Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: 3jGAxN6r5QxnkMRHE2/WE/pSB70weCU8XJYSjgKr0JY=
Subject key identifier: DF:A7:41:A3:90:E0:CA:94:62:46:36:71:0E:A1:3A:98:69:E1:16:7E
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019F9437721E665059C820C5EA8064F4190C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: +/hbEjV560C/g4n2vR5rjDGSL4HfoLZogXRbMzenvlg=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:72:1e:66:50:59:c8:20:c5:ea:80:64:f4:19:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=dfa741a390e0ca94624636710ea13a9869e1167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:6f:b9:65:45:d4:a3:75:fb:de:9c:54:f1:
33:d2:76:5f:14:c1:46:52:4b:6c:97:9b:8e:0c:d7:
a3:dd:fa:9a:25:cd:96:0d:80:7b:a9:18:5d:d9:f0:
74:ab:fa:01:d7:6a:1d:ae:53:68:43:47:eb:da:9a:
4f:51:6a:e4:3d:69:a2:bd:73:63:49:76:e8:07:25:
c6:2c:21:6a:67:e3:a6:d0:6d:ce:f1:f0:d6:f7:60:
49:fb:1a:23:40:b7:00:54:ae:7f:48:18:cb:25:45:
71:25:d1:54:14:d0:d5:76:30:1a:9f:c3:21:76:38:
50:e2:ef:70:16:e7:f7:2d:df:64:53:17:38:7b:ac:
7e:9d:d2:6d:53:aa:57:a1:43:63:8d:71:62:88:f7:
76:f1:7d:b2:c5:2f:b9:9b:dc:d9:5b:19:5c:24:00:
28:c1:56:c8:d5:c6:95:35:7b:33:ad:84:cd:f5:bb:
05:6b:11:ac:a0:a8:57:b0:03:f7:bc:47:cd:cb:2b:
35:d0:de:b9:ed:80:fc:00:de:3c:23:25:c8:0c:c1:
91:af:9e:83:65:8a:e7:65:e2:cb:b0:f6:b4:e3:72:
6d:40:0c:f4:e1:f6:fc:b4:e3:13:db:4d:22:90:17:
ed:0e:b1:ba:0e:48:f9:18:a4:37:1d:30:b3:ac:58:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:41:A3:90:E0:CA:94:62:46:36:71:0E:A1:3A:98:69:E1:16:7E
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:38:7c:cb:32:b3:96:2a:c6:35:eb:27:4c:f5:44:16:31:44:
a1:0f:84:63:87:58:39:c3:67:68:e1:13:09:5f:94:68:f1:66:
15:da:f1:87:6d:e1:cc:e4:ce:16:14:0f:f1:17:8e:19:5f:53:
d6:e6:44:69:8d:b4:1e:14:99:cb:47:63:81:b8:1b:90:0b:99:
48:5d:5b:a3:40:f7:aa:95:43:6f:59:5f:ef:e2:94:8d:7a:02:
f5:b5:95:2f:89:5f:ab:fa:f8:55:61:3c:d2:3b:cd:f3:9b:24:
4f:43:e6:50:7d:a4:16:ba:65:28:fe:fb:dd:64:e6:44:32:2b:
cd:b3:eb:43:bc:9c:45:25:18:a1:f6:6e:b9:dc:94:05:c0:73:
f9:82:1c:c3:7a:80:f0:fc:11:29:25:e7:d0:3b:77:17:bb:63:
4c:e3:84:1f:92:6c:44:0b:c7:5c:4c:4e:b3:a0:0b:4d:67:42:
ae:b1:6d:9e:56:17:1f:4a:da:c1:3d:9d:3e:41:65:aa:e0:19:
6b:26:6e:94:54:7f:f4:08:1e:6c:4f:bd:d7:68:29:90:ea:b8:
a6:60:ef:e9:87:21:4c:c7:0f:8e:72:99:8a:58:98:c5:51:89:
45:ba:df:4f:5c:74:25:c3:4d:5b:73:66:69:df:4a:5f:cc:59:
e3:0e:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:46 2026 by rpki-client