Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: CG1t8wTrgeWvhk0ax/Buve+NPr+dEI+W2MEP1CCSUFc=
Subject key identifier: 45:DD:E0:3D:97:B6:9D:D3:6C:DF:E8:54:10:27:21:87:06:4E:5B:D0
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 019D2771C1D0607863DA293BE2D761F012D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 04C8
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: sLCp5xeWjgp10yLimixvSCo3XvrgWBQOdb7z7kANHv4=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c1:d0:60:78:63:da:29:3b:e2:d7:61:f0:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=45dde03d97b69dd36cdfe85410272187064e5bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:d5:b5:24:b7:92:c5:74:a6:d2:59:8d:6a:
9a:43:fc:b5:76:87:3c:bb:00:33:09:11:3e:f5:1e:
f2:66:c3:a8:b7:26:9f:64:02:cd:13:a7:14:aa:60:
7d:33:17:7f:5d:d6:66:10:93:08:e9:b2:44:63:29:
13:7c:a1:2d:86:bb:7c:17:89:23:29:25:6f:66:9e:
93:53:f2:e2:d4:5e:4d:02:22:d9:cc:22:9c:d1:04:
21:78:b2:d0:18:85:5d:0b:c0:90:11:fb:e1:3c:48:
a5:3a:01:8a:0f:46:dc:9e:9a:86:c1:f5:81:4a:35:
3d:fe:a7:0e:31:46:20:a0:1a:b5:d4:39:87:56:08:
d2:38:6c:92:a4:9c:26:2c:b2:e2:2d:1b:84:fb:7a:
0f:5e:48:aa:f3:25:e2:f1:ea:3b:e0:02:a8:fc:a2:
98:ff:fb:35:b7:9a:7f:42:4e:40:e9:01:27:53:4b:
85:d0:8d:28:63:3a:7f:e2:16:26:75:82:0a:5c:94:
0b:09:c3:eb:35:2e:03:a1:49:74:2a:ab:71:84:32:
ca:d0:35:af:b6:90:2e:80:d0:34:fc:1f:9f:c3:04:
35:26:61:19:15:44:c6:36:35:05:48:c8:c8:a7:6e:
f3:85:d3:3d:e9:1b:6e:5b:02:16:07:e6:af:c1:93:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:E0:3D:97:B6:9D:D3:6C:DF:E8:54:10:27:21:87:06:4E:5B:D0
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:47:e2:0f:e3:b6:ae:21:3f:41:9a:97:4b:ae:83:f3:b0:
05:97:ba:57:e1:e0:e8:1f:68:f5:d3:96:b0:c8:d8:a4:d9:78:
32:b9:f4:9e:3f:32:d0:c2:bc:2c:14:3a:b4:69:74:10:08:f2:
9f:f9:f7:34:53:bc:09:68:d5:8f:fd:c8:ee:54:d0:46:61:80:
63:7e:5d:4a:5a:2e:0a:4f:21:56:29:07:2b:83:ec:ce:aa:ca:
38:6e:2b:e9:6e:c4:c1:e9:5b:97:f5:9f:e6:c6:b5:76:1f:33:
af:c7:7f:2f:bc:1b:e5:6d:6b:99:83:a9:bd:92:ad:7b:9d:a0:
88:d4:6f:08:3a:93:3f:d3:61:3e:68:11:db:7e:15:45:ec:6d:
3a:a8:33:12:b0:0a:4a:6f:24:9b:f0:8b:13:5d:70:a8:4e:d9:
a3:c4:fa:71:01:7a:b6:5c:6e:28:ad:d0:23:8a:4c:91:3a:b2:
41:5b:0c:20:5d:4d:1f:a7:a0:98:aa:53:67:6a:e0:68:67:e5:
7b:1b:c3:75:cc:5a:c9:22:72:d1:15:0f:56:17:10:22:ae:22:
d6:43:c3:c5:63:4f:0b:44:c0:1e:87:6c:70:34:2f:77:de:50:
05:6e:91:e7:6f:c5:bb:3e:a5:51:26:a7:fa:97:09:ec:dc:32:
01:bd:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:45 2026 by rpki-client