Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: v+RIuKnW94v92QPETeuX6XXcz4AJ5Ch77UhabdlcsCQ=
Subject key identifier: 5E:9D:DE:9E:26:A8:CA:A8:B1:63:58:94:27:5E:F7:95:78:E5:3A:B6
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019F8F475F6A5FE652E9F8C261BADA8DC0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 072B
Signing time: Thu 23 Jul 2026 14:00:47 +0000
Manifest this update: Thu 23 Jul 2026 14:00:47 +0000
Manifest next update: Fri 24 Jul 2026 14:00:47 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: pzcDHgwY1Nr5jhSLX/Kei4+IV6PI2LS38ro6aAtIS5E=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:5f:6a:5f:e6:52:e9:f8:c2:61:ba:da:8d:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jul 23 14:00:47 2026 GMT
Not After : Jul 24 14:00:47 2026 GMT
Subject: CN=5e9dde9e26a8caa8b1635894275ef79578e53ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:a6:2d:09:7b:12:13:fd:8b:e9:8d:54:b2:
91:bf:97:f5:99:74:35:d9:3a:78:98:a6:61:d2:5f:
c2:b3:ed:46:bc:fe:93:af:e3:8b:27:ae:8f:80:f1:
ae:9e:91:da:b0:87:3e:65:a2:8b:c2:52:7d:56:b4:
ae:06:9d:23:85:9b:f7:1b:12:ac:1d:d6:cf:ee:af:
bf:bf:43:9a:fe:85:db:b6:93:8e:38:b3:2b:fa:ae:
07:7d:9c:5b:5f:a4:72:52:8c:48:c7:62:ea:4b:97:
c9:ff:b6:b5:19:e4:8f:1f:4d:63:3c:bf:b0:2d:b3:
2e:91:07:50:a1:c8:71:12:86:88:22:6a:4d:1b:0b:
4a:79:78:cf:99:9b:65:bb:6b:23:9e:e1:f7:24:ea:
26:ac:c2:da:6c:8b:68:ff:5a:0f:a9:80:95:3a:c7:
fd:ee:ab:ee:98:cb:26:62:1c:53:1c:09:80:20:f8:
bd:9e:91:6f:62:08:0f:ec:28:80:58:f6:7b:83:c6:
2d:6f:13:d1:00:6d:e0:f8:7e:78:69:a7:b9:a3:29:
8a:d0:0b:88:2b:c5:91:95:97:47:5d:bf:83:8b:64:
b4:38:e8:83:1b:f3:e4:7d:60:b8:43:33:d9:f4:7c:
86:91:87:13:1c:23:53:27:ff:f5:3e:ac:7e:35:99:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:DE:9E:26:A8:CA:A8:B1:63:58:94:27:5E:F7:95:78:E5:3A:B6
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8b:cf:ec:1c:9e:75:78:11:2c:7c:cd:ad:67:d0:9b:9e:36:
17:78:a9:66:ea:df:69:b9:db:81:cc:e1:95:ff:ba:60:f9:e0:
fd:90:3d:55:3c:ec:5d:2a:d7:f3:59:57:c3:0e:e6:2b:0a:a0:
c9:af:a9:46:78:84:3b:b4:60:f3:c8:da:41:e7:3b:a2:b7:ef:
5c:aa:03:1b:63:d0:97:80:89:f0:c4:a5:f2:b9:05:0e:26:a6:
a7:6f:af:eb:8c:5e:68:da:2b:da:3b:09:25:85:10:a0:80:8b:
e2:9a:17:51:ab:28:eb:2e:26:e3:16:06:90:c3:16:c3:0d:f5:
b2:d1:f3:c5:b7:ad:25:e9:a7:7d:85:6d:b9:7a:19:ad:37:0b:
43:27:c7:57:7d:5b:92:8b:5b:91:27:da:b6:4c:95:6a:3d:d9:
49:ce:3c:64:12:83:69:c8:76:d1:92:c1:1d:f3:73:d8:07:d2:
7e:91:aa:ed:79:34:77:05:2f:09:99:f1:ff:8b:8a:bf:49:00:
75:c2:0f:db:33:f4:e3:65:65:0a:e1:fe:8e:2d:16:da:5f:7f:
3c:03:80:2b:9c:85:8b:8c:4f:1b:80:e4:d5:61:90:1d:63:88:
5e:6a:73:96:8e:f2:ec:d9:c4:cb:98:89:74:fd:04:48:6f:44:
f4:32:58:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR19qX+ZS6fjCYbrajcDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjE0N2QzOWU0M2JiNzVmOWY3YWZmNDVlN2JmMmI4MzUz
MGY4NzQwHhcNMjYwNzIzMTQwMDQ3WhcNMjYwNzI0MTQwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZTlkZGU5ZTI2YThjYWE4YjE2MzU4OTQyNzVlZjc5NTc4ZTUzYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQemLQl7EhP9i+mNVLKRv5f1mXQ1
2Tp4mKZh0l/Cs+1GvP6Tr+OLJ66PgPGunpHasIc+ZaKLwlJ9VrSuBp0jhZv3GxKs
HdbP7q+/v0Oa/oXbtpOOOLMr+q4HfZxbX6RyUoxIx2LqS5fJ/7a1GeSPH01jPL+w
LbMukQdQochxEoaIImpNGwtKeXjPmZtlu2sjnuH3JOomrMLabIto/1oPqYCVOsf9
7qvumMsmYhxTHAmAIPi9npFvYggP7CiAWPZ7g8YtbxPRAG3g+H54aae5oymK0AuI
K8WRlZdHXb+Di2S0OOiDG/PkfWC4QzPZ9HyGkYcTHCNTJ//1Pqx+NZlztwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6d3p4mqMqosWNYlCde95V45Tq2MB8GA1UdIwQY
MBaAFAixR9OeQ7t1+fev9F578rg1MPh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMt
MzA1ZTMzZWY4YjI5LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMtMzA1ZTMzZWY4YjI5
LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArovP7Bye
dXgRLHzNrWfQm542F3ipZurfabnbgczhlf+6YPng/ZA9VTzsXSrX81lXww7mKwqg
ya+pRniEO7Rg88jaQec7orfvXKoDG2PQl4CJ8MSl8rkFDiamp2+v64xeaNor2jsJ
JYUQoICL4poXUaso6y4m4xYGkMMWww31stHzxbetJemnfYVtuXoZrTcLQyfHV31b
kotbkSfatkyVaj3ZSc48ZBKDach20ZLBHfNz2AfSfpGq7Xk0dwUvCZnx/4uKv0kA
dcIP2zP042VlCuH+ji0W2l9/PAOAK5yFi4xPG4Dk1WGQHWOIXmpzlo7y7NnEy5iJ
dP0ESG9E9DJYAw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:45 2026 by rpki-client