Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: ABJPrQUTBqhPvqsdlwxcslgmOqQ/D2Egp72Gj0ZUAFY=
Subject key identifier: 63:B4:85:46:98:8B:BA:F6:D4:E6:70:7C:CB:3F:D9:F6:79:D9:96:D4
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01A1DA5CC1CA5AE2BF80690264A994D7C16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 085B
Signing time: Sat 14 Nov 2026 14:01:14 +0000
Manifest this update: Sat 14 Nov 2026 14:01:14 +0000
Manifest next update: Sun 15 Nov 2026 14:01:14 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: cPznr5RmN6ArczcJ6ss/Ar9NNQzBsqYEqSyPeMqNEgg=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:c1:ca:5a:e2:bf:80:69:02:64:a9:94:d7:c1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Nov 14 14:01:14 2026 GMT
Not After : Nov 15 14:01:14 2026 GMT
Subject: CN=63b48546988bbaf6d4e6707ccb3fd9f679d996d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:d7:cf:94:a6:cd:bc:88:e0:23:b5:d6:29:
65:32:55:9c:9e:fa:05:01:3a:55:7f:f3:9c:39:5c:
18:8a:24:8f:83:a8:c2:91:ff:c0:a2:86:b4:13:f0:
d4:b1:e9:bb:3f:db:a6:69:73:c7:ac:42:3f:67:a3:
a3:ff:2f:fb:27:7b:02:0c:93:25:a2:65:de:75:69:
23:79:07:48:7b:ca:e0:74:da:ec:e7:7e:d0:ee:52:
d7:73:49:e8:79:41:ab:b4:42:bb:ae:aa:ba:58:22:
48:87:98:6d:90:ae:1c:29:3f:15:bf:2f:1a:3c:15:
76:60:cf:de:e6:e0:2e:50:6e:53:18:5d:dd:69:04:
9d:da:67:72:8b:40:90:b0:1f:57:85:11:30:bb:e6:
0b:5f:c8:47:19:ee:9c:06:01:00:5a:0d:12:88:ec:
8b:da:84:25:2e:35:e2:f1:f8:94:e6:4b:08:db:0a:
56:e2:2f:e9:db:57:e9:3a:2b:0e:96:60:be:7b:de:
4b:bd:17:2c:55:3c:4b:2f:f4:49:f9:53:20:45:4c:
ee:33:1e:60:ff:45:4d:1a:2e:5b:17:ac:c8:67:a0:
86:04:c9:38:fb:c2:a5:68:bc:aa:9b:be:e5:ed:45:
0f:84:f5:ca:8c:ff:cf:6e:ef:bd:5d:42:9a:87:72:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:85:46:98:8B:BA:F6:D4:E6:70:7C:CB:3F:D9:F6:79:D9:96:D4
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:cc:32:f3:27:6b:92:e0:28:bc:d6:02:21:2a:1c:7a:ff:
99:0a:de:93:d8:4e:52:2a:2c:ab:05:b3:0f:01:41:86:5f:98:
12:cd:77:ed:0a:50:6b:1d:e8:13:a4:95:ca:60:7d:e8:89:1c:
c1:46:78:47:a9:b5:12:6c:5c:a5:20:e4:91:3f:78:c6:42:0f:
75:2b:ce:a4:75:72:b6:bc:bc:c0:f0:30:31:93:ca:c2:5c:f2:
bc:d5:b3:b5:0d:61:9b:98:f2:67:5a:80:f5:7c:b4:2a:59:37:
23:71:5c:3e:58:73:98:2e:43:f7:88:0a:c5:ab:a4:79:e8:73:
3f:3c:f6:cb:bb:e9:c7:12:02:29:6b:1a:01:3d:d9:a8:a8:78:
e3:7b:17:63:e5:e1:96:22:0b:28:38:8f:44:ff:95:77:a0:fd:
2d:29:bd:5a:1a:81:f0:21:ea:87:51:47:52:38:af:7f:d1:84:
ff:a9:27:1f:7d:5d:88:51:77:6b:3c:f7:22:18:d0:b6:ea:ad:
08:e1:fc:7e:41:7c:8d:b6:29:e7:ee:fb:11:cd:3c:8c:48:82:
91:7d:80:21:67:a6:00:7f:a6:3d:64:57:a6:1d:4e:62:fe:b1:
a3:19:29:a7:fb:a8:18:a6:bc:2d:07:13:09:be:fb:0f:65:1d:
ee:e2:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:41 2026 by rpki-client