Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: 8Xn/iG1d0jQ17vvxpOWVaE1na6zZzv1gD8fJHifgygo=
Subject key identifier: 04:2F:C1:8E:62:4F:9C:A3:78:8C:28:0C:1B:9F:4C:40:53:C1:A8:76
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019E1F7F829F3387F3FA842D73E71157EAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 04:01:50 +0000
Manifest this update: Wed 13 May 2026 04:01:50 +0000
Manifest next update: Thu 14 May 2026 04:01:50 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: OLMOI9k9lnksesQ+BQ+pz/C5rB4oTO5bj/x4p3VCWac=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:82:9f:33:87:f3:fa:84:2d:73:e7:11:57:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: May 13 04:01:50 2026 GMT
Not After : May 14 04:01:50 2026 GMT
Subject: CN=042fc18e624f9ca3788c280c1b9f4c4053c1a876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:cf:d4:80:c8:d0:8e:97:6f:f5:c9:95:a0:
ad:5e:2c:9f:5f:d2:93:63:57:8f:2c:5a:58:51:4f:
55:5e:dd:eb:d8:20:01:48:40:6a:62:a3:48:af:de:
31:13:7f:2e:43:46:66:07:8d:79:61:ff:7f:fe:f1:
0f:cb:3a:66:2a:b0:c5:29:a8:4f:ee:e1:38:64:0b:
af:c4:6a:bb:09:e8:9d:f6:14:a7:a9:15:f2:ee:89:
60:21:3a:86:9b:19:cf:0c:2b:fd:2b:e0:e6:4c:13:
ef:b6:62:17:e7:37:e2:60:c0:b3:08:ea:30:82:e7:
56:c4:cb:84:96:9f:34:8f:10:88:c7:63:8b:f2:f8:
dd:69:b2:2d:2e:09:cb:fb:dc:fa:33:84:c7:90:05:
d8:1c:08:c3:e9:d8:1a:b6:ec:16:f7:53:9f:50:4b:
df:3e:bb:7c:0c:e8:0f:58:01:be:4b:ca:30:15:fa:
d4:7c:03:06:74:b6:a1:3d:b8:8e:6d:1e:a6:83:bf:
a2:ea:a8:b9:ca:de:ec:18:69:b0:11:f4:37:4c:3c:
58:0e:82:02:09:c1:e1:6a:10:17:63:bb:16:53:c1:
4a:aa:aa:36:95:ec:f1:bc:71:81:6f:c6:14:88:64:
cf:46:c7:82:f9:93:22:c7:d8:79:1e:31:ae:9f:88:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:C1:8E:62:4F:9C:A3:78:8C:28:0C:1B:9F:4C:40:53:C1:A8:76
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:92:f2:5a:68:1e:b2:ec:32:45:f1:96:ca:24:ed:61:80:
d7:bb:2b:e4:ac:81:55:a5:20:f3:71:b3:69:08:e7:61:f4:3d:
a4:d3:e6:5c:2e:2d:08:72:07:04:16:64:64:b4:19:4e:a5:26:
27:ba:76:22:48:a8:69:59:33:17:f3:e2:fd:30:9f:d1:97:02:
54:f3:b3:3f:49:62:b2:0e:b5:f1:1d:75:be:cd:41:f1:fd:6e:
88:24:f5:a0:96:47:fe:da:7a:73:61:ad:20:76:9a:fe:d8:bd:
98:c6:3d:98:94:78:d5:3f:f8:5e:1f:58:28:b7:7e:8a:28:90:
57:c8:a3:d4:8e:81:60:ca:03:9b:b2:c2:42:76:b6:09:b1:4a:
e5:fb:64:36:ca:bb:45:69:82:21:ad:92:18:a7:dc:f2:4e:9c:
22:48:d7:e1:57:e8:93:fa:f5:b6:fe:f3:44:78:8e:bd:f0:07:
01:6a:4c:68:a1:f5:f6:57:7b:5d:e5:d5:4d:c4:a4:dc:6e:9e:
d0:1f:a0:e8:79:a8:e9:49:67:38:3b:4f:76:db:03:7b:dc:7f:
64:60:0d:07:e3:5c:e0:8f:1c:4d:9d:2b:04:24:d1:39:4d:cd:
84:11:dc:4d:a5:de:5a:2f:c8:4e:2f:81:c7:47:f3:16:e5:16:
3b:9f:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:02 2026 by rpki-client