Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: ul74K413/9vedxWbhUd8yPJZCyK6qYwo8bDcOy4L588=
Subject key identifier: DC:1C:AD:DC:AE:D9:E2:70:AD:3B:29:F8:EB:E2:97:FB:C1:BA:75:69
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019E1DFE6DE552290249DA33B8F9568E3E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 21:01:13 +0000
Manifest this update: Tue 12 May 2026 21:01:13 +0000
Manifest next update: Wed 13 May 2026 21:01:13 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: KXGw6x6o8HX/BIQAc9rdPYno0jV5E1Os9kJbN+haIhM=)
3: xc0me2KbQgULMNxKZvuhScRUfCs.roa (hash: 1eC4dH6VriQO4HyABKFxPH4gj+O4Z05Js1S0v4IJZ4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6d:e5:52:29:02:49:da:33:b8:f9:56:8e:3e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: May 12 21:01:13 2026 GMT
Not After : May 13 21:01:13 2026 GMT
Subject: CN=dc1caddcaed9e270ad3b29f8ebe297fbc1ba7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:3b:b2:53:c4:42:6a:79:07:26:e8:f4:da:
94:2e:56:6c:bc:a5:ba:c0:b1:35:e2:03:79:1d:b9:
84:9b:e4:7f:ad:c6:5d:b5:79:5c:52:35:19:66:93:
74:6b:d2:ff:c8:7d:43:fe:e0:5d:76:7e:b8:f9:bf:
60:72:a8:bc:49:4f:83:80:60:15:7e:f7:fd:1a:41:
07:d4:54:98:db:93:8f:6b:19:08:39:d0:93:76:30:
34:c4:c6:e9:9f:64:a2:20:ff:fa:45:d4:e3:a9:41:
02:79:c7:56:02:6f:c6:06:85:4c:9e:c5:e1:d5:22:
5b:21:3e:4c:29:2c:1c:2f:7d:54:33:1d:3c:33:44:
b4:16:c7:c9:b2:3b:fd:43:5a:ef:fa:d4:c7:6d:b5:
c8:b4:2d:32:9e:46:23:50:6a:49:54:ea:6d:5d:c9:
a5:03:20:7e:3e:e8:87:8d:a8:85:65:c3:b9:93:12:
bc:af:7e:08:61:18:03:b6:49:73:d0:a3:4c:24:f3:
cb:1c:c7:1b:a5:de:06:be:5c:bd:cd:8f:10:8c:ed:
21:51:11:7f:ea:df:05:74:28:98:24:0b:73:f7:d5:
5a:c4:9a:51:d9:8e:89:1c:26:ea:7e:db:b5:9c:13:
c3:c3:9f:a5:d3:1f:86:7b:dd:f2:60:0f:73:18:bf:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:AD:DC:AE:D9:E2:70:AD:3B:29:F8:EB:E2:97:FB:C1:BA:75:69
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:6c:f5:98:73:df:4d:66:ef:28:2d:88:ca:ae:d6:28:e4:
68:2e:fc:e0:0d:9d:ab:3c:54:a2:9c:1d:f6:34:33:c8:28:73:
35:2c:fc:8c:c1:10:0d:f2:2c:59:14:f2:91:49:0b:64:4a:48:
41:6e:b9:4b:9e:3e:c6:53:b1:e3:91:b7:0a:3c:e9:b8:de:14:
e8:19:06:af:63:d2:4c:4d:3c:96:fd:b8:18:30:20:10:d9:02:
16:a6:ac:55:bb:84:85:ea:99:dd:3f:19:d2:a3:a0:65:07:e2:
a0:43:ca:92:5d:e9:8c:90:1f:7b:6f:de:34:53:b7:76:bf:e6:
f0:0a:aa:ae:c3:bd:27:c3:34:90:dd:5d:35:69:80:68:45:7b:
14:21:8d:8a:9c:e2:cb:ca:2d:ad:4b:6d:19:db:6c:8b:e6:aa:
e5:db:4e:ea:6a:65:53:61:51:f3:d9:89:06:90:d3:6c:a4:cb:
45:bc:89:6e:bd:51:df:b6:15:08:6a:ce:a7:fa:3d:9a:93:64:
16:c4:e8:65:9d:c6:3b:bc:78:97:50:f8:29:54:c2:b7:d1:8c:
b4:de:61:05:d7:c2:f1:8e:90:12:67:bf:f7:8c:6b:f4:ae:06:
ef:72:48:0f:f5:70:c3:d7:97:91:da:39:38:ac:63:28:dc:13:
19:21:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:11 2026 by rpki-client