Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: ktZIrI+8uovsqO3BzPPrKRi8SGGx3eAS1gRAgwePsXU=
Subject key identifier: 37:EC:3C:2F:B5:B5:49:1A:67:BB:25:80:D2:9B:B1:FB:2F:F3:8A:4F
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019D2A3BF8093A5A9A65DF20D6429D173C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 13:01:06 +0000
Manifest this update: Thu 26 Mar 2026 13:01:06 +0000
Manifest next update: Fri 27 Mar 2026 13:01:06 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: FliqTM1aMsn+FyYtRmZnyATrOfuUhkikb+4i33RaDjs=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:f8:09:3a:5a:9a:65:df:20:d6:42:9d:17:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 26 13:01:06 2026 GMT
Not After : Mar 27 13:01:06 2026 GMT
Subject: CN=37ec3c2fb5b5491a67bb2580d29bb1fb2ff38a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:5d:e4:2e:f0:54:39:f8:41:1a:34:93:c3:
f9:2d:47:f1:c8:d9:7c:5f:41:e6:be:71:c6:1a:81:
50:98:26:42:2a:56:db:fe:a5:9b:33:23:d4:c8:59:
02:f9:ef:4f:23:cc:0c:68:6c:0a:06:25:0b:f6:3b:
71:a1:7f:ca:82:59:0f:e8:a6:10:83:dd:3a:1f:fc:
28:04:44:60:fb:97:ef:62:7c:f9:fd:af:c1:e0:8d:
d0:93:29:b5:44:51:6b:32:a0:63:c9:7c:6d:32:8c:
5e:10:4f:9c:c7:77:4c:22:f1:df:87:77:e4:cb:b3:
ee:bf:5f:66:9e:6c:97:4b:0b:d9:c3:23:46:96:97:
27:22:df:3f:31:77:68:67:ce:00:e7:ef:66:b5:27:
cc:41:bd:8c:10:5b:16:39:5e:e1:58:e4:9a:67:0b:
74:67:e0:05:94:a3:86:1b:1c:bf:24:7f:12:7d:d5:
84:ff:75:80:f6:b8:57:c0:e5:9c:bb:0d:b9:7d:26:
26:1d:4b:cd:7c:03:48:4d:de:45:5f:61:d3:5d:e9:
9b:ed:f2:92:0a:10:f6:67:f9:1a:ed:91:a9:dc:d8:
97:a8:41:d5:1a:94:dc:29:8c:ab:ed:c7:28:e9:ab:
c8:e1:5a:34:50:27:4a:16:54:92:be:25:57:fe:14:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:3C:2F:B5:B5:49:1A:67:BB:25:80:D2:9B:B1:FB:2F:F3:8A:4F
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ac:c7:d7:ff:73:3c:8f:e5:89:33:b2:99:78:82:31:01:5d:
a4:4c:e7:35:76:30:02:24:22:08:f6:b1:1b:83:00:92:91:43:
f7:ce:b0:dd:7e:44:23:97:52:fc:cb:a7:3d:90:2e:8e:b2:61:
2b:e4:65:f3:27:35:0f:90:ee:26:a4:7e:e0:8b:8d:2e:6a:22:
f4:ae:30:27:3a:3e:2c:7a:02:70:32:21:80:61:9f:f2:c6:20:
19:a6:ff:6d:4f:38:b3:c2:35:f2:be:4a:c5:e9:d7:6b:72:3b:
4e:7d:1b:b0:d0:8c:87:4b:7a:f3:02:73:5a:03:86:e2:ff:ce:
77:11:5b:3e:da:92:b3:18:b3:17:02:8c:6f:38:55:cf:fa:c9:
b1:a0:cd:e4:d1:ef:db:50:9d:26:09:d0:7f:89:fc:22:0a:79:
8f:fe:6c:5b:e5:cd:0b:54:3f:49:32:45:34:15:5f:a1:56:f3:
96:f5:29:a5:3d:b6:d1:62:38:24:c1:78:d9:18:6b:c3:fd:cf:
58:62:27:c9:08:02:39:0b:ea:b3:93:a3:41:44:3b:a2:08:d1:
04:0d:73:3b:da:47:d7:dc:32:d2:fa:0d:1f:0e:80:e2:50:d3:
a4:05:3d:ec:cc:55:89:f1:bd:ef:98:e2:5b:0b:2d:8e:0e:0e:
70:4a:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:07 2026 by rpki-client