Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
File: clOCbDGl92CXvNwqL2UZiKE2flM.mft (raw, json)
Hash identifier: 3HIAGaqJzsCJyUCEEJw0pvsO84Dw1bzXjfPQUOzKZ4I=
Subject key identifier: 6B:83:E4:62:06:6F:17:B6:93:42:A5:5D:0B:FD:4E:64:D7:FB:F0:73
Authority key identifier: 72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
Certificate issuer: /CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Certificate serial: 019D29615DA76876FBB5BCF2EE06CFDBDF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
Manifest number: 0B5F
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: clOCbDGl92CXvNwqL2UZiKE2flM.crl (hash: 3BR7364cp5bL9QAKXn4Fgxim5leOki4DEGAvgnzC0wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5d:a7:68:76:fb:b5:bc:f2:ee:06:cf:db:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7253826c31a5f76097bcdc2a2f651988a1367e53
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=6b83e462066f17b69342a55d0bfd4e64d7fbf073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:45:55:d1:fb:dd:d5:92:57:52:2e:8f:fd:31:
2b:5d:93:0a:d2:2b:e3:0a:ca:69:d4:2d:7a:5f:25:
a0:0c:ec:6d:40:5f:8e:ef:ab:f9:6e:dd:0a:24:a6:
b7:90:4e:81:68:26:92:02:a0:02:2b:a6:2c:e7:1c:
c9:b3:df:90:d9:28:ac:87:04:9c:57:d5:2e:3a:a7:
17:16:3b:8c:17:23:1f:9e:da:b0:53:62:1f:dd:56:
c0:3f:de:8e:20:06:83:2f:b2:36:34:4a:2b:7f:b1:
3d:3d:d3:e9:75:ec:cf:df:3e:96:78:bb:16:49:48:
a7:01:46:a4:e3:e4:7f:b3:69:3c:48:81:36:46:fd:
ec:36:96:8d:a7:58:b3:08:3b:67:b1:6b:e2:29:d2:
f0:77:e3:3f:96:da:8a:bc:d1:db:55:f5:dc:3f:e0:
da:8b:cd:63:40:eb:09:96:27:b3:f9:53:3b:fd:35:
b7:1d:98:68:ac:94:df:44:7c:ae:0d:0c:62:dc:0e:
26:cf:af:b4:11:a5:8b:a4:34:e0:3a:93:6e:d9:b1:
33:0b:a8:d5:d5:c6:16:8b:55:16:b8:74:ac:df:28:
59:b4:ab:38:ea:fb:eb:38:9e:78:0b:68:57:55:c5:
32:6f:e4:52:6c:6f:a8:5e:4d:8b:98:57:c0:96:34:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:E4:62:06:6F:17:B6:93:42:A5:5D:0B:FD:4E:64:D7:FB:F0:73
X509v3 Authority Key Identifier:
keyid:72:53:82:6C:31:A5:F7:60:97:BC:DC:2A:2F:65:19:88:A1:36:7E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clOCbDGl92CXvNwqL2UZiKE2flM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7a4a42-7dc5-40c0-804b-f3f51c1070b9/1/clOCbDGl92CXvNwqL2UZiKE2flM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:66:59:94:27:ef:dc:80:2e:9f:77:f7:47:0c:98:7e:1a:
f2:f8:33:0f:cf:24:63:c4:21:67:22:8f:22:7e:51:9e:cf:b3:
86:ab:d8:0e:6a:b5:11:b3:b0:85:92:98:9f:a3:73:6b:f5:68:
ca:6a:8f:14:eb:83:2f:39:bf:11:69:16:56:ba:e7:49:c5:b4:
38:4d:66:82:b0:80:de:59:1c:51:b5:45:dd:d4:16:ba:47:30:
54:84:49:87:8c:40:19:cb:a0:9c:3c:a4:ba:07:66:0d:55:12:
38:5e:80:b2:0d:7c:72:1d:55:d4:c2:88:f3:63:da:5a:5c:91:
2b:4e:32:b4:5d:c3:1c:99:2a:7f:2e:09:48:b8:03:9e:e6:03:
db:f8:a5:ca:09:93:c0:38:9b:f7:41:1a:79:9b:a2:b9:bd:da:
1a:f3:42:60:8b:e6:d1:31:4e:78:55:ec:e1:4b:fd:10:45:d6:
ce:07:21:86:92:1e:3a:e7:49:73:2c:ea:85:6d:bd:a0:32:0d:
8b:fe:9e:12:cb:7e:d9:8f:8f:a5:39:cf:4d:bb:c4:d8:d2:e3:
c3:05:65:1b:7c:00:98:31:24:37:71:89:d5:c2:f2:cc:2f:e1:
20:92:8b:45:c3:be:f9:5a:1b:ea:3c:bd:4e:10:5d:49:9e:73:
d5:4c:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:54 2026 by rpki-client