Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: vllKm70qu7sT1oW7K2fOZj6KSxOAddchLkgfmCtoAnw=
Subject key identifier: 34:34:FB:33:D4:85:C7:F5:57:91:24:F6:70:76:02:31:24:CA:02:67
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 019D27DFBEAEBDD132C7E4AC62CFDEF093AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 1587
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: SC5kPtvsyi3wqvsOXfulx8Uh7HFwRgyJlixacAU6MYI=)
2: mND-0a4yL-tXy2VnOslNtViZ0Fc.roa (hash: frqpwZCsuVguOXwWS0XNoRbXaDgKyEQgFFhJPereFqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:be:ae:bd:d1:32:c7:e4:ac:62:cf:de:f0:93:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=3434fb33d485c7f5579124f67076023124ca0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:d2:dd:21:8e:0b:48:07:71:e5:8c:61:e1:
21:1d:1d:20:cc:c2:6c:2b:ea:9b:e9:3d:61:cd:de:
f9:1d:15:6d:8a:29:12:33:ac:58:c8:ce:a1:36:4f:
f4:b5:1a:23:ce:cf:ee:80:f3:f4:56:74:9f:bb:63:
01:0e:54:86:4c:c9:71:19:7c:4b:9e:d8:20:0a:30:
dc:97:be:98:38:b0:45:14:59:e6:d2:f4:d8:9b:65:
a6:0f:26:59:d8:19:4e:d9:bc:9a:a7:c2:8e:5b:20:
4c:36:0d:af:36:bf:96:87:fe:ff:33:0e:83:2e:87:
d8:e1:a4:b2:d2:b4:01:43:15:4e:50:e4:95:d8:8c:
cc:32:1a:14:61:24:e3:e6:68:29:0d:d0:84:4a:e4:
9e:79:77:b1:bb:58:4b:a4:9c:23:90:55:b2:7d:20:
92:99:f5:f7:dc:65:41:99:ba:4a:a6:71:67:6c:41:
2f:c0:99:fe:24:1b:db:a7:d9:a1:e9:00:33:d0:b4:
be:b2:df:8f:1a:4d:5e:3b:db:c6:28:16:2a:67:79:
1c:24:45:0e:55:2f:c1:18:ce:f4:ea:94:5a:6b:77:
cc:48:5f:27:70:04:21:ef:05:e9:d6:c2:7b:80:32:
ea:05:e4:dd:19:77:8a:95:f3:92:fc:69:10:ef:80:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:34:FB:33:D4:85:C7:F5:57:91:24:F6:70:76:02:31:24:CA:02:67
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f9:8a:b7:7a:b7:09:7f:11:65:9c:a5:6b:43:08:bb:81:36:
46:76:ae:82:d0:7f:f9:b8:f3:a5:6f:1e:b5:71:c7:86:1f:d1:
19:e8:7d:f9:1b:73:2f:f9:9d:63:d1:36:4f:49:c0:ae:3e:fa:
6d:7f:4b:9b:55:66:d2:40:00:ec:3f:e6:86:86:03:fa:fc:eb:
cf:52:a0:6f:38:4d:98:a3:b4:17:78:97:e4:70:0c:70:d7:af:
c0:93:9d:6b:ce:61:6e:13:91:0b:c5:4d:b1:d2:82:7d:13:b5:
6a:41:c7:06:dc:08:29:f2:63:f6:8d:d6:f7:14:48:3c:57:bf:
32:c4:64:6e:dd:6d:54:9e:8c:78:78:de:a5:7e:0c:45:6d:a3:
bb:59:6a:ab:c0:bf:4e:a0:96:30:32:f4:28:9c:a0:2f:4b:85:
75:10:a8:e2:5b:7a:4c:0f:e5:bc:30:70:40:6d:95:da:69:27:
33:a5:2a:c5:b8:37:88:47:5d:c6:1c:2d:3c:e1:4b:86:7e:95:
29:d3:8a:0a:8e:fd:b9:cd:80:e9:e1:68:b1:59:ea:99:f1:74:
a7:07:85:d9:82:84:c6:10:5c:e9:96:96:19:42:a4:74:d0:bd:
d4:9b:75:94:49:01:db:fa:d3:10:8b:fd:ca:f6:1a:48:01:69:
2a:2e:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:29 2026 by rpki-client