Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: kx1HeWl9K1hQGqExjVqgIPeuESn57ebUazf77/oQnqE=
Subject key identifier: 47:E6:34:42:4F:F2:DA:89:6F:28:4A:2E:B3:49:6A:73:71:DC:51:EF
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019E1C7E182D7E6CBBBB4EDF849EB23F146B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 14:01:26 +0000
Manifest this update: Tue 12 May 2026 14:01:26 +0000
Manifest next update: Wed 13 May 2026 14:01:26 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: Eom1u8j+SYUx4gaGwmOFKmfgpou0rS8cYiG+RHwNYfI=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:18:2d:7e:6c:bb:bb:4e:df:84:9e:b2:3f:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: May 12 14:01:26 2026 GMT
Not After : May 13 14:01:26 2026 GMT
Subject: CN=47e634424ff2da896f284a2eb3496a7371dc51ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:81:96:71:bc:a1:1f:6e:3a:91:63:58:ed:
44:c3:c3:46:a6:7f:82:53:af:46:0b:fc:dc:ea:53:
e8:21:88:d4:95:95:39:f6:cd:9d:4a:0a:c3:3c:43:
2b:1b:0a:17:94:30:a7:93:12:52:52:ab:cb:1e:95:
ff:83:08:d9:d1:bd:56:6e:5e:11:2a:5c:c6:07:7d:
6b:84:75:85:99:9f:36:b7:22:b2:e8:84:75:c2:d3:
67:42:d4:62:0a:a3:3b:b5:21:00:b2:d1:4d:e4:5b:
7f:6f:13:3b:9c:a5:a1:15:a3:a0:9c:fc:17:f0:c7:
09:59:6c:9a:9f:8a:ec:12:d1:ec:ce:39:a9:b5:e7:
a6:dc:c0:d3:f5:43:f4:0f:77:94:1b:95:ae:7f:64:
1a:77:01:3c:6d:cc:85:d5:e6:f4:ed:ab:38:13:d6:
72:0c:c3:4b:1e:48:52:f4:10:a5:e9:62:a3:19:4d:
bc:fd:9f:f3:ce:39:af:fb:5c:69:3b:dd:a0:c7:8f:
51:ae:62:0e:c1:f9:85:f5:58:4d:cd:20:3f:07:58:
e8:27:ae:52:ec:d6:5a:7e:a4:66:af:76:d1:f3:bf:
09:95:ed:b1:1b:c1:11:ce:fe:29:30:90:01:e6:51:
18:1a:06:55:00:fa:74:48:c5:b3:0c:91:f5:9c:8d:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:34:42:4F:F2:DA:89:6F:28:4A:2E:B3:49:6A:73:71:DC:51:EF
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0b:ea:85:52:d6:12:db:d1:6c:0c:2b:20:91:1e:09:c6:6d:
01:9b:68:3a:fb:76:8a:75:3d:33:18:ba:27:fc:0b:5f:bc:f9:
7e:8b:2c:55:02:3e:c1:32:f1:b6:be:53:a3:c4:8d:b0:41:32:
a3:57:06:ba:d1:73:78:e3:9a:b6:55:07:dd:69:c9:14:19:6d:
9d:a8:ed:10:59:8b:d9:33:7b:52:e1:87:46:63:2c:96:0c:f7:
30:3f:8a:44:9d:cf:f5:cc:5e:26:9f:16:24:20:99:17:2b:22:
c3:50:6c:92:e9:60:d1:58:11:5e:79:0f:ad:53:51:a1:dc:56:
a4:4b:65:00:f0:b5:38:a4:bf:c8:40:01:f0:de:ae:46:58:a6:
f9:dd:49:5e:48:e6:0a:a6:04:f1:70:2e:8c:e8:1f:48:40:97:
bb:e1:2a:07:f3:c5:7f:0d:26:df:93:80:0e:66:09:cb:b2:a9:
23:ad:f5:40:78:5f:c4:79:ee:d0:d2:da:b4:29:55:29:83:62:
ba:5e:f0:2b:08:e1:24:38:8b:9f:28:11:fb:76:de:b2:e4:34:
45:34:54:60:bb:cd:6a:7a:8d:8b:17:c9:95:54:c1:4d:9d:64:
82:db:fd:a8:84:bc:e0:68:ea:c6:6b:ec:37:bb:12:5c:c6:9c:
00:2c:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:30 2026 by rpki-client