Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: 3xFvqJep0+fntGfzucjDopUc8KWgVGQTG1aL06JInjo=
Subject key identifier: 2A:40:CF:CB:20:EF:5F:2E:0E:EC:D5:20:CB:75:A2:5E:13:2E:A6:41
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01A13D4A7D36F06A9A54E728E12AFF2D2F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 173E
Signing time: Thu 15 Oct 2026 02:00:53 +0000
Manifest this update: Thu 15 Oct 2026 02:00:53 +0000
Manifest next update: Fri 16 Oct 2026 02:00:53 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: tvCmLM69AbQOIV/Wrdu3xfx1h96o4IIP8mKtYSsuS64=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:7d:36:f0:6a:9a:54:e7:28:e1:2a:ff:2d:2f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Oct 15 02:00:53 2026 GMT
Not After : Oct 16 02:00:53 2026 GMT
Subject: CN=2a40cfcb20ef5f2e0eecd520cb75a25e132ea641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1f:37:43:a3:c6:b6:6f:e6:bd:d2:7b:81:81:
46:cc:aa:6d:d2:af:d2:a5:12:a6:52:fc:64:9d:2b:
89:34:ed:38:ec:e9:14:3b:c2:27:6a:28:0a:bf:7c:
f8:63:45:3b:87:1d:a6:34:0f:5f:50:2f:e0:ca:f4:
90:d6:94:12:36:19:f6:d4:e8:0e:7c:a5:ef:8f:72:
87:33:f9:33:91:b6:83:60:f5:c5:a8:40:d2:b5:d0:
b0:2d:41:59:a8:d0:f9:32:3d:05:ef:54:2c:71:72:
97:27:79:9f:2a:33:1a:77:87:95:da:a6:40:61:eb:
b2:46:d3:66:9b:41:cf:d5:c9:db:10:40:26:76:a2:
c3:c6:f0:a8:92:36:2f:13:c6:30:86:cd:1e:6e:a8:
1f:7e:a4:57:d9:73:7f:17:5b:bc:da:bb:b5:ae:f0:
2b:3c:a3:d3:70:04:4d:15:95:2a:6d:31:69:53:3b:
a8:ff:bb:51:c5:1e:1e:1c:27:82:74:c5:cb:1f:72:
45:f1:f3:2d:a3:f6:48:45:ec:2d:a1:f7:83:f1:e6:
70:2c:15:dd:2a:24:75:9b:62:eb:e9:a0:da:dc:5c:
a7:39:9f:51:6d:b5:c0:de:79:6a:8e:3a:51:59:11:
4c:02:d9:8f:cb:42:11:94:92:e5:6f:10:96:af:ff:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:40:CF:CB:20:EF:5F:2E:0E:EC:D5:20:CB:75:A2:5E:13:2E:A6:41
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5e:02:b2:17:1b:db:ec:6a:b0:aa:f2:4e:c5:8a:25:60:05:
e3:a0:82:f0:35:c7:24:d3:bc:9a:45:5c:23:06:1b:56:ff:7d:
72:73:4b:6f:a9:f5:e1:69:f2:8d:88:ea:76:83:cc:c8:2f:3a:
85:c8:ed:68:b4:16:57:83:d5:e3:74:17:af:c4:fe:94:60:43:
2a:95:5a:df:60:d7:a3:3a:38:ae:03:d8:02:dc:81:c9:8a:60:
33:55:72:b3:25:ef:5a:e9:fd:8c:d2:00:27:50:cb:97:ae:f3:
f2:87:fb:82:e4:78:fc:eb:84:2d:fb:b2:99:b8:82:bb:33:7c:
ce:70:84:2e:23:d0:6f:2c:37:40:d3:88:74:f8:a0:00:2d:e3:
ae:5a:a4:2c:15:09:c0:2f:4a:50:13:d6:81:4f:b2:dc:22:61:
1e:ee:a3:27:1b:61:24:fc:97:d0:1e:88:eb:92:f4:de:a9:1d:
b8:27:62:c1:d7:0d:0e:f8:5f:cb:eb:b8:a0:f6:04:fb:82:bf:
44:cd:e7:ab:55:6c:cf:aa:6e:e4:b9:75:f8:e2:7c:21:4f:cb:
42:e7:4f:a5:23:ab:65:94:27:b6:61:cc:9f:6f:e9:be:5f:5c:
b3:6f:1c:70:10:8f:b4:b8:ac:cc:37:52:c4:86:8c:1f:e9:27:
1a:bc:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:50 2026 by rpki-client