Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: Y60FVxykKrZKmyleDQgIjH6kiy8fv4Nutb3nnq8IJE0=
Subject key identifier: 52:CC:0B:EF:CC:CE:9E:2F:74:B8:65:67:BD:CA:71:1B:C5:F5:B2:4B
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 019E1D2327CAEA80EDCEE34F4C588106BECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 17:01:43 +0000
Manifest this update: Tue 12 May 2026 17:01:43 +0000
Manifest next update: Wed 13 May 2026 17:01:43 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: yHqMsNJodeqqtkNPG+GZGJjPKI6Cj2S88IsTKNtnFdA=)
2: Fa37sgJ0KEgxPOoDaXh31g5a4H8.roa (hash: mNF5TDQzIO8pXqi/tpiKK9BXHWuK4DjnzUPJ4cKM8kw=)
3: Ks1siXudDP7UhfleUk0HqiWJhus.roa (hash: 1NzCZJi9208gkBcW8iQCaIa1aBFHGt3mrmc2W81HwZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:27:ca:ea:80:ed:ce:e3:4f:4c:58:81:06:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: May 12 17:01:43 2026 GMT
Not After : May 13 17:01:43 2026 GMT
Subject: CN=52cc0befccce9e2f74b86567bdca711bc5f5b24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:6d:5b:20:9f:a8:b3:4b:1d:cf:10:e6:42:
b5:12:59:bc:aa:18:34:2b:78:6b:e5:f1:44:dc:a4:
f7:1c:7b:db:27:fc:24:03:db:1c:ff:51:eb:90:85:
67:39:17:ce:77:74:2c:b8:8a:98:a5:a3:24:10:30:
51:ee:62:3f:2b:31:0d:1a:9c:7f:bb:5e:72:06:c2:
9a:15:f8:ee:7b:ca:21:de:ef:75:3c:a2:e6:57:6c:
46:05:98:22:9a:a6:f0:ce:7b:ff:50:c2:3b:c3:66:
2e:0a:62:38:9c:ee:c7:eb:49:06:8b:71:26:b7:46:
1a:f5:e9:9b:f9:fe:9a:73:9d:de:17:bd:b3:8b:d5:
d3:c1:ea:71:cb:19:29:62:88:71:c9:9d:15:cb:27:
2a:6e:80:34:2a:6d:27:d0:6d:24:2d:a9:7f:06:38:
63:ec:5d:77:49:6a:56:4b:6a:32:d3:06:52:fc:b5:
1b:be:22:68:22:a9:2e:97:7f:60:c2:61:12:2b:5f:
de:f9:bd:6a:e4:7b:27:ab:74:f5:9a:67:a7:16:b1:
62:c6:2e:58:28:6f:03:c8:eb:e9:08:65:87:09:98:
2d:56:1b:03:2a:b5:89:97:6e:99:1a:c9:57:da:21:
70:40:47:91:fe:d2:1a:dc:f8:79:36:43:2c:61:1c:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:0B:EF:CC:CE:9E:2F:74:B8:65:67:BD:CA:71:1B:C5:F5:B2:4B
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b7:ce:c7:b5:dc:48:d6:93:02:68:82:8b:4b:ce:b9:fa:5e:
6d:2f:83:2d:d4:ad:f7:ca:67:59:81:36:c4:22:f6:a9:47:02:
f3:62:25:7d:99:91:15:fc:af:d0:74:10:25:42:dd:24:3f:f0:
02:d7:00:af:99:51:d8:02:e6:8b:de:55:4a:60:28:f0:3b:62:
6f:32:e5:db:4c:15:a4:31:ca:84:c3:81:2c:d9:42:ea:ce:6a:
4c:cc:a7:e6:33:8c:61:2e:09:10:d1:9e:e9:67:0e:c2:54:b9:
ab:52:48:22:7f:d2:b5:b9:12:a4:23:f5:41:c8:6d:ba:86:13:
be:50:0d:c3:88:90:c2:d4:94:aa:fc:4d:fd:44:9d:c0:35:7f:
9e:39:80:bb:55:83:3c:28:e9:13:19:70:d0:7b:77:db:f1:05:
fc:6b:80:86:5c:b8:4a:5a:95:9c:3b:08:37:a4:67:5b:88:5d:
ea:84:c4:ba:02:04:12:15:47:d4:ed:3b:a5:61:1c:5c:75:17:
44:ee:3a:d5:7b:5c:9a:0b:72:47:82:74:98:d1:35:29:51:79:
ae:f7:d1:b9:f5:fb:20:1f:87:88:60:7c:9e:cc:bd:87:de:02:
60:e0:ec:fa:a7:c1:e4:61:de:f6:ae:c6:07:4d:f7:b2:b1:98:
48:1a:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:05 2026 by rpki-client