Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: 8P+pVPEovReZ5apC9azHBV7yWAe2ddhJiOfNGL2ecCU=
Subject key identifier: 0C:73:41:87:87:93:9D:E8:0A:E7:0B:55:93:61:7B:AA:08:92:42:CB
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 01A0C9A26F42B992C45E95231CAF2011CDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 15:01:00 +0000
Manifest this update: Tue 22 Sep 2026 15:01:00 +0000
Manifest next update: Wed 23 Sep 2026 15:01:00 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: 8qYCY0i5usZJQ5mqDW04/Rn8b2QMrNo90le5MNrv8AI=)
2: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
3: ulaKHTP3c5tBZDHemkuSbOt6KAY.asa (hash: uz4BenAV5XeIkrt6XX4i5cH6l4ldBgJse/iswU0CJ6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:6f:42:b9:92:c4:5e:95:23:1c:af:20:11:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Sep 22 15:01:00 2026 GMT
Not After : Sep 23 15:01:00 2026 GMT
Subject: CN=0c73418787939de80ae70b5593617baa089242cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:6f:68:8a:e0:35:01:f7:66:b8:60:3b:50:
13:fe:62:3a:c7:e3:ad:3f:63:ea:b8:88:0e:57:fd:
6c:98:ad:31:fb:90:85:4a:9b:b3:7b:18:38:43:e0:
d9:83:b1:0c:60:54:d8:9d:80:ea:a0:20:56:08:a0:
a0:30:73:10:10:e2:a7:03:3f:17:01:43:2b:44:ee:
7c:04:c4:07:79:1c:4b:6f:2a:fe:16:ba:d5:32:ce:
05:cb:e2:9e:db:ae:7c:3d:64:10:53:7b:19:33:a7:
19:51:d6:44:52:c9:a2:e0:17:c8:d9:d7:40:aa:ba:
c1:ab:a6:9a:dc:55:df:ac:9b:9d:e8:a9:29:13:60:
73:15:67:8f:7a:25:79:af:0f:bc:c0:e4:1c:96:56:
96:ac:b4:18:df:1c:e2:81:f2:2a:0f:f6:2b:7d:62:
6c:78:90:02:de:29:ab:00:59:bc:8c:50:7d:e5:2c:
b9:0c:af:1b:df:ed:03:73:be:93:a3:0d:80:b9:b7:
81:76:40:e9:d4:01:fb:68:d1:7a:6e:fe:bc:99:f5:
83:a5:8b:93:62:5f:d6:5f:5d:85:19:45:0d:93:65:
90:4b:13:77:d7:e7:c8:75:33:2f:9f:5c:20:4d:12:
35:65:09:97:10:cd:42:21:47:1a:46:7d:b0:f8:40:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:41:87:87:93:9D:E8:0A:E7:0B:55:93:61:7B:AA:08:92:42:CB
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:18:46:7d:90:10:f3:6d:9e:57:89:50:96:09:93:42:09:c5:
03:db:0f:d4:f0:de:e5:ff:cc:ed:6f:b3:05:23:14:ba:b5:ed:
50:3a:5e:ee:d8:40:c7:b0:46:36:49:97:22:89:7c:ed:bb:8a:
91:1c:86:e0:6a:4d:78:a9:4a:a8:af:3e:77:36:87:d7:2f:d5:
33:45:35:89:10:25:7d:9f:9e:ef:8f:f3:a6:07:2f:f7:83:64:
dd:01:4a:91:34:13:1c:a2:8f:5b:87:90:e9:b1:0c:f6:e0:30:
09:a8:ca:37:14:dd:cc:ae:b7:87:2f:00:6b:52:fc:a5:e1:6f:
8d:cb:b2:c3:73:8e:61:7a:a1:c4:f9:e4:84:08:48:cb:bd:43:
6a:46:2c:3a:41:67:6e:fe:e6:47:90:29:6b:34:6f:ef:12:5a:
a2:f3:25:9f:17:d4:ff:31:3b:18:27:5b:f2:e7:21:dd:90:c9:
4e:ab:2d:f9:30:36:16:b2:fa:f4:b0:71:04:a6:15:7a:f8:76:
c0:cd:5c:b8:d8:53:84:48:f9:24:65:13:84:3f:8d:a5:68:6f:
4f:db:44:03:1b:4c:73:30:20:71:5d:6e:9a:0d:82:0d:66:24:
5f:89:2a:84:96:07:35:00:ae:92:01:5b:a7:7e:db:18:74:14:
85:14:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:57 2026 by rpki-client