Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: peWZeytLLGCjImSQz5mZiAlHjLhe9NJb1iSVAUPvnc0=
Subject key identifier: EF:3A:5E:3B:BC:AA:0D:89:FD:04:B9:A0:F1:56:BE:1B:01:B9:DD:2B
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019E1BD922DBE4378715C63E040F6D69F04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 159F
Signing time: Tue 12 May 2026 11:01:15 +0000
Manifest this update: Tue 12 May 2026 11:01:15 +0000
Manifest next update: Wed 13 May 2026 11:01:15 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: hwNU4Fc9c9f/xii7o7a0yNktJ61f1kuOtIpir+G9baI=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:22:db:e4:37:87:15:c6:3e:04:0f:6d:69:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: May 12 11:01:15 2026 GMT
Not After : May 13 11:01:15 2026 GMT
Subject: CN=ef3a5e3bbcaa0d89fd04b9a0f156be1b01b9dd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:0b:02:85:ed:58:09:dd:4c:b1:40:8d:02:
4e:6d:80:d2:55:cd:80:52:10:24:a6:3f:29:3f:d5:
3f:7e:3a:10:60:bb:fd:36:a3:6c:fd:d2:c0:89:b0:
d1:2d:86:21:09:68:ec:18:ea:3a:53:54:98:0b:dc:
c1:af:2c:e3:58:ed:ce:9f:43:1a:71:6e:50:03:44:
96:2e:db:8d:02:97:c4:37:1a:3e:c3:b8:4b:29:98:
aa:fa:a6:01:af:2f:a7:1e:3c:83:53:3d:62:46:50:
1f:e7:cb:53:c3:30:a1:0c:48:a6:da:cc:7c:52:c6:
f9:26:fc:e3:43:9f:9a:29:6d:94:d3:db:6b:60:be:
2a:d7:25:46:9a:8c:dd:f8:76:4f:ae:fb:13:32:8e:
3c:dd:68:6a:ad:c7:8c:24:5b:35:9e:8b:68:c8:57:
eb:d8:c4:0f:04:f1:d3:7b:2e:40:9c:e8:b0:ce:7a:
ae:1a:b0:1e:a7:49:8d:75:ba:74:ef:97:04:19:c8:
fa:ab:c6:2f:19:09:25:f2:a5:d9:1d:25:59:9e:69:
0b:2b:dd:d7:13:15:5e:01:72:a9:8c:0e:ce:5a:19:
40:cc:35:21:f0:a8:72:61:b1:d4:f0:d0:2b:7b:03:
5f:2a:1d:91:26:66:f4:4a:c4:d3:2a:b9:d8:9a:47:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3A:5E:3B:BC:AA:0D:89:FD:04:B9:A0:F1:56:BE:1B:01:B9:DD:2B
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1a:6f:4e:16:8a:3d:61:b2:ce:3e:75:0d:72:f9:d5:28:ef:
1e:4d:e8:f1:4c:2b:47:f1:bf:bc:e3:e0:c8:e9:f3:85:4c:76:
58:e6:f1:61:84:e9:80:21:99:94:b7:74:8a:83:6b:4f:f1:fb:
04:d0:67:1b:e6:76:93:2a:1c:b7:5b:f6:4b:84:71:a1:ac:a2:
ca:3c:39:a8:ee:e7:7d:54:62:95:78:21:57:73:98:46:7e:3d:
2e:b2:94:e7:01:83:80:a5:49:5e:a8:38:4b:51:bb:8b:7a:7b:
05:e3:78:0d:76:17:46:f9:cb:f6:c9:73:99:dd:0f:bc:25:94:
35:58:95:12:0c:60:35:cf:58:d5:68:02:1d:72:b7:8b:bf:ce:
91:ec:14:70:ba:3a:37:6e:5f:f0:09:e7:b5:d2:59:0f:c5:15:
aa:f2:eb:04:73:6e:cc:58:64:41:d6:21:2a:44:6b:ad:4a:6d:
d0:a7:69:4c:6a:62:d6:6e:e3:69:d3:6e:65:a7:25:47:9a:68:
ab:95:79:8d:dc:01:23:c3:ea:f2:05:65:23:31:2e:0f:79:6a:
3c:94:ff:61:0b:11:49:99:b6:aa:ff:50:7e:bc:ca:3d:79:8d:
bb:5f:c4:20:25:85:ad:65:0d:5a:ad:ce:e7:2f:c9:44:b5:c8:
9f:13:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:22 2026 by rpki-client