Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: s7G6Y2JUXzyY7uIOvrytC+UwJuiBHpbruv4Hg9rqrCU=
Subject key identifier: 8C:A9:1A:A5:E9:5C:04:47:B4:DD:64:F9:63:73:F0:BC:BB:FE:E7:79
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01A0E2501C1C211DD1E0BE6362EBD92FDD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 10:01:35 +0000
Manifest this update: Sun 27 Sep 2026 10:01:35 +0000
Manifest next update: Mon 28 Sep 2026 10:01:35 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: 4SAoloT6afzQb74sIRF/GcwiRZ0FaCoI3K46bH4hRsc=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:1c:1c:21:1d:d1:e0:be:63:62:eb:d9:2f:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Sep 27 10:01:35 2026 GMT
Not After : Sep 28 10:01:35 2026 GMT
Subject: CN=8ca91aa5e95c0447b4dd64f96373f0bcbbfee779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:13:4e:7b:db:6d:58:61:4e:3a:03:d1:c5:
05:b0:fe:22:89:14:09:4a:67:a0:47:0a:5d:6a:f4:
a4:eb:4d:0e:57:8a:7c:43:72:9f:d9:cd:02:1f:38:
86:35:94:cf:b6:52:90:fc:8c:9a:cc:e4:b9:95:3f:
58:68:35:3f:a7:ff:73:13:3c:f5:f3:c4:44:bd:4e:
b4:f1:62:08:98:16:b9:c0:73:ef:42:9d:51:32:bd:
03:28:d4:c1:68:13:8c:fa:86:da:9c:9b:20:36:7c:
7a:4b:e5:b2:e0:a5:3e:ee:79:b2:6d:c7:7d:7b:29:
f4:32:c9:c3:eb:51:33:6c:f7:e1:ae:d0:41:87:87:
01:aa:16:ba:9c:66:a9:5b:2f:a4:bc:8a:44:66:d3:
3e:ce:0a:ca:00:e5:54:f3:cf:49:e0:c0:65:fc:13:
1f:07:55:74:ba:ef:0d:8f:5e:1f:35:a7:5d:57:5b:
8f:40:f0:30:a0:b1:01:06:91:7e:be:c4:c3:6b:09:
aa:f4:1f:f5:ab:21:b4:cd:99:9f:ff:c5:72:e1:67:
ee:3a:0d:fc:2b:f5:50:9d:66:a4:12:2d:1d:44:5e:
80:ed:45:00:51:c7:24:94:81:70:40:f7:09:51:29:
d9:12:32:7c:ef:92:41:8e:e3:fb:93:52:5c:b4:9d:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A9:1A:A5:E9:5C:04:47:B4:DD:64:F9:63:73:F0:BC:BB:FE:E7:79
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:71:9d:ab:07:6e:bd:05:0f:d1:9f:f3:c1:e0:a9:ef:36:e2:
78:2f:24:b8:d3:2f:0e:cf:e9:85:1a:d1:11:c7:71:9d:21:a5:
34:39:20:91:9c:74:1f:dd:96:2b:64:b1:b1:91:4f:00:d0:dc:
39:03:ff:1f:f4:b6:6a:5c:4e:bc:d6:30:d1:1a:c7:a3:a1:2f:
e8:e8:63:ce:39:50:3a:cb:7e:b5:1e:60:50:e2:c3:c5:16:99:
6e:18:18:a8:42:4f:b2:a9:90:2d:04:e2:43:4c:20:1f:7f:63:
b8:5f:06:dc:85:2e:02:23:e6:93:f5:a0:48:f3:90:a1:7a:e1:
f2:8a:e4:da:7b:ae:49:e9:5f:a3:89:d2:b8:72:fd:78:57:c6:
f6:30:a0:87:e5:de:50:05:a9:de:bd:a4:4b:a9:f2:54:d7:da:
f4:c7:60:43:29:d4:5d:b9:70:16:2c:4e:9f:c8:84:9e:65:ae:
3d:02:e5:d2:87:fa:1e:13:a8:d5:e8:41:02:b7:ea:ef:88:6c:
ff:5b:d4:b5:79:aa:da:24:7a:1f:27:22:43:ef:e9:45:3a:19:
3f:4f:1a:3e:47:87:24:3e:ec:f4:4c:fe:1e:5c:36:64:1d:a1:
6a:01:a2:fc:4f:81:5c:5a:ca:76:80:c9:c0:68:d7:75:74:17:
a3:a7:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:05:47 2026 by rpki-client