Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: JAtz89nvhQJd9zV1QGu041H/LYNFzrtxmOq3CNAj8Ic=
Subject key identifier: 87:A4:CC:57:23:3D:37:C7:71:E8:46:3B:F9:D8:B0:ED:1F:0B:8E:7A
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019D284DDC33278CA5547F35A188CCB0B3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 04:01:24 +0000
Manifest this update: Thu 26 Mar 2026 04:01:24 +0000
Manifest next update: Fri 27 Mar 2026 04:01:24 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: IiPQgD17bc6bmE4empTADppC6OSbWqeECWhqFy/5pzw=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:dc:33:27:8c:a5:54:7f:35:a1:88:cc:b0:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 26 04:01:24 2026 GMT
Not After : Mar 27 04:01:24 2026 GMT
Subject: CN=87a4cc57233d37c771e8463bf9d8b0ed1f0b8e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:4c:d8:d3:2f:c4:6f:ce:79:84:e6:9e:fb:
13:66:34:c7:e9:6e:71:2d:f6:7c:6e:ec:57:e3:06:
ea:6e:ed:3f:73:88:df:5b:c2:f8:a2:3a:68:75:99:
65:7c:d5:65:8b:90:e0:f7:b2:cb:ba:71:9f:16:ef:
3e:50:d4:9e:f9:cb:5d:ac:9b:46:94:bd:3f:72:d2:
fd:ad:20:16:4b:f6:04:86:db:39:0a:af:50:25:42:
7d:a2:a4:15:a7:cf:74:fd:d9:d9:3e:bd:b6:7f:f6:
0d:05:8b:58:9c:8d:fc:fd:8b:64:65:3b:96:76:a6:
4c:35:99:f0:b3:40:70:c4:94:3d:e1:82:72:d1:2d:
ef:83:25:e2:58:12:6f:70:ce:6f:47:ce:d8:35:31:
d4:17:3b:be:dd:22:84:5e:a4:6c:b5:03:a6:86:a8:
0e:2a:fa:9b:49:6e:61:79:70:86:bb:25:37:d3:54:
05:21:ad:ed:31:db:7c:26:3c:6f:ff:ad:87:af:f5:
da:67:b5:d3:b3:06:40:09:69:57:e3:69:a9:d7:12:
ac:19:fd:7f:e1:66:5f:52:b7:9f:dc:fe:df:93:9e:
29:52:48:85:dc:63:92:93:1a:71:64:6a:93:01:f6:
2c:7b:78:dd:0b:80:11:24:0d:1f:ac:92:78:2b:bf:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:CC:57:23:3D:37:C7:71:E8:46:3B:F9:D8:B0:ED:1F:0B:8E:7A
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:a5:07:ab:8f:c8:d7:c9:5d:78:8e:84:c5:ce:81:7f:72:
23:5f:03:6a:1f:2b:2d:03:46:48:1d:9f:d4:60:81:7f:20:bd:
e5:ad:12:90:a2:19:f4:6f:84:56:e0:56:b2:98:cf:3b:b4:c6:
6b:9c:f5:84:c8:33:f7:3b:64:84:fc:17:da:40:9b:f0:44:68:
bb:50:07:38:d1:af:c4:20:61:13:f6:ab:92:67:6d:1b:5f:ad:
0c:ad:a5:94:22:94:82:0c:3c:5c:6d:9a:44:15:cb:16:13:fc:
39:80:a2:93:b0:42:fb:1a:28:28:57:b9:ff:16:93:18:b7:31:
94:e8:7b:a8:0e:0c:e9:fc:b0:2b:24:07:9b:f7:0c:b6:c7:31:
48:18:8f:d7:66:f9:56:da:90:09:8d:9e:4e:7c:92:81:3c:d9:
78:5a:3b:d4:b1:df:d9:6a:01:10:2e:d1:21:89:34:94:ae:2b:
4e:6f:c1:69:6c:a4:cb:3c:99:82:f4:31:92:91:93:b7:b2:c7:
46:25:43:9d:8b:68:49:2e:53:40:41:e8:d5:6f:c0:b0:87:0b:
b0:2a:e7:5c:db:4b:d8:85:3e:b0:94:ef:24:af:59:2a:bc:a6:
c2:c0:9a:e0:98:c3:ae:80:95:77:de:36:38:29:eb:df:d8:70:
fc:25:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:35 2026 by rpki-client