Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: agiyRF8eTrApMZmfpcH98qqJOcF9xgSNaxlME61lDIA=
Subject key identifier: 7D:74:22:AE:46:84:6A:5D:9F:B6:C5:5A:3F:EB:AA:12:B7:4B:91:27
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 019DCFE3C0A97218E8B472438D896B53CDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 066C
Signing time: Mon 27 Apr 2026 17:01:42 +0000
Manifest this update: Mon 27 Apr 2026 17:01:42 +0000
Manifest next update: Tue 28 Apr 2026 17:01:42 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: 1Toct/JPzJAeMU6rMFqXIKTTXtXxbtxfwTpiXK9dPdc=)
2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:c0:a9:72:18:e8:b4:72:43:8d:89:6b:53:cd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Apr 27 17:01:42 2026 GMT
Not After : Apr 28 17:01:42 2026 GMT
Subject: CN=7d7422ae46846a5d9fb6c55a3febaa12b74b9127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:26:96:76:c7:55:96:93:a4:07:5c:81:c1:
d6:4b:95:d0:c1:bc:43:d9:36:a0:2a:d3:72:76:f4:
64:0d:98:38:13:ce:4c:38:ad:47:40:c0:76:d9:a4:
6f:58:6f:f6:83:1c:17:d4:e4:bb:51:61:8b:3e:6a:
dd:3a:38:12:1d:30:47:93:44:3c:69:f1:c9:fe:6c:
f7:44:e6:16:37:39:95:e0:41:e7:65:d9:e5:39:ae:
fc:e6:d9:3b:41:e4:18:e9:4e:0a:2a:7f:49:59:54:
07:2d:39:47:c1:3f:5a:88:c8:68:ef:2e:1a:f3:bd:
a9:98:c6:be:57:f8:9d:0e:69:4c:ba:16:07:28:ae:
33:01:25:ab:48:f9:4e:40:e6:70:23:4d:dd:f0:e5:
40:34:f9:56:33:ee:bd:aa:7f:9d:2b:e5:cf:c1:01:
f1:6d:c8:ab:27:29:53:0c:b4:06:68:3a:06:4d:8f:
57:24:54:4f:2a:be:94:a2:3d:dc:51:5c:a4:d8:35:
36:f1:40:b4:8d:f3:b2:e1:e6:99:3a:5e:14:b1:9a:
e0:4c:2e:e5:ac:2d:97:00:03:89:0c:29:58:49:e4:
57:53:54:25:ed:08:ca:8a:6f:d4:66:93:67:4e:76:
b7:b1:86:90:a1:f0:c9:d8:68:0b:83:35:ff:26:9d:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:22:AE:46:84:6A:5D:9F:B6:C5:5A:3F:EB:AA:12:B7:4B:91:27
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:fc:d7:eb:e6:f8:36:46:ae:d3:88:25:a8:4c:bb:49:bb:
88:c9:90:08:15:1e:5e:37:b8:9e:35:07:e1:00:2a:21:3e:06:
c8:5d:45:f7:04:f8:f0:93:1e:8a:a0:4b:ad:79:d5:2f:05:d0:
98:00:8f:97:1b:6f:4d:d1:e7:67:5e:89:3d:14:22:c2:da:b8:
44:43:e6:37:6f:8d:19:4f:58:d0:47:70:20:21:09:24:58:8e:
b1:9f:7b:0b:8b:70:26:c8:86:c5:56:dd:97:af:79:90:1c:8f:
b8:13:c4:97:78:a2:7a:72:f1:da:a6:b6:b1:ff:1c:58:29:67:
99:35:4e:bd:4c:3b:22:63:52:d8:54:0a:32:f6:93:04:20:8e:
24:11:30:49:74:54:8a:d1:c3:8a:da:b3:6f:74:b0:bf:b5:5b:
f3:59:9e:ef:1b:85:de:b8:42:fc:41:2b:dd:02:7a:9b:a1:a1:
98:d2:0c:f1:22:34:93:ee:1d:f8:43:d0:c3:be:46:7d:59:2f:
ea:80:a4:ba:d9:1b:1f:fb:db:51:90:4b:b5:19:ee:72:25:1b:
31:bc:c0:bd:7c:ad:d1:46:1d:27:b3:09:60:17:3f:0d:21:d3:
d9:bb:2a:89:0b:f5:6b:70:d1:09:58:ac:5c:53:d5:c8:97:bf:
cb:4c:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:24 2026 by rpki-client