Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: 53Z8coOfVp9MN8BWBuPmCyH0ROqxF61NfzLMjfSJ/6A=
Subject key identifier: 01:A0:A0:41:14:7A:C8:16:26:D3:2F:37:F4:7D:F0:CD:04:36:34:08
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019CAED9DB7D2C65D9869FEDDB2D64A1DE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 14E2
Signing time: Mon 02 Mar 2026 14:00:38 +0000
Manifest this update: Mon 02 Mar 2026 14:00:38 +0000
Manifest next update: Tue 03 Mar 2026 14:00:38 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: sxyz3CMdR3jtaIiwJPXNxgLPX32JxAcqmxS7uN9kvXU=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:db:7d:2c:65:d9:86:9f:ed:db:2d:64:a1:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Mar 2 14:00:38 2026 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=01a0a041147ac81626d32f37f47df0cd04363408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:a3:dd:47:e5:b2:e8:c2:89:fe:13:0e:08:
2f:74:4d:4f:1e:78:53:32:1e:70:28:f5:78:de:ef:
16:5a:03:e2:ed:ad:85:d0:d5:52:0f:5c:7a:03:0d:
75:4a:9a:ab:f9:c6:a1:a4:0b:40:9a:5e:8a:60:85:
e6:06:4f:73:88:65:05:fc:f6:50:94:38:8c:14:ea:
e5:b2:5e:37:06:1c:85:32:90:89:96:c2:c5:4b:9b:
3b:bc:e2:23:c0:a0:c8:dc:6b:3c:b2:f0:77:c1:7a:
33:e6:5f:93:9f:42:63:3e:4b:18:39:83:7d:17:ba:
10:88:07:63:d6:67:1f:d7:9f:ec:86:02:d9:18:e1:
1d:fe:44:13:f5:fd:79:9d:96:19:2b:01:b2:19:85:
f9:8a:ff:67:8e:cf:e6:65:e7:b8:d9:16:b0:ff:cf:
17:5c:e1:6e:1b:42:a2:18:4e:f1:af:40:82:ba:ea:
bb:38:a4:3b:a7:f7:e9:01:b5:4d:b2:41:8e:31:07:
31:1f:30:03:ae:bc:d4:32:5b:29:c6:35:8a:7c:d8:
db:2a:c6:96:1e:01:f9:37:58:8a:d5:2b:5c:0e:cd:
07:e3:54:67:56:6a:c7:99:62:5b:a3:8a:d3:ff:e8:
3e:9b:a3:0f:71:90:35:70:63:f3:ea:e3:38:9f:4e:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A0:A0:41:14:7A:C8:16:26:D3:2F:37:F4:7D:F0:CD:04:36:34:08
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:26:54:57:eb:ca:75:65:34:c3:8a:92:0a:b9:2b:3b:9e:
b5:40:42:cd:9e:55:8d:b1:32:0b:40:be:b6:0c:07:85:63:b5:
a7:b4:34:89:1f:4b:5d:31:01:84:6b:7f:c4:eb:3c:97:8f:ac:
de:4b:df:6a:f2:a2:59:8c:74:f8:6b:a8:3f:b8:b6:be:46:ce:
c2:42:df:02:b9:f7:b1:dd:69:e2:ce:d5:21:ef:de:93:3f:58:
f1:87:7c:38:4b:f4:39:ff:7b:69:c7:f0:ac:45:a7:61:60:6d:
12:9b:38:66:e4:d6:e7:51:8f:3d:a5:24:84:f6:15:03:e1:a2:
c8:11:c6:b5:84:fc:b3:12:74:63:26:b8:22:d8:c8:a6:7d:16:
0e:98:dc:5f:8e:9a:d4:21:ce:0d:94:bb:7e:4d:1c:53:ad:45:
7b:87:de:be:03:4e:a8:40:b8:3d:eb:23:b0:e8:13:e7:fc:b5:
29:e8:43:e3:03:c4:b1:fe:43:6f:47:b1:b7:d1:e5:92:44:22:
b0:52:92:ad:29:34:b3:76:a8:9c:f7:b4:86:2c:2d:00:a7:fe:
bf:cd:6c:b2:65:64:b7:73:f5:69:b6:0a:62:64:4c:49:0a:ea:
dd:71:88:59:7a:3c:df:04:c1:7d:b4:da:cf:1c:d7:31:11:43:
3a:41:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:44 2026 by rpki-client