Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: EZfxMiOo8xxjeYMJywW1h+1QOOmUutLmJnm/Oygfclw=
Subject key identifier: 0E:C3:B2:C6:C6:C6:6F:65:1C:6A:E1:69:28:42:97:7E:C0:B2:47:EF
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01A0E0981E96D95D918B52A4C2CA78E53DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 170E
Signing time: Sun 27 Sep 2026 02:01:00 +0000
Manifest this update: Sun 27 Sep 2026 02:01:00 +0000
Manifest next update: Mon 28 Sep 2026 02:01:00 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: TnrkMuKsBofF9Duuqn++ZzmffKzsrZrHfHuZhgo6+pc=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:1e:96:d9:5d:91:8b:52:a4:c2:ca:78:e5:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Sep 27 02:01:00 2026 GMT
Not After : Sep 28 02:01:00 2026 GMT
Subject: CN=0ec3b2c6c6c66f651c6ae1692842977ec0b247ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:e3:27:48:cc:86:29:fe:0a:f5:fc:22:c4:
67:1c:ea:4d:d8:1a:1e:59:e3:93:99:cd:0a:de:e5:
e4:6a:5b:cc:ff:7d:96:08:dd:e6:41:c1:40:4c:dc:
1a:fd:e0:9e:36:86:14:bc:71:99:3c:a3:02:af:a8:
ee:d3:d0:f7:a3:fb:4f:a6:40:e0:73:77:d5:72:11:
3a:1f:05:0b:8a:5d:97:0e:28:1a:4d:73:67:97:e6:
e7:4f:39:12:7f:aa:03:40:0d:3c:ea:c0:27:d3:ba:
b5:23:39:82:b4:34:f3:19:36:a2:74:9c:03:11:9a:
52:44:c5:56:99:a0:4c:3a:15:ca:58:08:eb:67:ac:
ef:eb:88:34:46:4e:1f:85:5d:63:85:94:8b:da:c6:
99:1a:0b:0d:c3:5e:5d:a0:25:33:bd:b3:3a:27:16:
f7:6f:81:2f:57:75:8d:ef:4a:86:26:7a:72:a9:b9:
d7:b8:fc:d7:db:a9:82:32:b2:ea:c8:59:51:42:84:
b6:29:f1:d1:7f:82:d0:a3:38:db:83:5e:db:96:db:
4c:e6:43:3b:78:47:18:e8:b3:a3:7e:56:5c:ed:aa:
df:08:10:17:87:16:8f:7e:bf:43:2e:01:fb:6b:55:
21:3f:2d:11:76:a5:c2:53:88:eb:ae:9b:4c:51:eb:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C3:B2:C6:C6:C6:6F:65:1C:6A:E1:69:28:42:97:7E:C0:B2:47:EF
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:2a:78:d6:5e:9d:35:31:9f:68:19:a6:84:75:60:75:3c:
33:81:01:0e:70:bd:7d:72:28:80:f5:bf:86:28:f8:ba:14:01:
22:c2:b9:46:02:0c:c6:27:1e:4d:bc:71:22:84:df:52:3d:bf:
00:61:65:72:27:8c:b6:d6:11:14:9b:68:98:13:6e:58:49:56:
f6:a9:25:d5:b7:08:4f:3a:fb:ab:e0:fe:69:a0:bb:5a:d6:d0:
ca:e5:50:5e:09:1b:e5:17:d9:bf:60:e8:0e:f9:4b:71:42:cb:
03:33:b0:b1:0d:8f:83:09:16:ec:50:d0:ce:a1:10:59:ab:be:
db:15:0e:70:3d:55:a9:cd:79:f6:c6:04:42:40:5a:6c:45:f6:
87:5c:c4:9e:bf:92:c1:7c:08:9b:40:ad:dc:bc:a9:6a:51:de:
d9:c4:10:ea:f2:85:03:8c:f1:82:70:1f:fe:9f:41:14:95:5e:
f5:35:27:4b:7a:83:2a:b6:7f:98:31:a3:06:bf:c7:c9:e4:c8:
48:86:ce:a2:99:f0:34:eb:50:e8:4f:8f:47:2f:9a:ce:6b:20:
49:e6:d3:2e:3c:98:e5:23:9f:38:71:12:73:b9:5e:34:29:7c:
43:a4:44:f7:a5:58:66:dd:2c:d8:f4:f0:6e:b5:7f:e8:94:a9:
e6:4f:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:58:36 2026 by rpki-client