Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: aVexZ/szLKOBaNjvXBPaNXX9fcha4jB8HgEfo3c4HfM=
Subject key identifier: 5B:1A:1E:2C:6A:C2:72:9F:62:CF:60:57:AF:D9:57:31:93:CC:B1:56
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019E1E6CB9E69F629892680AF8BB987EF510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 066C
Signing time: Tue 12 May 2026 23:01:42 +0000
Manifest this update: Tue 12 May 2026 23:01:42 +0000
Manifest next update: Wed 13 May 2026 23:01:42 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: PJim7pvIeFxzn3gRg8iVj17pb1ooXY2uOeWs4iNaL+A=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b9:e6:9f:62:98:92:68:0a:f8:bb:98:7e:f5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: May 12 23:01:42 2026 GMT
Not After : May 13 23:01:42 2026 GMT
Subject: CN=5b1a1e2c6ac2729f62cf6057afd9573193ccb156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:13:1c:67:05:e3:ff:94:2c:10:71:29:ca:
74:42:5e:81:ea:10:5d:6b:68:7c:13:9a:79:96:b9:
20:ab:be:45:0f:39:f2:73:85:26:c2:3c:e1:f4:70:
93:ca:67:06:4f:b5:cd:b2:76:81:5d:7a:ec:5e:e2:
90:67:46:9d:aa:ad:d3:30:b9:4f:95:cd:e3:1d:31:
1d:5d:b8:29:3b:74:d5:6b:3e:b3:c3:20:aa:13:f4:
53:5f:8c:7a:b8:41:26:6d:35:26:65:c3:86:3b:c5:
b7:15:9f:6b:15:c3:41:77:79:4a:10:45:ff:ec:32:
46:f6:de:e6:cc:7a:7e:99:eb:70:78:92:22:bd:35:
c1:0e:16:16:cf:70:0e:6c:09:fa:90:05:42:76:fb:
f8:51:da:7b:53:72:98:d6:d5:47:da:c2:d4:2a:c6:
b8:58:f5:99:e5:2f:7d:72:13:1f:0d:1c:d2:ec:ab:
22:0a:c1:27:32:62:8b:1c:f7:68:b1:6b:22:d6:7c:
6a:87:e9:39:41:6f:a5:25:e3:58:a1:2e:b7:1e:5f:
bd:bf:e0:ff:73:b4:e4:33:c2:cd:99:41:49:e7:a3:
4c:1a:66:a9:88:ff:fe:ef:e2:56:82:e1:9f:ec:a7:
56:8b:6c:1e:c4:86:04:c3:0c:3d:6d:4f:93:ef:76:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:1E:2C:6A:C2:72:9F:62:CF:60:57:AF:D9:57:31:93:CC:B1:56
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c4:dd:be:50:ed:85:40:a0:06:a9:be:9c:f7:05:db:51:9b:
d1:5d:38:6f:e9:35:cf:92:25:b8:3a:6f:67:20:6c:fc:60:9c:
73:13:87:91:0e:80:2a:0c:d8:13:5f:41:27:45:2f:23:e7:a1:
92:99:6c:e0:c2:79:89:2a:c7:86:89:40:14:d2:9d:eb:60:62:
6c:b1:a8:0b:2d:47:cd:0e:56:ff:dd:85:a3:43:86:4b:ef:2d:
c8:6b:b0:b7:81:43:0a:56:3a:7b:54:96:81:25:4c:55:2e:a3:
72:42:de:62:9a:00:8e:23:bd:eb:08:35:ac:b4:63:a2:00:a5:
4e:91:64:0a:95:c3:28:8a:94:1f:bd:48:0c:a8:1d:53:4e:e3:
2f:c2:e3:0e:b2:3a:11:b9:09:99:0e:7e:b4:7e:9e:66:f2:ab:
3b:a8:09:81:67:f4:ae:6d:9a:09:4f:ce:38:e1:a4:e8:2e:ca:
6e:92:a8:43:ad:da:8c:b6:42:30:9c:e6:fa:22:62:89:12:65:
7b:65:69:1f:de:1d:b3:15:de:c2:a4:92:06:08:e1:1e:11:d1:
16:61:87:d8:78:2a:de:72:83:51:f5:5d:1c:fa:ff:76:1c:e7:
4d:00:89:7c:ea:fa:62:8e:0e:4e:a5:26:a6:2c:89:8b:f3:06:
70:fc:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:29 2026 by rpki-client