Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: 1bK/N6M9DT47CuOJ9utfHw1x06ghPzN4hCXqhCv3a8g=
Subject key identifier: F5:11:E0:8D:45:A6:8D:E3:F4:BD:83:0F:B3:5B:DF:E1:D0:53:AA:89
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019D24DE839CCF877E1E0247D68586C3FEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 12:00:55 +0000
Manifest this update: Wed 25 Mar 2026 12:00:55 +0000
Manifest next update: Thu 26 Mar 2026 12:00:55 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: 6NHj7uUUfygcb4JBO+4hsaacUHA3RHKz8AgE9NARUhM=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:83:9c:cf:87:7e:1e:02:47:d6:85:86:c3:fe:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Mar 25 12:00:55 2026 GMT
Not After : Mar 26 12:00:55 2026 GMT
Subject: CN=f511e08d45a68de3f4bd830fb35bdfe1d053aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ae:f7:c8:7e:ef:fa:c8:79:bd:ab:8b:af:c4:
d4:3f:31:00:7f:a3:2e:f8:66:49:b3:90:c8:42:28:
37:3e:14:48:15:aa:06:05:92:81:17:de:99:ef:4d:
61:b3:16:b7:00:29:77:0b:d8:e3:09:1e:1b:cf:c8:
38:6a:64:9e:d5:cf:b9:bd:77:5e:40:48:62:f9:65:
5d:04:ec:e2:11:a5:7f:2f:0d:64:eb:8b:22:80:63:
86:42:ed:1a:21:04:24:95:c9:77:0f:42:5a:97:1e:
08:10:3c:91:f6:02:b5:d6:5b:bf:6c:55:63:b1:84:
26:1a:89:8d:e9:d9:ed:c0:e7:4b:f2:36:bb:1d:79:
84:1b:8b:a8:4c:bf:9e:4e:cc:d4:97:df:dc:4a:e0:
35:90:05:1a:85:b1:d1:43:92:e0:d6:eb:ec:cc:ce:
60:79:ca:b4:be:a2:ed:3b:d6:51:b9:90:37:60:04:
46:46:e2:55:8e:c3:fe:f7:7b:1d:29:6a:6d:83:ce:
89:ab:3c:fd:f1:48:98:73:07:b7:a0:30:cb:36:79:
2a:6e:25:c4:95:cd:ad:86:c6:8f:ef:14:62:b4:f0:
0e:f6:d4:a0:a6:5c:4f:32:22:3b:48:50:fe:ab:99:
15:63:f3:b0:ae:08:e4:3e:ab:89:c1:34:50:7e:79:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:E0:8D:45:A6:8D:E3:F4:BD:83:0F:B3:5B:DF:E1:D0:53:AA:89
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fc:db:9b:d3:92:df:13:ee:4b:9e:a6:f8:a1:2d:8d:79:fb:
64:03:12:f6:e2:2d:67:70:41:9b:c7:5b:3c:fd:c2:ee:97:80:
94:b7:d6:92:45:27:70:cb:95:ae:24:fd:1d:c0:7b:e7:1d:83:
0c:d9:88:d9:9b:e1:0e:84:f7:e6:f3:4a:fd:95:3d:88:a6:6d:
dd:56:5e:47:15:1d:e8:ac:67:fd:03:61:70:53:01:88:93:57:
91:e7:91:50:e2:74:cc:d5:cf:a5:8d:a0:fa:18:b9:fd:95:41:
fb:37:ed:39:db:c6:f6:34:c0:89:09:90:d0:08:47:f3:26:15:
82:41:3a:6a:0a:cc:45:b5:7a:8c:8e:bf:61:bc:46:b8:96:d9:
e5:f8:0b:3e:bc:8e:c6:03:67:05:24:71:ab:d7:7c:e4:72:c7:
6e:d1:85:ad:5a:9d:20:f2:ba:b3:25:bb:58:33:99:62:f3:b7:
ac:25:33:36:90:57:e5:60:49:23:b4:9c:c5:22:ca:ed:93:60:
18:2e:cf:da:8e:95:fc:ea:2e:22:a9:9c:29:3b:79:5c:6a:be:
fc:c0:9d:f7:e1:80:80:1a:b4:c4:01:1f:96:ed:e9:13:e7:2b:
e6:8f:ee:0a:dc:5c:5e:79:03:2d:e8:38:da:d7:ac:02:ee:22:
c2:1d:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:43 2026 by rpki-client