Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: Z7T4yrhgQ/2Xc01+ops2TA7noYM/4u4Znre66reSMcw=
Subject key identifier: D5:6A:9B:A6:37:D9:4F:F9:C5:9C:5B:6F:CD:C3:A1:50:6B:CD:5E:2B
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01A0D3B8EB4D99BD0939373A14C8896B3119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 07D3
Signing time: Thu 24 Sep 2026 14:01:46 +0000
Manifest this update: Thu 24 Sep 2026 14:01:46 +0000
Manifest next update: Fri 25 Sep 2026 14:01:46 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: Yb9/XP9zw6FUMFpYKoU6neJXeVfZwIJk002FnQv8BXc=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:eb:4d:99:bd:09:39:37:3a:14:c8:89:6b:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Sep 24 14:01:46 2026 GMT
Not After : Sep 25 14:01:46 2026 GMT
Subject: CN=d56a9ba637d94ff9c59c5b6fcdc3a1506bcd5e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:4e:92:45:e1:ff:e7:07:8a:70:11:6a:5b:
e1:a4:62:8c:8f:81:d5:51:f4:66:9e:fb:d7:11:7c:
ef:27:23:1b:14:45:a4:01:f5:63:97:cd:06:1c:da:
e4:e7:8a:3a:98:53:63:b5:f4:71:81:a5:70:fc:a1:
fb:39:90:80:42:e4:33:f1:2f:4a:96:a8:d3:56:d9:
68:b5:17:c2:8d:04:83:15:75:95:b1:61:f7:ce:c8:
46:30:41:df:20:c0:3c:8d:a5:0b:e6:84:fc:41:ee:
ab:cc:5a:f5:22:a3:52:02:e9:96:aa:e3:2d:4e:c2:
b0:81:87:65:06:57:ed:cb:3b:5c:cb:4f:18:59:a7:
07:44:33:d2:3e:37:85:6a:dd:f3:d9:ed:ee:62:de:
91:94:21:ce:a5:ab:f0:12:17:9e:8b:5b:ad:00:94:
d2:01:94:3b:a7:18:15:69:ed:9d:b3:a6:c9:73:ce:
6b:80:af:43:81:3d:b4:11:e2:d7:a5:7f:e5:ea:ed:
d5:e9:df:33:d7:bd:94:6f:af:63:38:03:22:bf:f8:
c4:9b:c9:2f:68:c2:b2:a6:48:73:12:1a:e8:d9:21:
5f:ed:9e:b2:44:3b:ee:8d:06:08:66:9a:5a:fb:9f:
16:15:ac:85:95:e1:50:48:37:f7:7a:07:e0:34:25:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:9B:A6:37:D9:4F:F9:C5:9C:5B:6F:CD:C3:A1:50:6B:CD:5E:2B
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:c1:f4:55:11:f7:c2:0e:96:e3:4e:61:4a:67:89:96:8d:
94:81:69:ea:db:5d:1c:2b:33:b9:d2:30:72:78:fa:05:25:01:
05:f2:79:50:e5:3f:71:75:94:05:83:7b:c3:0a:95:d6:42:02:
ec:82:b6:77:1b:e7:3f:ed:9d:55:7a:81:ed:8f:e3:ee:51:12:
05:15:87:34:d2:1b:cc:a2:77:68:67:34:da:49:72:eb:e9:3a:
4a:96:09:41:11:d1:85:b8:f2:8b:11:73:7d:06:57:c5:b2:5a:
5a:67:e4:09:07:9c:72:d0:8b:a3:d2:53:b7:ce:67:ea:f0:73:
77:7a:b6:32:6d:5c:39:ee:bf:2a:f9:28:45:9f:dc:49:7a:99:
a8:b7:7f:7b:7c:72:a0:74:75:7a:a0:c8:c5:c8:00:47:dd:39:
6e:77:be:46:f4:2d:cc:1a:31:da:fb:f5:9e:a3:2c:e6:0c:80:
a7:8b:15:c8:8a:c2:4f:38:3f:3d:c4:f8:57:c0:ff:2c:8f:73:
0f:52:58:17:23:d4:a3:32:da:09:a6:e8:4e:3b:46:8c:90:44:
5e:a3:df:f9:8a:5b:f8:d8:b8:95:34:5a:c7:cb:e7:49:a0:38:
c2:e5:f3:ff:ea:c3:77:31:5f:fa:12:95:13:57:30:4c:f1:d1:
20:ef:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:40:06 2026 by rpki-client