Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: nUNP67mVGMAfZq1Tk9hA4S2XcXQmDc8Kj6OYXu9iOkQ=
Subject key identifier: 43:54:34:D6:EE:CB:30:70:57:31:FE:78:14:7B:5D:EE:FF:1D:3F:61
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019D2584431034974EDCC9C7D07190BE9B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 15:01:58 +0000
Manifest this update: Wed 25 Mar 2026 15:01:58 +0000
Manifest next update: Thu 26 Mar 2026 15:01:58 +0000
Files and hashes: 1: 4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa (hash: dwBM8qAJmwUvx2ChQXvyI7QlD+6hPqiqi5rWx3oHZos=)
2: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: hZFJKFOVvWSqgDBOKwa+Gb6v+81blE6/kcARwk2dw7U=)
3: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:43:10:34:97:4e:dc:c9:c7:d0:71:90:be:9b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Mar 25 15:01:58 2026 GMT
Not After : Mar 26 15:01:58 2026 GMT
Subject: CN=435434d6eecb30705731fe78147b5deeff1d3f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:e8:8e:bb:f8:50:59:77:ba:48:78:83:c8:
bf:b2:78:f5:71:cb:89:e2:3d:a6:d8:ae:0c:47:08:
f2:56:8d:ef:80:f5:0c:8a:79:80:52:e1:0a:3b:2e:
35:e9:4a:7a:c6:78:b8:0e:5f:74:01:dd:6d:39:ef:
a9:14:7c:80:d8:aa:77:d6:a7:bf:3e:b6:67:06:59:
65:9c:c4:2e:6a:7e:6c:76:96:24:99:5e:3b:04:35:
f9:29:a1:46:1c:8a:9a:d1:70:90:78:e1:5a:32:19:
bf:54:9a:77:a3:03:b2:9b:b7:b5:14:5f:86:c6:f1:
11:d7:c1:75:13:74:a3:c9:b9:38:69:68:f0:89:bb:
60:8a:ef:0e:ba:aa:9a:bd:67:14:4d:3a:df:f7:f8:
d7:c7:e5:03:0b:85:cf:73:ee:24:2b:c4:13:98:cf:
02:c7:7a:1d:b3:97:48:0f:9d:23:7c:62:3a:8f:b3:
8e:70:6d:f2:67:e5:5a:1d:f7:79:9b:6b:85:d6:02:
24:70:e3:73:10:99:56:d2:1f:16:63:f8:4d:c5:7a:
7c:a6:ef:d8:3c:81:89:eb:c9:9b:61:05:c9:5e:ff:
5e:f0:9b:f3:c3:07:67:75:86:db:9f:bf:c2:2b:9d:
6a:b3:45:04:e4:45:67:24:4b:a5:15:a7:57:75:24:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:34:D6:EE:CB:30:70:57:31:FE:78:14:7B:5D:EE:FF:1D:3F:61
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:96:e5:d8:69:37:81:01:42:bc:bd:6b:d7:8f:ea:48:21:2d:
f2:fc:e9:23:92:f2:8d:44:c8:63:75:a9:c1:e4:12:ea:c4:06:
c2:f4:29:98:1d:d7:d7:0d:44:45:7b:82:c2:73:d1:df:30:65:
db:7b:a3:5a:57:8a:45:38:20:83:14:bb:46:83:a0:3c:6b:ea:
8c:9f:ad:38:fe:68:db:91:21:5e:c2:0a:2f:09:92:f2:af:8d:
b2:65:e7:af:ba:ef:ae:0d:cd:d9:39:ec:7a:0b:bf:b4:71:a6:
30:85:d9:31:dc:86:74:e1:fc:b6:0b:ad:44:5c:1c:f8:c5:c0:
57:97:08:20:2d:b7:8d:95:04:73:8c:bc:7d:ed:d5:75:e7:af:
80:fb:57:e6:65:68:5a:a9:ff:0b:e5:6b:2f:c1:88:12:b5:64:
95:f7:69:76:4c:37:5e:7e:07:e6:9d:d8:af:4f:91:11:10:9d:
9c:47:5f:12:08:b1:ad:df:8f:41:48:66:6e:68:fc:e8:3b:4f:
46:c5:e1:9e:48:a9:66:8a:28:f3:fc:46:b5:07:96:6c:0f:60:
dc:c3:64:2f:5b:79:a4:fc:68:99:41:18:37:b7:53:dd:50:5c:
d8:76:90:22:f2:61:ce:75:4d:e7:c9:1e:0f:61:40:42:37:1a:
e3:8b:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:40 2026 by rpki-client