Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: aNf3ShE69TDKbSicNDbCCwQGefobajfnDgFGmC2rTbw=
Subject key identifier: 3C:06:0B:BB:CB:89:2A:8F:93:A1:1A:68:A7:EC:E2:F5:59:E3:93:E0
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 019F8F4758D1A4D86C105DE28D5F64A364B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 14:00:45 +0000
Manifest this update: Thu 23 Jul 2026 14:00:45 +0000
Manifest next update: Fri 24 Jul 2026 14:00:45 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: 8lWB2VKU8ZCUl/NCQ8tjo7+SjEdUqAct89O4SPcSeWU=)
2: IzKLl8rsyApu-A00RSExE5h1TOI.roa (hash: qDnHohfWZ5jnRSQUPq/XpCYzaTr2MjT2NSY5X2wK03Q=)
3: R-jquJ8tPgdX2hMBpuIObNqROCE.asa (hash: /pp7yPdgOzqXU/03x41XGhPjeuP0jNCBbcWtApFlL0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:58:d1:a4:d8:6c:10:5d:e2:8d:5f:64:a3:64:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jul 23 14:00:45 2026 GMT
Not After : Jul 24 14:00:45 2026 GMT
Subject: CN=3c060bbbcb892a8f93a11a68a7ece2f559e393e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:43:7b:6f:7e:5b:29:c4:38:1a:40:3d:d3:
45:cb:20:b8:e7:2a:1a:3d:6f:2e:08:8b:e5:fb:3b:
19:58:d7:22:63:a4:0b:cf:66:f3:56:1a:e1:52:fb:
a7:d4:9d:2b:dd:53:88:82:ba:4b:19:74:20:30:a1:
79:60:66:31:5a:ee:83:44:95:71:34:87:fe:9e:d0:
38:15:05:32:4e:c0:ed:8b:e7:43:e3:8d:d8:5e:44:
b8:1b:86:f0:ea:df:63:e5:4b:b5:69:0a:ec:1c:48:
2e:82:46:73:6c:57:5c:1a:eb:4e:9d:7f:b9:9e:ff:
0c:9b:3a:f9:a9:bc:56:eb:f7:79:26:35:b8:05:66:
61:57:5b:47:88:33:c3:fc:c1:39:07:46:b7:a0:3d:
9c:41:ae:9d:01:47:9a:c9:2a:7e:98:cc:66:ad:7a:
e0:17:a8:1f:fe:64:d6:91:3f:94:76:af:0d:6d:0c:
b7:ec:05:4b:65:f1:f5:d1:47:a2:10:83:f1:49:92:
bc:a5:3a:82:de:0f:11:99:76:97:d0:76:c9:5f:2a:
4d:12:5a:df:39:4a:d4:b2:23:13:be:85:8b:13:7a:
9b:25:4f:c2:fe:76:8a:13:10:e0:7b:a5:99:5e:7b:
1b:3f:8d:cc:bc:be:32:b2:07:d2:06:b9:83:48:e5:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:0B:BB:CB:89:2A:8F:93:A1:1A:68:A7:EC:E2:F5:59:E3:93:E0
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:39:6f:ae:1e:c7:67:be:f7:7e:c9:78:bf:7e:28:c4:a4:
56:da:4b:03:6e:b6:04:92:f6:95:14:6b:f7:71:77:cb:0e:a5:
c2:55:fc:8d:29:7a:bc:10:e9:d0:1c:09:0e:b2:b2:0d:38:36:
fe:13:49:9d:82:ff:d7:46:4e:5a:d9:ef:1c:df:61:b6:b1:73:
65:2e:4f:60:0a:44:6e:5a:98:72:de:ad:77:56:f6:bc:99:aa:
4c:f0:19:80:72:27:31:b3:89:75:88:a4:f0:6a:28:dd:14:ef:
f2:f5:6f:aa:8f:db:e5:f7:35:b2:cf:fb:1f:97:2a:62:16:86:
ef:14:3e:bc:85:98:a3:4e:0b:ac:98:42:35:f5:36:38:32:6c:
4c:bf:f6:02:b6:90:94:08:4a:8f:74:0e:e3:11:7f:1e:f7:eb:
e9:42:cf:50:ea:ef:e5:d8:b4:7a:c1:f9:48:55:ce:f7:3e:6b:
3e:93:26:8c:3f:e6:8d:fb:a5:74:50:e2:f3:1a:74:7b:e1:fd:
67:55:1c:0b:d9:71:42:17:07:08:3a:e2:5f:d3:a8:44:64:7d:
f0:e2:5a:e9:58:9d:bc:4e:3c:85:02:6f:c1:32:79:07:ed:92:
8b:65:30:34:1b:13:40:20:44:d2:16:57:b6:8a:ad:89:13:89:
88:53:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:42 2026 by rpki-client