Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: L2qRwDYFqGaHqCA5foXPNSGb0rVrbnIAeM28vOB/TGI=
Subject key identifier: 43:7D:27:A4:25:2E:52:AA:50:C5:E4:FB:9D:FF:EF:7E:4B:08:71:18
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 01A06D5DCE286B4EADB34B87EC32A9F29352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1A3C
Signing time: Fri 04 Sep 2026 17:00:59 +0000
Manifest this update: Fri 04 Sep 2026 17:00:59 +0000
Manifest next update: Sat 05 Sep 2026 17:00:59 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: KyxJqc/ym5rLAFsDLEARouA0GGmX6mgLbmxybqYqLvI=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:ce:28:6b:4e:ad:b3:4b:87:ec:32:a9:f2:93:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Sep 4 17:00:59 2026 GMT
Not After : Sep 5 17:00:59 2026 GMT
Subject: CN=437d27a4252e52aa50c5e4fb9dffef7e4b087118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:75:b3:3a:4e:64:9a:cf:68:7a:b7:de:5c:
87:e3:d8:fa:7f:d3:53:a4:b7:eb:d4:6f:88:76:0f:
c1:42:e9:ec:3d:19:f3:ec:7d:fa:75:4d:ab:4e:68:
cc:66:1e:02:82:89:20:7f:b5:aa:1c:62:7c:aa:89:
5f:61:66:44:ea:d6:3c:ff:71:68:54:1c:98:ed:52:
5e:66:17:47:8e:b9:a4:20:62:f3:99:da:17:b5:fc:
65:07:1a:49:c3:45:fe:ef:ab:8c:f6:f9:90:93:dd:
20:ae:12:e7:ab:55:1a:e2:10:79:58:da:80:4a:25:
c5:80:63:c1:b9:17:5f:30:25:38:1b:82:f8:ad:f1:
8d:4a:ed:ae:9a:d5:8b:ed:96:c6:e0:0c:3f:7f:ae:
9f:65:08:5a:ea:59:34:7d:f8:25:ef:65:77:c3:b0:
9a:64:8f:ba:26:23:63:a2:09:b5:0e:24:f0:0c:38:
e0:11:53:d5:91:ab:16:8a:2a:66:1a:f5:0b:c3:3f:
f1:4e:ac:bd:fc:d7:b1:87:45:87:5d:6e:e6:32:11:
bd:1b:b7:2b:8f:ca:f6:19:6e:09:de:6b:64:92:5d:
61:2c:22:b4:b3:1f:42:19:7b:7d:3e:c6:98:f2:28:
a2:0f:50:24:9b:42:62:98:ba:4b:43:90:59:8b:f2:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:27:A4:25:2E:52:AA:50:C5:E4:FB:9D:FF:EF:7E:4B:08:71:18
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:df:f4:9b:93:7c:8a:c1:7c:eb:e8:cd:fb:ab:3a:f0:a1:ae:
d3:93:3c:ee:f1:7b:c9:1b:77:53:a4:c6:16:b2:fa:34:ee:37:
32:a3:ee:64:86:08:e9:6a:d1:f8:96:a4:96:19:68:9a:f3:3a:
e8:f9:12:56:58:94:52:86:06:f9:7d:cd:bb:0a:f7:24:04:35:
04:7f:e5:94:fe:e2:05:a3:93:c9:50:d6:7d:5f:58:91:45:67:
8f:64:10:45:91:3f:f8:21:79:a2:64:e2:b4:0a:e3:5b:1e:c1:
68:ef:2e:a1:3b:1b:91:5d:43:f5:be:6c:da:5e:ad:db:30:cf:
6d:9b:0e:87:a7:3c:93:97:aa:82:24:6a:2e:62:a3:1b:c8:6a:
74:0f:02:31:71:ae:fe:32:b8:a6:a9:3a:11:32:fe:50:b3:e9:
2c:d1:a5:c8:b2:aa:66:3b:b9:20:8c:7e:3f:29:b1:2a:92:b0:
81:b8:03:42:d7:07:99:e2:4b:9a:36:92:f1:88:24:58:16:d6:
72:dc:c3:31:8c:5b:e7:4b:e5:f6:f2:70:3e:de:b4:3e:2e:06:
2e:fb:78:e7:05:60:3d:33:7c:d5:1b:43:8d:33:e6:72:6f:38:
ae:b8:98:a0:c5:84:b9:2e:75:d6:5b:f7:f7:06:03:17:27:b5:
1e:7a:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:55:23 2026 by rpki-client