Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: jcFWyEygvzMcCqa9IgH/Ob0AaXrJXGDG51hQEi74pZ0=
Subject key identifier: 63:5C:0F:DB:C7:79:05:64:E6:F1:90:0B:16:50:D5:50:45:7C:FF:22
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019E1E6C5430A6293BD9BE8FCB033DB3E598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 23:01:16 +0000
Manifest this update: Tue 12 May 2026 23:01:16 +0000
Manifest next update: Wed 13 May 2026 23:01:16 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: Kx/Ox/1LWzzqZr9YR6gGqprEDdJmb94ijIslYUQUJ1w=)
2: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
3: R-jquJ8tPgdX2hMBpuIObNqROCE.asa (hash: /pp7yPdgOzqXU/03x41XGhPjeuP0jNCBbcWtApFlL0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:54:30:a6:29:3b:d9:be:8f:cb:03:3d:b3:e5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: May 12 23:01:16 2026 GMT
Not After : May 13 23:01:16 2026 GMT
Subject: CN=635c0fdbc7790564e6f1900b1650d550457cff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:25:92:0e:8a:d1:24:6c:94:88:bd:49:6f:
7e:73:8b:3a:52:1b:7c:5a:ff:67:b4:9f:af:9d:88:
39:7d:0f:f1:c9:a9:09:b6:f9:fa:32:b5:82:4b:2b:
f7:6a:09:1a:9d:65:c2:84:7c:bd:c2:0c:90:1d:4b:
94:be:81:36:60:61:98:12:7d:28:af:e7:98:7a:15:
c0:fc:0b:8f:d0:85:4f:b1:e0:f4:fa:55:10:d4:3f:
1a:9e:ac:22:7b:ea:91:71:cf:32:d5:55:dd:46:6a:
c7:cb:58:3b:e7:80:aa:d4:7e:4c:57:78:1e:c4:6d:
f5:e8:4d:f8:ba:dd:9e:d1:32:3c:5c:0a:96:99:5d:
f9:c8:a3:d6:3d:40:b2:11:11:f6:15:9a:38:50:8c:
00:2b:2c:db:0a:34:c7:dd:25:49:c2:b7:a4:2a:e3:
8c:6c:68:dc:d1:bb:63:99:72:94:07:45:cc:2e:aa:
6c:9e:ea:d9:d3:5e:a3:67:d6:8b:37:d0:d4:ea:f4:
72:2b:b3:9c:6c:62:b4:32:a1:51:73:61:23:18:a1:
9d:df:c8:2a:e1:8f:71:38:51:d4:68:82:39:33:1f:
15:d5:52:ac:e2:9e:a5:fb:ae:b3:5c:bf:f1:67:9c:
c9:02:25:79:76:01:37:9e:df:29:74:dd:27:58:7d:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5C:0F:DB:C7:79:05:64:E6:F1:90:0B:16:50:D5:50:45:7C:FF:22
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:c8:f6:00:4c:9a:dc:b7:a9:a1:af:e1:62:62:b4:43:be:
7b:ad:3b:85:50:7f:79:f9:d9:8c:98:11:28:81:e5:5f:31:36:
29:e7:b2:ce:07:d2:95:24:6d:61:b1:04:b2:09:cd:af:47:40:
c3:55:96:c6:f0:37:f7:ec:d5:5f:1e:3a:36:38:45:68:06:50:
91:fe:c4:96:9b:13:73:9b:9d:bf:7e:e7:e4:e4:66:c3:31:ec:
b3:0a:18:b3:1a:6d:52:ed:c6:cf:5c:42:01:fa:71:75:f5:80:
6c:73:63:3b:17:b3:5f:7c:0d:0b:2b:a5:82:21:2c:16:8b:20:
8d:41:c6:40:ac:40:6b:1b:2b:e4:3e:76:c5:b4:f8:65:ad:f3:
1d:88:97:ad:7e:5f:ff:df:1f:bc:57:4d:eb:e2:dc:85:f2:25:
b2:d2:24:21:ba:a9:61:33:73:51:f3:28:ee:ac:8f:b1:18:85:
22:10:9b:7d:f1:e2:6b:cb:33:7f:68:3f:43:b8:25:72:89:1d:
b8:d3:aa:f3:eb:26:30:0f:72:9a:6b:a2:e9:00:af:b3:64:8b:
f9:fd:7c:63:bb:3e:ed:39:d9:91:88:75:7a:69:a5:d9:9d:23:
3c:6a:9d:ac:ab:21:b5:4b:16:38:10:ab:bf:82:cc:a6:4b:ce:
fe:bf:03:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebFQwpik72b6PywM9s+WYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmY1OTg5OWI3YWNhMzBhM2M3ZDVkYjkzYjIxMmQ5ODcw
OWM4OWIwHhcNMjYwNTEyMjMwMTE2WhcNMjYwNTEzMjMwMTE2WjAzMTEwLwYDVQQD
Eyg2MzVjMGZkYmM3NzkwNTY0ZTZmMTkwMGIxNjUwZDU1MDQ1N2NmZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBUlkg6K0SRslIi9SW9+c4s6Uht8
Wv9ntJ+vnYg5fQ/xyakJtvn6MrWCSyv3agkanWXChHy9wgyQHUuUvoE2YGGYEn0o
r+eYehXA/AuP0IVPseD0+lUQ1D8anqwie+qRcc8y1VXdRmrHy1g754Cq1H5MV3ge
xG316E34ut2e0TI8XAqWmV35yKPWPUCyERH2FZo4UIwAKyzbCjTH3SVJwrekKuOM
bGjc0btjmXKUB0XMLqpsnurZ016jZ9aLN9DU6vRyK7OcbGK0MqFRc2EjGKGd38gq
4Y9xOFHUaII5Mx8V1VKs4p6l+66zXL/xZ5zJAiV5dgE3nt8pdN0nWH2vPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNcD9vHeQVk5vGQCxZQ1VBFfP8iMB8GA1UdIwQY
MBaAFAi/WYmbesowo8fV25OyEtmHCcibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZTE2NzctZDkyNy00NGM2LWE5MDkt
M2IyYjUxYTVlM2RhLzEvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZTE2NzctZDkyNy00NGM2LWE5MDktM2IyYjUxYTVlM2Rh
LzEvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGXI9gBM
mty3qaGv4WJitEO+e607hVB/efnZjJgRKIHlXzE2KeeyzgfSlSRtYbEEsgnNr0dA
w1WWxvA39+zVXx46NjhFaAZQkf7ElpsTc5udv37n5ORmwzHsswoYsxptUu3Gz1xC
AfpxdfWAbHNjOxezX3wNCyulgiEsFosgjUHGQKxAaxsr5D52xbT4Za3zHYiXrX5f
/98fvFdN6+LchfIlstIkIbqpYTNzUfMo7qyPsRiFIhCbffHia8szf2g/Q7glcokd
uNOq8+smMA9ymmui6QCvs2SL+f18Y7s+7TnZkYh1emml2Z0jPGqdrKshtUsWOBCr
v4LMpkvO/r8DCw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:34:04 2026 by rpki-client