Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: olli79WGp67TpBpVOlj+tYDERwj/81uGKeDTh81ClQ0=
Subject key identifier: 60:B2:E5:6D:33:47:E4:41:BC:49:5F:8D:B8:8B:DA:42:EB:70:E5:89
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 01A0D34B504BDCCE5AE043807379725976F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 12:02:03 +0000
Manifest this update: Thu 24 Sep 2026 12:02:03 +0000
Manifest next update: Fri 25 Sep 2026 12:02:03 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: 3LY7wdayVQJ54AJQSk61vGR7PL62NFVxo0kqwkozlCo=)
2: kU9GqHcXl45RgiPyUS3ISp5Cc_Y.asa (hash: ZmLbO9DmawxzpYBHp5/UPtX0wgTeNFkuZ4t4mqLYLd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:50:4b:dc:ce:5a:e0:43:80:73:79:72:59:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Sep 24 12:02:03 2026 GMT
Not After : Sep 25 12:02:03 2026 GMT
Subject: CN=60b2e56d3347e441bc495f8db88bda42eb70e589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:36:4d:14:51:23:4b:6c:82:42:8b:4e:67:
e2:f0:45:68:a3:9f:c9:4d:be:e6:08:b7:dd:96:36:
70:26:1b:20:3a:ca:3b:f1:16:e5:b9:0b:37:11:0c:
18:e0:8a:9d:22:8c:6c:a2:77:f5:e6:4c:2b:42:80:
b6:b9:a5:70:93:e7:61:0a:2f:12:4c:00:43:74:e9:
90:a9:c1:18:d6:79:72:54:4d:6a:44:bc:52:78:52:
0b:cc:8a:ae:d4:96:01:dd:3d:55:4d:87:e6:0d:86:
44:32:74:36:36:7e:61:26:70:66:d8:02:5d:64:25:
d0:08:fa:54:c3:95:83:f2:67:48:02:14:07:99:f3:
29:61:63:9e:6d:a4:4a:bb:75:d0:a3:7d:68:83:b3:
72:fb:79:59:b2:fa:db:9e:8a:7b:c7:7d:70:fe:2f:
82:fc:d3:82:d7:26:5c:fa:cd:66:a8:87:3a:a0:d1:
f9:f8:8c:40:a2:15:05:68:43:e2:c7:0f:6b:04:a4:
48:58:e9:62:af:e2:07:51:37:9f:9a:42:de:f4:cc:
a5:39:dc:44:fb:ea:b6:88:d4:88:5a:6a:75:b3:58:
94:9d:1a:a0:8d:17:42:d5:0f:08:f4:c2:e2:98:7c:
df:0d:bd:d8:fd:41:6c:1b:54:61:ef:78:08:63:9c:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:E5:6D:33:47:E4:41:BC:49:5F:8D:B8:8B:DA:42:EB:70:E5:89
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:72:09:0e:3f:bf:e7:72:16:cd:3a:56:0a:e6:54:8b:cb:e7:
3b:52:6e:76:81:bf:14:66:e4:b8:45:e9:5f:52:9a:9b:bc:87:
48:7f:5a:88:00:c1:5e:b5:da:0f:59:b3:06:97:0e:e8:b4:9a:
dd:fa:b2:16:dd:c5:30:8a:13:2f:84:24:ee:bb:f2:ba:84:0e:
3f:21:49:67:07:f7:d6:ff:83:a2:bc:1a:17:3c:86:14:87:5b:
56:7b:86:07:82:18:3f:5f:71:d7:0b:8f:31:c5:92:6b:05:e4:
8a:7b:b3:e9:64:1d:e5:73:23:da:66:90:36:80:3a:49:6d:10:
ee:8e:61:47:e8:fe:cb:ec:e4:96:9b:e6:17:17:20:3f:82:43:
0e:81:c1:3d:9a:1b:1a:a0:ee:68:a7:62:2c:84:21:21:6e:b9:
56:0a:08:ec:24:44:a0:c1:80:72:e4:10:db:b1:72:74:6d:17:
f5:dc:40:28:8a:9c:a9:86:74:2f:45:5c:61:01:2b:db:ae:d7:
9d:e9:41:d7:ca:c2:13:b4:3a:79:bb:d3:a0:8f:20:0f:d4:4e:
9d:33:6e:b8:95:2f:8d:51:e3:7f:d6:a0:2d:64:4e:8d:7b:cd:
06:00:a8:b2:26:13:69:e1:4e:8a:23:3f:81:b9:52:e0:9e:c0:
14:1c:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:37:16 2026 by rpki-client