Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: 73I80lQs3ZGGQEdkiEHu2r9gs6uJwxc+hOWIHQ8TmLI=
Subject key identifier: 93:F6:2D:0F:72:68:9A:94:95:D6:93:97:C9:AA:E1:64:82:0D:93:95
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 01A0C2567A8DAD591445915284ACB3F5EC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 07CA
Signing time: Mon 21 Sep 2026 05:00:42 +0000
Manifest this update: Mon 21 Sep 2026 05:00:42 +0000
Manifest next update: Tue 22 Sep 2026 05:00:42 +0000
Files and hashes: 1: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: 1+7IJW3jq7HI9h4yVNMCPGusLfzzIbv36x07gXBJEFk=)
2: xhzE5qx5c_vKPAy0deGs6eofNZ0.roa (hash: jXZvydAfDIyrWuRlwsg2DPksah0YrS3WxzlZdKuIQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:7a:8d:ad:59:14:45:91:52:84:ac:b3:f5:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Sep 21 05:00:42 2026 GMT
Not After : Sep 22 05:00:42 2026 GMT
Subject: CN=93f62d0f72689a9495d69397c9aae164820d9395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:15:15:a9:49:6f:76:68:6c:53:f3:93:11:
cc:60:9a:7d:66:d1:33:5a:92:1b:70:4d:ea:6b:f0:
a2:6f:f7:d1:09:cc:bd:7a:42:ed:f6:b6:3f:c7:a5:
4c:5e:91:f3:17:82:e9:e9:0d:d3:ff:25:74:6c:95:
b6:1d:94:02:c2:a8:03:65:5e:38:0f:4a:37:6f:29:
42:60:f3:c2:be:97:52:06:20:e5:d6:29:3b:78:d1:
60:2c:2a:84:44:9c:71:1c:95:ce:f1:cb:90:a2:d4:
fd:7c:aa:d8:0c:0e:f9:c3:0c:a2:48:de:d1:35:28:
e2:7e:c6:17:13:3c:5c:27:71:0b:6d:1d:30:73:af:
63:c3:30:79:f0:cb:23:49:80:09:7e:2c:f8:45:9f:
ee:28:5f:a2:5c:c7:40:a8:44:63:41:a5:f1:e6:3b:
ea:13:a6:83:ba:e4:bd:65:d7:1c:84:1e:b5:98:62:
c8:4c:82:c9:5e:0e:fc:19:1c:cf:29:ee:7f:17:52:
ff:39:84:58:42:6e:8d:0b:fa:8a:b7:16:55:4e:9c:
cb:3b:ad:ca:b1:ef:9e:0a:26:23:93:d9:68:41:0c:
61:b5:59:02:03:e9:f2:06:f0:71:3d:43:07:b0:bf:
6e:2f:08:51:d3:f3:c1:3b:e5:99:d6:38:8c:22:fe:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:2D:0F:72:68:9A:94:95:D6:93:97:C9:AA:E1:64:82:0D:93:95
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:a4:f2:a4:86:15:e3:1a:57:cd:d1:9d:85:15:71:61:79:
41:42:b0:14:59:2c:37:f1:68:6b:c0:bb:e6:09:db:dd:21:4a:
1c:61:a2:84:69:dd:ed:31:3f:c4:e0:16:2f:cd:6f:2d:49:c9:
8b:0e:a1:3f:6b:a5:9d:e1:04:bb:4b:4c:2f:93:fc:cc:b7:df:
4a:5e:1e:a5:69:20:7d:6e:8c:5b:cd:f7:0d:79:dd:f8:74:8d:
29:35:38:c1:7b:df:9a:8c:28:bf:6b:92:a6:30:e5:47:36:ed:
a6:f4:7e:72:3c:03:a4:bc:f3:bb:5f:78:05:1e:dd:6f:0b:b9:
ae:88:5c:03:38:13:1f:81:e0:73:8d:43:c6:bd:16:de:98:82:
bb:fb:a2:5e:c1:3c:75:8b:2b:37:e3:4d:84:94:51:19:5f:c8:
58:3b:4d:59:c5:ab:84:81:ca:1a:94:52:7b:4c:3f:a4:ab:3f:
89:dc:92:db:21:3d:ef:43:1e:c9:4d:48:7d:9a:e6:0f:77:bc:
16:eb:f7:83:9b:52:0e:3b:cb:87:a0:73:04:7d:03:92:89:63:
9b:43:a1:a7:bb:9b:69:11:01:a9:9a:c2:67:ce:67:05:d6:a0:
98:a4:46:1d:d2:09:56:20:5a:8c:44:8e:c6:90:c4:9a:ec:c3:
f8:0a:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:52 2026 by rpki-client