Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: wwnXf6XTCjAR5Cegyh4c1GjmaMEDQsxRDaOP0kp5urY=
Subject key identifier: 12:0B:24:9D:28:07:4F:66:14:35:E2:5A:C7:D5:24:F8:BE:1D:F8:8C
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019F1868128BA9059E61E5BA0B7ECD83AC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:41 +0000
Manifest this update: Tue 30 Jun 2026 12:01:41 +0000
Manifest next update: Wed 01 Jul 2026 12:01:41 +0000
Files and hashes: 1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: tiSAEV2nQsxI1sQX0sezPJneKkhdfNy8tOJuWAdWw6w=)
3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:12:8b:a9:05:9e:61:e5:ba:0b:7e:cd:83:ac:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jun 30 12:01:41 2026 GMT
Not After : Jul 1 12:01:41 2026 GMT
Subject: CN=120b249d28074f661435e25ac7d524f8be1df88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:36:da:72:15:82:20:94:69:27:d5:b7:1e:
44:b9:b5:b6:e3:ec:6a:e7:74:35:1f:aa:9a:b2:08:
f2:10:24:77:cc:80:a7:60:1c:b2:bb:2e:87:e1:17:
08:fb:64:2e:e6:81:ce:15:6a:9b:06:c2:55:3b:d0:
58:12:ab:15:7b:2d:fe:fc:87:c0:80:30:5c:19:aa:
d2:17:55:80:a0:b1:5e:80:c5:cb:79:03:d4:4a:55:
be:cf:a3:e7:38:88:b2:26:9d:b2:b5:ed:3e:26:3a:
7d:86:42:65:ca:6b:ad:fc:bb:a9:73:bf:78:6c:71:
4b:fb:46:59:37:9f:d0:b4:88:4a:7f:b9:28:c3:97:
03:b2:7b:14:c3:3b:91:a0:68:de:73:52:e7:40:4f:
10:35:c3:87:d5:10:0f:df:5b:f0:e7:35:02:84:c4:
3c:bf:ea:90:bb:98:c4:21:bd:e8:da:68:5b:9a:9f:
1f:c1:b7:51:d6:9f:86:65:ce:48:93:e3:80:bd:17:
47:6b:4c:53:7a:dc:ad:fa:90:ab:91:fa:29:91:6e:
7e:04:d5:ea:4f:57:9c:47:0f:03:15:7e:07:03:6c:
ec:06:49:ac:95:4f:1a:32:d2:43:01:fe:93:55:b8:
e5:97:8d:d4:3a:ea:dd:18:02:68:71:91:71:88:ff:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:24:9D:28:07:4F:66:14:35:E2:5A:C7:D5:24:F8:BE:1D:F8:8C
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:85:6d:a1:77:15:3e:c9:0e:07:ad:ce:96:76:94:57:de:d6:
35:8e:4f:a7:f2:f4:50:a2:f2:a4:7c:d9:5f:18:d6:a9:8c:e4:
74:8d:66:aa:c2:d0:ca:ca:6b:e2:dc:86:74:3d:3b:2f:07:02:
cb:38:14:85:2f:8c:39:6b:e7:dc:b4:a1:37:11:68:4b:0a:3b:
d1:c7:45:7a:c4:2b:1a:9e:32:97:f6:3c:04:0f:59:d0:75:0a:
22:a1:e0:8e:df:5b:a9:3d:36:87:f2:78:eb:2e:87:85:29:41:
73:16:ab:d6:19:4a:ed:6a:08:4e:d1:6f:a4:ab:98:97:15:97:
6d:c8:4b:11:90:4c:dd:74:56:fb:53:9f:c1:9a:be:03:e2:5f:
0b:5e:2e:be:5d:65:7d:12:89:5e:b3:9a:47:3b:88:59:7e:fb:
8d:57:9c:d3:6c:61:d8:44:b9:ea:d7:56:39:b2:f6:b4:9b:c7:
f4:25:2e:d5:3e:30:4e:84:8b:59:38:f2:54:ca:22:5f:87:18:
fb:d7:05:81:78:56:ba:b8:15:40:0b:f2:5e:0a:8f:10:92:04:
a2:16:d3:da:ca:6c:4f:db:cc:ca:df:7c:b7:e7:38:dc:af:b1:
f7:40:fd:10:3c:14:c1:c8:48:a6:88:4c:e7:f3:b4:8e:af:b0:
d5:e7:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:17 2026 by rpki-client