Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: e9MJ11j3LiGvZNXJXLTjoXOqPWMGZ+0Ls7sdYm/Bczk=
Subject key identifier: 7B:97:D3:60:E6:75:E5:BF:EA:EC:48:10:46:C6:B2:4E:4B:01:BF:20
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 01A1DFB9E3F90167C0417F1BCF96BCA8929F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 15:01:04 +0000
Manifest this update: Sun 15 Nov 2026 15:01:04 +0000
Manifest next update: Mon 16 Nov 2026 15:01:04 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: bD45CyykRC5Uw2gupX2MEdNpN/k71dFuxa6S9ls4M2g=)
2: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
3: ulaKHTP3c5tBZDHemkuSbOt6KAY.asa (hash: uz4BenAV5XeIkrt6XX4i5cH6l4ldBgJse/iswU0CJ6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:e3:f9:01:67:c0:41:7f:1b:cf:96:bc:a8:92:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Nov 15 15:01:04 2026 GMT
Not After : Nov 16 15:01:04 2026 GMT
Subject: CN=7b97d360e675e5bfeaec481046c6b24e4b01bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:e2:9c:8a:f6:c4:0e:0b:5c:4c:73:9f:d1:
64:82:ea:c8:05:74:68:6f:10:98:4f:68:cd:5c:ea:
77:64:25:9e:e3:27:aa:d1:ee:f2:86:eb:4d:26:81:
18:9a:00:b0:8b:e0:ed:a8:e2:ef:26:b7:0c:08:0e:
fd:3c:29:db:1f:99:8a:fe:12:9f:7a:ab:5c:0e:93:
74:f1:0d:c1:94:cc:18:2f:1c:a4:3d:c2:70:bd:d1:
32:e7:1e:6d:22:49:be:23:fd:dd:70:68:1b:a7:19:
d4:20:c3:da:b9:90:0d:df:38:7b:9e:00:d1:a2:03:
a0:c6:17:17:b0:2e:f4:e6:a1:0a:c5:f1:34:67:8e:
6f:f5:c1:79:33:53:73:08:c2:51:ea:6b:16:59:75:
3c:94:90:4e:88:af:2c:fa:06:50:16:47:8d:6a:a5:
43:9c:dc:92:a2:85:b7:b8:5d:4e:0e:0f:10:a2:a4:
9a:d6:14:34:93:68:99:b9:16:49:e8:cf:49:f3:0e:
5e:43:9d:80:31:4e:6f:f6:7d:c1:1d:c6:82:78:12:
60:db:b2:bc:1b:9f:18:af:58:aa:39:09:0b:fc:48:
41:9d:a8:a8:07:1e:c8:ae:44:ec:21:81:d7:29:c0:
2c:bb:bd:af:38:b2:fe:fd:77:20:86:32:93:60:c6:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:D3:60:E6:75:E5:BF:EA:EC:48:10:46:C6:B2:4E:4B:01:BF:20
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:ba:71:4b:12:11:52:2c:d3:4d:97:89:c1:15:0b:a8:74:
1a:a0:5c:23:b2:d3:fd:f6:34:14:eb:78:96:cd:55:59:ff:08:
af:bf:85:87:ad:76:b0:c8:14:11:00:f5:64:a1:ea:ee:b0:d6:
9a:18:3b:58:4b:e8:d4:57:a8:9d:05:52:0b:05:60:ec:bc:7f:
51:3e:ed:0d:c9:77:19:c0:45:46:a7:b0:4d:6e:a9:db:69:b2:
92:55:e6:78:a8:f0:cd:e8:23:b3:d5:2d:b6:e0:cb:b2:64:76:
33:3a:d7:c1:67:84:3f:62:dd:23:22:5c:95:bb:57:31:3f:be:
14:0b:67:79:f9:5d:76:45:ed:f8:1e:be:a7:10:8b:19:82:9e:
a2:86:39:47:09:39:23:c5:c4:fd:13:34:a7:4e:90:f6:68:2f:
03:72:2d:36:77:67:0f:c7:cd:9c:20:99:c9:13:37:e1:97:1a:
5f:8e:ce:27:9b:80:1c:89:19:4d:8e:2b:cf:45:d5:3f:b4:3a:
bf:e5:56:b8:df:e6:b6:a3:2b:c2:50:ec:89:29:f5:98:19:e9:
85:8c:27:4f:1c:10:b9:ec:4c:a8:d0:e0:38:b4:7b:be:99:f1:
87:91:34:50:c0:1f:a5:75:ab:e9:81:fe:0b:6c:61:e9:8d:f8:
a6:4e:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:29 2026 by rpki-client