Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: nsTrELCrG6Tqe9Egsm4nXSVrXv93rtS9xoOdiBNaiuc=
Subject key identifier: 12:59:A1:6E:BE:44:A8:11:F7:20:62:E0:1B:C0:CB:4E:D4:F3:5F:29
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019F92485B2410665E52E4765F0E6DA637A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 04:00:43 +0000
Manifest this update: Fri 24 Jul 2026 04:00:43 +0000
Manifest next update: Sat 25 Jul 2026 04:00:43 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: +O5F7Y8CKRbBZkdc/oD+rVBcHdWz0hSxyOoCfMzWzuI=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:5b:24:10:66:5e:52:e4:76:5f:0e:6d:a6:37:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jul 24 04:00:43 2026 GMT
Not After : Jul 25 04:00:43 2026 GMT
Subject: CN=1259a16ebe44a811f72062e01bc0cb4ed4f35f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:29:ea:77:f3:15:f1:40:8a:b4:30:7b:8a:
c3:ea:e5:73:82:0b:8d:4c:28:a1:f9:68:78:a7:fe:
20:7b:fb:21:a0:b7:bd:6b:18:f5:4e:0d:16:c7:3a:
94:9e:3c:b8:b4:06:fa:ef:8e:b5:96:96:80:cc:cb:
cd:95:f4:07:b9:13:b3:4c:d3:5c:06:97:f6:b4:c7:
55:cf:b4:86:52:f9:05:1b:e5:ea:8a:7c:ad:ff:b8:
2a:a3:5f:53:78:b4:f9:70:63:e1:5f:7a:15:5a:87:
89:b2:92:cf:18:c9:39:56:80:b0:87:23:31:93:e1:
e4:00:4d:72:88:a3:71:08:0d:10:f8:31:83:3b:16:
56:07:27:28:3e:d1:ef:81:33:93:69:b5:90:f9:63:
e5:73:a8:56:ec:03:8b:ab:76:65:13:9b:90:c1:0e:
19:46:80:ee:63:61:2b:99:d2:be:54:6c:0f:f3:fc:
fb:f4:60:0d:33:53:a2:50:74:d6:43:c3:15:93:38:
85:04:da:77:78:a5:2a:06:83:e9:1d:c4:a0:92:8d:
27:8a:e2:f9:93:65:da:51:63:fe:f5:d5:9f:98:85:
0e:3a:36:95:52:5e:05:35:db:a0:f1:8d:f6:33:35:
4f:a5:35:83:02:63:ec:44:ca:de:8a:2d:7b:db:92:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:A1:6E:BE:44:A8:11:F7:20:62:E0:1B:C0:CB:4E:D4:F3:5F:29
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:7a:6c:b3:7a:99:56:ea:df:b7:c4:17:05:dd:29:34:03:
fe:52:05:17:7b:9d:3e:3a:a9:f2:54:96:c9:db:3c:fc:f5:01:
6e:76:04:8f:10:c5:1a:66:84:2b:65:61:c1:7d:83:54:f4:c8:
f7:6d:be:1c:76:fd:2a:2c:b3:32:9a:89:a2:05:6c:19:86:ac:
3d:34:c5:3a:46:9f:3b:f0:ca:3e:0c:2e:38:74:a7:19:0b:23:
54:6c:19:50:55:8e:ae:d6:9c:45:57:55:c4:95:8d:1e:56:89:
eb:b5:fb:2e:a1:72:9b:37:83:a7:f1:27:d9:39:df:7f:01:f0:
d9:9f:ca:68:52:3b:50:a9:67:2c:2c:42:80:f7:d5:f5:c6:d5:
9e:45:6f:24:24:ac:76:78:a7:c4:4e:e6:43:c7:50:bf:04:20:
f1:09:c3:74:3f:00:1d:b8:c1:02:27:a1:ea:aa:a5:cd:bd:01:
c6:f1:a5:08:cc:f0:a2:12:fc:de:02:43:b6:56:a5:4d:17:5b:
41:cb:1e:f6:31:ed:5c:ae:f4:90:e0:a9:b9:a1:a5:70:16:bf:
ae:9f:8f:dd:6d:e7:e0:2c:3d:1f:a2:64:70:5a:be:04:88:55:
02:13:22:ea:4b:83:12:8c:de:4c:e9:7f:2a:a9:20:39:cd:0e:
2b:90:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:48 2026 by rpki-client