Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: w5L+hMTTNdbdnf5k430NfDoOHPpapQS8g6ogtkCtHj4=
Subject key identifier: B3:61:C2:4B:F1:67:97:A1:81:E8:1A:7C:6F:36:85:4B:E9:F8:60:13
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 019D28F27B8E1B47726E1D77AA360034A26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 1881
Signing time: Thu 26 Mar 2026 07:01:13 +0000
Manifest this update: Thu 26 Mar 2026 07:01:13 +0000
Manifest next update: Fri 27 Mar 2026 07:01:13 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: ZXur/HXjK/9NTYtZwOU5XdqGBSuTWizj+CkldmV9Ngk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:7b:8e:1b:47:72:6e:1d:77:aa:36:00:34:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Mar 26 07:01:13 2026 GMT
Not After : Mar 27 07:01:13 2026 GMT
Subject: CN=b361c24bf16797a181e81a7c6f36854be9f86013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:62:cd:05:be:b0:cf:f7:e8:0e:ec:9d:4a:90:
b4:a9:83:d0:28:e8:ae:91:f7:bd:6a:13:23:31:0a:
9a:94:f4:f6:34:f6:48:25:e9:6a:30:03:a1:4b:cd:
b9:b7:81:43:31:f5:74:d3:f3:c1:f6:ac:31:41:92:
25:08:50:91:79:56:28:52:54:37:e7:91:da:6d:24:
e0:f2:e8:c9:1a:b0:cd:08:b3:47:29:a6:08:5a:0b:
b7:4e:24:9e:d7:59:aa:32:0b:ad:86:52:bf:bb:92:
e1:1f:3e:18:37:26:13:30:1c:6c:20:e6:d7:d6:f7:
9a:f8:bb:45:fd:ad:05:19:c1:3f:18:aa:90:8a:62:
26:db:87:a6:b0:a9:6e:61:2a:a4:93:59:b2:ba:f2:
ed:1c:70:da:29:88:43:03:d3:33:9b:68:e7:82:d4:
04:94:a9:37:d6:46:70:61:8d:72:4c:67:92:ac:91:
dd:5b:3a:23:61:f1:74:fc:a6:95:52:ea:8d:0f:19:
78:69:ba:96:5b:65:bf:6f:64:41:79:3c:d7:cd:ec:
94:90:35:91:c1:6f:34:e3:c2:04:43:44:fb:6b:e0:
88:86:98:d9:8b:cf:4d:4f:31:99:c4:85:06:5c:f1:
f0:c6:2e:ad:0f:af:f1:90:49:3c:77:01:6f:7f:55:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:C2:4B:F1:67:97:A1:81:E8:1A:7C:6F:36:85:4B:E9:F8:60:13
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:64:39:66:a8:9a:03:9b:9d:6d:24:39:cf:82:0a:4b:0c:
b3:11:b2:dc:e8:2b:4f:89:1e:e4:0b:5c:3a:db:5c:8f:85:10:
3c:e1:48:31:03:22:cb:85:6e:87:f5:d0:7a:06:d1:00:81:48:
d7:96:14:ad:aa:a7:66:33:57:9d:90:cd:02:2c:93:d9:33:ee:
d6:c3:fd:5b:79:26:55:17:7c:69:e1:76:dd:e2:4e:23:10:f7:
52:4f:d4:bc:35:08:6d:5a:70:30:96:9b:5a:8a:aa:b2:5f:38:
37:14:d7:37:46:e7:0d:93:61:e1:10:d5:63:f8:9b:a8:49:ba:
fb:fa:c3:af:1e:1a:51:d3:c6:f1:9a:aa:9a:ef:e5:46:2b:48:
a9:7c:14:f0:d9:8e:1b:da:fd:83:fa:9a:0d:38:f2:32:10:e5:
57:82:e9:8d:f4:ef:d5:95:4d:06:90:a0:17:a2:f6:f5:54:3e:
15:95:0f:29:47:92:cc:0d:b9:41:8f:b8:85:ce:54:f3:76:35:
54:ab:7e:e2:71:cd:2f:c4:7e:49:4a:a9:6f:1e:a3:90:ab:31:
34:8a:67:6c:60:59:26:ce:7f:38:be:8c:94:b7:dc:a4:a1:2b:
89:c5:5d:69:8e:26:a5:a0:91:f0:2d:95:5a:3a:35:df:86:a0:
21:32:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:14:14 2026 by rpki-client