Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: pPX2AqOJpDXbS5Hi7hugnOJh9z05UJRaa5I/yyp7YbQ=
Subject key identifier: 5C:CD:8F:FA:FE:85:A7:89:DD:18:BF:82:98:A0:81:70:3A:C6:71:FC
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019F927F940C2998EFC4BDCF8397C0BBE724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1661
Signing time: Fri 24 Jul 2026 05:01:02 +0000
Manifest this update: Fri 24 Jul 2026 05:01:02 +0000
Manifest next update: Sat 25 Jul 2026 05:01:02 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: /t0ce3ETCNIW6U3TNBGkapjI6mhy84kLz3H5+I7sIZU=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:94:0c:29:98:ef:c4:bd:cf:83:97:c0:bb:e7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jul 24 05:01:02 2026 GMT
Not After : Jul 25 05:01:02 2026 GMT
Subject: CN=5ccd8ffafe85a789dd18bf8298a081703ac671fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:69:0f:c3:2b:f6:35:2a:c2:e8:26:85:3c:
81:71:a4:a0:5a:a2:29:4b:8a:b0:20:55:19:57:21:
9c:7f:b9:01:a0:0f:4b:b2:67:1b:b5:ef:ff:10:3a:
21:49:2a:a7:e8:78:5e:e9:14:5e:58:5a:7b:06:b8:
5f:ff:7f:fc:55:5e:7e:13:f2:fd:bd:45:19:b1:75:
a9:00:0c:7a:8a:71:ed:b4:89:af:c0:2e:44:11:1b:
cd:85:1a:9a:43:e3:8e:6b:d0:50:b3:67:5b:5a:77:
b4:6d:89:b5:c9:42:00:dd:42:35:26:ce:9b:f8:ef:
03:9d:ac:74:69:5e:1a:fa:fb:4c:68:53:40:9b:28:
13:57:57:c0:e7:24:08:06:cd:92:d0:15:45:a9:16:
f3:f0:68:13:6d:e0:6e:82:86:38:db:5e:19:da:4c:
a4:6d:e0:15:e2:1f:50:07:4d:6c:f8:07:85:72:38:
c7:ca:b7:4b:7d:a0:fd:f9:a8:9b:2b:ea:16:16:c5:
b9:c8:1c:bc:cd:b3:f9:95:16:4f:8c:88:aa:65:9b:
56:55:3d:54:54:d0:d4:87:62:5a:70:d7:df:b7:0f:
ae:be:cc:2e:52:0e:0f:9c:ff:2e:6b:8d:71:75:19:
1d:dd:b2:18:1d:61:2f:57:b1:6d:b5:9a:51:8e:b3:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:8F:FA:FE:85:A7:89:DD:18:BF:82:98:A0:81:70:3A:C6:71:FC
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:4a:a5:57:84:e2:7a:2a:08:59:20:c7:3f:2f:0f:e5:b6:
70:6f:3d:5d:de:60:93:fe:04:35:4a:8f:e0:c5:05:d9:3d:06:
b5:85:4e:47:70:f5:aa:c4:d8:0d:e9:b7:86:30:3c:69:98:8e:
d0:4d:3b:9f:0b:ec:a5:e6:05:eb:d2:5d:bf:d7:14:97:3a:47:
99:51:5d:54:ed:c2:5a:f3:c8:59:4e:36:4a:7a:47:0c:fe:c8:
db:8a:a8:af:5b:fe:cf:36:11:d3:44:54:d2:1a:d8:d0:48:a7:
02:90:80:46:c1:f7:66:9a:36:53:11:0d:b3:e0:9f:39:b3:1a:
bb:a5:8a:57:41:b3:cc:b5:63:8e:b7:d3:db:b8:02:63:b7:93:
8d:c9:08:40:95:0c:b4:cb:cd:d0:58:48:1e:8d:40:45:41:df:
0c:7b:61:39:27:dd:80:18:33:13:46:5a:12:a1:43:35:20:2b:
e7:92:ca:02:bc:2b:06:19:e2:16:70:c7:13:d3:93:c1:d1:9d:
c8:4a:55:f8:f1:3b:37:b0:64:3d:5a:02:f5:76:6e:a2:a0:1d:
d8:24:d1:bc:02:56:b7:ad:3b:a4:f5:93:c2:a8:e6:1e:06:b6:
0a:96:d5:12:3c:22:f0:5b:7c:e3:dc:8e:52:48:e4:8c:60:7b:
4a:91:3f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf5QMKZjvxL3Pg5fAu+ckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx
YzlhMDYwHhcNMjYwNzI0MDUwMTAyWhcNMjYwNzI1MDUwMTAyWjAzMTEwLwYDVQQD
Eyg1Y2NkOGZmYWZlODVhNzg5ZGQxOGJmODI5OGEwODE3MDNhYzY3MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNhpD8Mr9jUqwugmhTyBcaSgWqIp
S4qwIFUZVyGcf7kBoA9Lsmcbte//EDohSSqn6Hhe6RReWFp7Brhf/3/8VV5+E/L9
vUUZsXWpAAx6inHttImvwC5EERvNhRqaQ+OOa9BQs2dbWne0bYm1yUIA3UI1Js6b
+O8Dnax0aV4a+vtMaFNAmygTV1fA5yQIBs2S0BVFqRbz8GgTbeBugoY4214Z2kyk
beAV4h9QB01s+AeFcjjHyrdLfaD9+aibK+oWFsW5yBy8zbP5lRZPjIiqZZtWVT1U
VNDUh2JacNfftw+uvswuUg4PnP8ua41xdRkd3bIYHWEvV7FttZpRjrMimwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzNj/r+haeJ3Ri/gpiggXA6xnH8MB8GA1UdIwQY
MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt
NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5
LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwBKpVeE
4noqCFkgxz8vD+W2cG89Xd5gk/4ENUqP4MUF2T0GtYVOR3D1qsTYDem3hjA8aZiO
0E07nwvspeYF69Jdv9cUlzpHmVFdVO3CWvPIWU42SnpHDP7I24qor1v+zzYR00RU
0hrY0EinApCARsH3Zpo2UxENs+CfObMau6WKV0GzzLVjjrfT27gCY7eTjckIQJUM
tMvN0FhIHo1ARUHfDHthOSfdgBgzE0ZaEqFDNSAr55LKArwrBhniFnDHE9OTwdGd
yEpV+PE7N7BkPVoC9XZuoqAd2CTRvAJWt607pPWTwqjmHga2CpbVEjwi8Ft849yO
UkjkjGB7SpE/Mw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:11 2026 by rpki-client