Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: RWzmeiHSpEXKMaAAmeCiqQ6HEn9CeHa532ih+nElc0o=
Subject key identifier: 45:84:26:37:EF:8C:A1:FA:48:BD:D1:DE:20:5A:D7:1A:80:8B:AD:F7
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019D28166AAE809E240C683CE9976B5E647F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: JtWVDMcPZZD4dV+NCs9TR309jYiWWtTjuLYQjwiJHfQ=)
3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6a:ae:80:9e:24:0c:68:3c:e9:97:6b:5e:64:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=45842637ef8ca1fa48bdd1de205ad71a808badf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:f9:ad:0b:42:a4:bf:ba:cd:f7:00:e5:00:
86:1d:15:ee:40:4a:75:36:96:25:fb:44:61:6e:52:
0c:0f:96:33:28:60:a3:b7:88:bb:cd:36:70:89:df:
dc:52:d2:9e:2a:49:b6:06:ae:19:ef:1b:7c:35:5f:
63:17:19:bb:d6:a7:fd:d4:90:68:63:69:64:7c:96:
c9:f2:7e:a2:8a:6e:ff:cb:9d:fe:e1:4d:45:89:d5:
b7:bf:26:d3:70:17:8b:ff:ab:83:a7:83:05:21:dd:
be:54:98:24:5e:33:22:13:db:c2:3c:2b:f5:12:c7:
99:31:cd:81:7f:bc:f3:f9:62:77:55:b6:12:82:14:
28:a9:65:d7:c5:55:16:e0:b3:38:d8:9d:48:30:4c:
ce:18:9c:3e:cd:23:c6:11:f1:cc:0f:27:98:2e:7a:
f7:28:8e:e7:c2:d1:5b:58:88:2a:12:dc:ca:e1:5e:
52:ce:54:17:97:70:f7:1a:46:6b:86:35:3b:bf:9c:
e0:34:40:b1:87:a8:9c:ca:f9:88:28:38:fe:bd:61:
8e:61:64:87:b7:e9:be:b0:b2:e1:e7:ba:80:5b:0d:
a0:9a:72:ce:30:6c:c4:d3:5e:02:01:d6:1b:2f:aa:
74:5c:8c:65:6f:10:76:00:54:e2:29:ee:f7:24:4b:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:26:37:EF:8C:A1:FA:48:BD:D1:DE:20:5A:D7:1A:80:8B:AD:F7
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d7:92:5a:16:70:35:e2:88:70:d8:ed:b7:67:13:dd:2e:0a:
00:5c:dc:61:d6:4d:91:6f:17:c1:04:2c:d7:7d:88:64:c0:d7:
9d:9a:69:09:77:19:0b:d2:ee:78:5f:36:cc:10:a0:f8:98:21:
44:88:e3:87:c3:db:8a:f8:ac:1a:1d:8e:d0:08:cf:f2:3d:c3:
67:83:21:d4:d7:b7:24:d0:43:12:0a:72:6d:3d:b8:f9:26:4e:
42:96:67:8e:1e:af:21:cb:91:22:87:6a:f9:f5:a7:e2:52:79:
22:9b:e4:0c:ce:24:32:e3:07:f3:5d:c6:1b:6a:75:b6:b2:c0:
d0:73:df:d4:08:06:ba:97:4f:ea:bb:7a:4a:e6:3d:9f:83:71:
4a:a2:ee:18:fa:a4:cd:97:24:27:27:f6:d0:98:e4:bb:58:db:
53:da:f9:ec:15:7a:ab:c7:a5:0b:ac:54:76:cd:9d:67:0a:fc:
d7:e8:10:16:1f:d9:e5:7e:43:8b:6a:59:0a:05:25:9f:2a:f5:
60:b8:ac:e5:16:c9:e6:d5:b6:08:5a:04:e9:02:cf:b1:81:20:
0b:16:f4:43:e6:f1:71:32:a6:f4:a3:34:d5:be:d9:03:9c:a5:
9e:1c:b2:7c:39:29:8c:8f:a2:b9:94:7f:63:78:8d:a4:5a:22:
8b:3f:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:58 2026 by rpki-client