Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: 1LRvcAa0tqCzCIBsAadi/3ABGV1GF2CzHPnxxOT+dGQ=
Subject key identifier: 35:75:DE:79:1D:09:65:D7:23:8D:AD:D3:F5:85:3A:42:EA:00:0F:51
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019D273A899389425A2F4D6F5767478C8B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 05EC
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: 2JEJ724yEkN0YWLDAMYuNTTFqUVLxs2uONJgi1xc/PQ=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:89:93:89:42:5a:2f:4d:6f:57:67:47:8c:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=3575de791d0965d7238dadd3f5853a42ea000f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:55:4a:ad:97:bc:7f:c5:55:b2:ad:8b:0a:
7f:ec:b0:7a:ea:d3:a6:9e:8c:62:61:b7:20:16:9d:
01:d5:37:ef:c9:bc:f2:1a:fc:54:11:65:4b:5e:45:
8f:a1:dc:6a:df:f8:a1:61:85:7f:1c:1e:e4:99:42:
9b:ca:99:9d:be:58:a6:31:34:25:6a:91:d9:80:b9:
b4:22:b0:51:9f:44:22:b5:42:0a:b1:3a:67:3a:e4:
59:bd:af:d3:5d:54:1f:05:70:a9:f0:8b:b1:70:5c:
81:e7:cc:d4:bd:ad:17:5d:8c:66:0a:8d:96:a4:aa:
8a:a8:32:b0:2c:41:eb:23:78:b3:96:16:a8:8d:c4:
62:17:06:f5:96:7f:30:91:52:2d:60:85:08:8f:00:
76:5c:fc:77:14:10:39:47:6b:7f:7e:32:8d:f8:af:
fd:9f:93:a6:8a:47:76:71:d5:95:fa:2b:37:33:4b:
6a:b6:5f:9a:02:bf:31:36:b9:1c:20:40:aa:6d:d8:
2b:d4:7c:4b:7c:63:81:87:2a:91:83:59:06:a7:a4:
df:66:41:67:9d:72:e6:f6:8d:45:d0:3d:53:a1:ee:
12:03:a0:2b:fc:fa:ab:7b:d8:b9:08:95:2a:c6:aa:
ee:7f:de:f0:06:55:8f:83:7e:92:7e:83:db:6d:41:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:DE:79:1D:09:65:D7:23:8D:AD:D3:F5:85:3A:42:EA:00:0F:51
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:94:b9:0c:13:4d:50:bb:c3:45:56:f7:f8:be:d2:29:de:96:
e4:b6:ad:4d:e5:15:6a:b0:58:8d:55:51:18:ce:36:c9:9e:66:
2e:ae:8f:1c:76:4e:c8:47:5b:c5:a6:64:e9:83:0c:28:02:1d:
85:b8:45:44:f0:55:16:fd:46:97:68:0e:1b:bd:8b:d1:0f:19:
bf:ac:36:11:8a:e9:3c:c7:30:f2:ff:f9:5d:1c:c8:39:d7:f4:
ee:66:85:ec:ef:c8:35:a0:e6:c8:f8:31:bc:fa:1e:5d:d2:a6:
35:02:0a:9f:01:25:e5:15:69:dd:71:aa:2d:b2:86:5e:87:97:
b4:34:da:a4:64:0a:4d:68:0d:39:d8:2e:94:2a:cf:75:c4:cc:
c3:55:98:b5:0c:ec:5e:69:8e:bb:76:4f:e6:56:dc:5e:a8:75:
b9:ad:8e:07:a7:fa:9b:f2:fc:8d:8f:6a:02:a9:49:b2:c4:27:
29:76:65:65:9e:f9:2a:f3:fc:a7:12:a5:98:6b:6e:2c:87:e2:
9b:01:92:e0:1f:8f:26:41:1d:cb:a6:73:e2:61:f2:46:ec:d6:
2f:91:3e:85:a1:40:07:fc:2a:64:47:79:32:83:61:bd:44:19:
a5:28:27:35:4d:0b:cc:33:d1:51:43:6e:bc:67:29:2a:b6:e7:
7a:13:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:09 2026 by rpki-client