Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: Cn7qkGE+V56E6HyTVWqsTh/SCtkzrfjiuxNwqSzIM6c=
Subject key identifier: 06:5F:A8:FA:02:7F:33:6D:57:13:F3:07:B8:7A:43:94:02:18:7F:1A
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 019D25F134125FFEBFBE1927EF9C149A94B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: eVcDQCmWgpPEkJ8nAXIS63GvmS8E/EsNRTOtqJjCfvU=)
2: Fa37sgJ0KEgxPOoDaXh31g5a4H8.roa (hash: mNF5TDQzIO8pXqi/tpiKK9BXHWuK4DjnzUPJ4cKM8kw=)
3: Ks1siXudDP7UhfleUk0HqiWJhus.roa (hash: 1NzCZJi9208gkBcW8iQCaIa1aBFHGt3mrmc2W81HwZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:34:12:5f:fe:bf:be:19:27:ef:9c:14:9a:94:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=065fa8fa027f336d5713f307b87a439402187f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:e7:af:d0:66:d6:6d:13:7b:ec:9d:2c:84:
9f:b0:ac:c2:61:36:05:f7:8c:c0:d3:8b:f8:93:b8:
19:15:6e:69:51:7f:dd:e1:94:10:34:b1:1a:e5:c0:
1d:78:b4:f2:1e:16:2a:51:38:35:3f:e0:59:36:b6:
89:a6:9b:b6:22:e2:97:50:10:16:09:cd:ff:b6:40:
c6:0a:75:4f:ff:54:ef:8a:30:bb:c2:06:76:72:c2:
18:75:e1:1f:f5:43:fd:56:d3:2c:e0:ec:d3:93:55:
f7:13:ef:93:87:c9:86:7f:c1:bf:28:09:64:e2:f5:
77:7f:ad:4c:04:9d:f2:7d:77:b3:5d:af:33:02:57:
f3:72:9a:74:a2:90:b5:a6:b9:3b:22:29:0c:fc:3b:
ac:b2:68:a3:d9:2e:f1:82:04:dd:54:92:74:0e:f7:
c6:de:68:70:a7:da:a4:14:43:7f:05:e7:35:f6:37:
57:4d:21:84:ed:b8:2e:1b:aa:fb:48:ea:77:41:e9:
ce:7a:32:25:c1:3b:b7:7e:5c:ff:19:93:6e:94:58:
50:a4:ae:3d:ac:af:52:df:9e:80:85:91:ec:10:5d:
5d:a5:3c:7e:49:d3:a6:b6:21:df:ea:99:fa:01:5c:
f0:84:d3:e9:b2:b9:88:96:16:24:d4:14:a9:2e:37:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:A8:FA:02:7F:33:6D:57:13:F3:07:B8:7A:43:94:02:18:7F:1A
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f8:79:82:51:f1:b0:db:99:b9:37:8d:fa:ad:eb:76:59:da:
77:fe:fb:78:a2:00:98:b5:f8:0f:c1:36:19:bb:85:99:45:d2:
c3:d0:d5:fc:73:02:a5:6b:b6:81:b9:5f:bf:a7:91:b8:4e:8f:
40:1b:e1:fc:b5:a2:d9:22:d7:c3:49:ad:f5:76:2c:ff:c7:11:
e9:45:04:7e:91:b7:5b:23:dc:8c:61:9e:58:43:88:9c:93:28:
3c:fb:e9:2b:4a:10:69:93:4e:cf:57:f3:63:71:49:27:7e:93:
04:32:61:d9:13:7f:c1:96:54:11:c1:c8:41:49:3e:a1:86:11:
68:35:3f:62:8d:c4:97:e9:d4:ee:5e:7d:fa:7d:12:6d:66:5c:
9c:f9:00:38:44:97:cf:8d:8d:42:74:1c:f6:a1:88:37:e4:9b:
d7:0e:8a:16:09:61:ca:c1:38:a3:56:50:16:70:c7:ca:d9:86:
89:e0:08:51:69:b7:7b:2d:61:a6:1f:96:98:c5:06:d2:a3:94:
7d:23:0e:48:41:55:7b:90:0d:96:76:de:c5:15:d8:46:b6:24:
fb:61:9e:8e:a6:7b:a7:01:ff:c4:e0:cd:b5:73:54:e4:19:95:
66:5a:ef:46:87:98:46:07:99:c3:54:bc:5a:7c:64:c7:d2:c1:
4f:cc:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:35 2026 by rpki-client