c4:0b:01:6e:0a:
4b:43:61:6e:a0:74:fd:c4:d5:59:2f:6e:6b:46:9b:
ca:d7:a0:e5:30:0e:7d:4e:0d:3e:01:63:9b:55:a5:
5d:ae:19:9e:1c:f4:25:b0:6b:e5:eb:ca:0a:bb:34:
c6:33:9c:b6:0d:9c:d0:9a:b5:5c:3d:ab:45:31:c4:
aa:cd:48:33:33:46:59:9b:64:60:24:d1:f1:e6:8e:
de:f8:39:f1:a6:1f:38:6a:2b:04:34:3b:89:91:12:
10:1c:28:87:97:87:4d:a6:dc:38:3e:e5:fc:b9:70:
6e:ec:15:02:61:3d:d3:bb:38:d9:34:87:4d:9d:27:
ff:d6:07:6e:3a:aa:54:55:c0:a8:c2:9a:fe:79:8c:
0c:ac:5d:dd:e8:ed:7c:84:1b:31:b0:17:06:b2:85:
f1:ef:cf:b8:45:04:8f:6c:5e:f3:cf:03:1a:3f:20:
a5:0d:60:2a:d5:44:93:c3:1c:0d:3d:4f:3b:2c:18:
af:2b:81:79:1b:3c:02:4f:9a:51:d3:54:42:80:2b:
5a:7c:16:0e:81:53:71:4b:11:24:4e:66:8b:18:16:
aa:db:02:dc:e7:f4:76:eb:08:b8:e8:1f:65:1e:9d:
73:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:E2:17:51:53:E2:CE:BB:9E:C8:13:2D:9E:A6:EB:05:11:2E:2A
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a5:43:1f:58:1e:48:9d:1e:29:5c:40:b4:e3:f5:bb:39:6c:
c4:ac:e5:ae:2b:63:d3:1d:0b:9f:ec:2c:30:25:af:45:b9:2d:
d2:cc:7b:c8:63:3d:8f:bf:36:d1:25:42:c9:85:19:ae:65:7d:
93:d2:6f:c8:15:cc:1d:4b:61:b7:da:02:51:79:0d:1a:d2:44:
f2:09:03:17:3a:d7:2b:e3:9e:a1:4b:d0:d9:77:42:50:74:27:
4d:ec:b3:87:f4:01:b3:22:67:bc:05:da:f4:2d:09:b7:c9:65:
61:70:c4:e4:b5:dd:fc:95:9a:3c:17:ed:db:ac:ea:5b:a8:09:
e2:b7:9f:69:3c:f0:d3:b5:64:2a:77:6f:15:b5:b0:4a:ea:60:
86:66:ce:b8:0d:37:0b:37:60:6c:15:b1:2f:bb:c2:7f:d0:97:
1a:cf:9e:d9:3d:99:d8:10:9a:f8:3b:33:39:2e:21:d4:c1:de:
ad:f2:0c:af:c0:58:00:97:2c:54:80:99:b5:9d:76:7a:72:52:
ea:ed:a9:6c:90:93:9c:0d:9e:c5:97:fb:0b:fc:37:c9:4f:89:
f5:2e:60:9f:de:1c:2b:d3:28:12:63:ce:26:98:b4:5d:03:45:
69:b4:70:33:4e:06:53:26:9d:d6:e8:35:9d:ac:2c:9c:69:2d:
6f:c9:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:13:47 2026 by rpki-client