Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
File: cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft (raw, json)
Hash identifier: 7c5P9367Vlde2jzv+SG1zJ8trxBGpopxlGxbFmNB0hM=
Subject key identifier: AC:E7:65:8C:13:11:0C:64:E9:E1:9B:29:FA:12:CE:E6:08:16:E6:4E
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019D99D06F400BEB3F47E8DE894A5BEEC832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
Manifest number: 150B
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl (hash: 2iX/HJ1GiisSJ0DttRsu85+EHCxnh58OYJLUyWFV/GQ=)
2: fb3NlfyiI12-2naS91KzEXDuLcM.roa (hash: xFi8qis3wYM7XGFa9w0jwhmsTCg5KkrRoqZqwdJaBxs=)
3: lbi2EEOv7Zrhga3le8zAYXKzasA.roa (hash: cxSzMHs1P7K5DFoalN/ZGFsw0iciyI3MRqOB+G9rhGs=)
4: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (hash: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE=)
5: ugJS22ubb1YAQxxSrPhzSyT4d4g.roa (hash: SMm0KdkJcDZcOqPotbm0PXIQqsivUC/ILvOz2gqm9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6f:40:0b:eb:3f:47:e8:de:89:4a:5b:ee:c8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=ace7658c13110c64e9e19b29fa12cee60816e64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:96:dd:dd:3f:97:bc:fb:d9:87:12:c4:48:
fc:13:2b:f8:84:1c:5c:1b:7f:31:49:5e:78:45:ce:
dc:37:ee:df:1e:79:f1:6a:59:c1:cb:14:6f:c7:35:
31:aa:5f:d7:82:b0:1e:ac:ae:63:c1:27:01:c0:75:
83:5b:71:8d:b8:13:cd:fd:19:34:32:8e:62:5f:b8:
c3:da:52:7a:df:b3:54:54:20:96:f5:f1:50:24:cd:
21:fa:30:da:f0:4e:e9:f7:2c:9b:0e:9c:be:ff:73:
e9:bf:39:4b:9f:5a:95:bc:74:77:b1:ce:3b:a8:97:
25:00:07:6a:2c:ed:4d:46:5c:54:ab:1b:87:dc:e7:
5b:82:e8:95:11:ad:05:ed:fb:26:7e:25:90:62:44:
4e:54:ff:1d:e4:4d:33:f0:15:08:b5:76:d3:20:a0:
23:44:8a:05:fe:3e:77:3b:c5:c3:01:f2:0e:20:5f:
c9:50:a9:63:b4:3b:f0:d1:d5:2f:0b:bc:0a:99:f0:
fe:c5:cd:cc:9d:42:92:78:58:e3:af:50:a7:e7:7d:
7f:2a:1e:64:a5:86:51:09:f7:01:fd:7b:5b:0e:ea:
a5:51:05:fb:a2:89:fc:ed:68:60:64:ab:b2:7d:eb:
4f:68:38:3b:8f:7e:a8:94:98:a2:69:82:fe:e0:3e:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:65:8C:13:11:0C:64:E9:E1:9B:29:FA:12:CE:E6:08:16:E6:4E
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5d:bf:74:bc:33:87:9a:e9:30:f8:ca:7a:f4:70:90:16:97:
ef:33:c2:90:5a:96:6b:f9:1e:70:32:5e:f2:a4:37:c1:4d:14:
6d:98:ca:0a:30:44:eb:d3:0b:d9:37:1e:91:76:bd:b0:61:58:
e1:e7:2c:6e:b6:96:f3:9d:b9:2d:64:32:ce:3f:c6:e3:d2:ba:
8b:16:e0:b4:b8:53:58:be:5a:42:b3:c0:ac:23:f9:b7:9c:49:
35:36:5f:53:b9:81:e9:c6:68:ad:c3:65:e0:38:c4:bb:5c:27:
07:db:5a:6c:d5:a7:b3:59:c4:5f:67:f8:c8:df:ac:2c:79:15:
56:3d:29:70:dc:19:80:d6:69:e8:86:5e:65:f5:1c:e9:aa:a6:
51:43:43:55:f2:08:67:70:43:bb:44:c6:84:dc:1d:55:5a:a8:
c8:e6:e6:48:e7:05:eb:f7:66:a0:68:bc:bc:d6:73:3b:c0:59:
5a:ea:79:db:37:45:46:90:2d:de:c8:9c:ee:7b:ce:f4:a5:1c:
bb:61:27:ea:1f:2a:b7:f4:61:b1:39:0e:02:f1:84:a3:6d:33:
06:49:44:dc:3c:a2:15:46:4a:22:fd:d5:a0:1c:8a:c6:68:e4:
e2:d2:e4:87:a1:e0:f5:5a:a4:92:e6:89:67:f0:6b:ee:84:17:
22:2d:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:49 2026 by rpki-client