Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: +thUfykTfO7VJBTvjMzaMCVRkLJdfxyXlYY66pAqZ9k=
Subject key identifier: B2:15:9D:FA:33:27:83:6F:49:7F:BD:C5:1D:4A:01:F9:1A:F1:24:F6
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 019EC1EDF20D742D1B624F26434A8BCDAA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 15F5
Signing time: Sat 13 Jun 2026 17:00:57 +0000
Manifest this update: Sat 13 Jun 2026 17:00:57 +0000
Manifest next update: Sun 14 Jun 2026 17:00:57 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: +4gH9IxCgdTegjZgOOsD2FX4rBUoQZ85BcCdX4jE++c=)
2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:f2:0d:74:2d:1b:62:4f:26:43:4a:8b:cd:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jun 13 17:00:57 2026 GMT
Not After : Jun 14 17:00:57 2026 GMT
Subject: CN=b2159dfa3327836f497fbdc51d4a01f91af124f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:2d:06:93:0b:44:36:d9:ca:50:9d:a1:0c:
13:a9:e9:13:6f:de:fe:b7:fa:0b:ac:28:f7:dd:fd:
2d:f8:75:a3:47:58:b6:31:40:d9:39:24:5b:85:3b:
b2:4e:22:00:58:29:46:71:0e:c4:03:3e:05:1e:1d:
53:93:9e:9d:3d:05:a4:43:c9:cb:a1:bb:7a:4d:3d:
fe:23:b1:fc:cc:9c:7c:a7:f4:d1:6b:63:96:03:6d:
c8:d9:71:6d:e7:c2:2c:d8:06:9a:46:c4:d9:69:70:
58:79:56:52:7e:cd:60:2c:91:c2:c1:4b:2e:b1:2a:
55:cf:69:a4:fb:e2:9f:33:fc:59:f1:be:94:87:1b:
f3:8a:4a:45:59:6b:7e:5b:eb:65:d0:a7:16:f1:33:
34:e9:7f:5d:0e:96:8b:a6:05:16:a2:e7:b3:7f:1b:
11:69:3e:5f:37:64:66:b0:8c:38:6b:8d:5c:b3:34:
9c:b4:89:d3:7f:2c:67:09:a3:70:24:95:99:1c:e7:
9b:07:9b:18:9a:6f:e2:2e:99:6c:e9:50:1a:ae:ab:
cc:4b:85:31:eb:de:c6:f7:26:39:14:24:0b:36:6e:
c6:1f:63:37:2d:96:72:1d:a5:c0:52:b5:6d:15:26:
ab:b5:a5:dc:87:0a:7a:0d:e1:2c:f4:ee:f8:e8:b4:
51:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:9D:FA:33:27:83:6F:49:7F:BD:C5:1D:4A:01:F9:1A:F1:24:F6
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:13:26:91:82:f5:d0:ab:ca:ee:10:9a:35:06:d5:45:45:
3b:bb:42:c9:d0:cf:75:51:2e:8e:ca:08:9f:27:74:cb:60:ea:
80:e7:11:61:46:af:0b:c6:50:cb:0f:47:98:f0:da:5a:a0:5d:
f5:fd:b8:99:35:ce:ce:7a:f6:10:58:5d:00:74:14:6e:b3:61:
ad:a4:dd:c5:fa:62:c0:b9:f2:8c:6b:30:ac:6a:78:f8:d3:ed:
2a:e6:ac:3b:1b:b1:8c:68:d4:5e:47:34:bb:13:71:85:b4:54:
34:bf:38:86:80:b8:be:30:8c:02:3b:1a:9a:10:3c:c2:49:a4:
14:a0:35:cf:6f:f5:65:67:a2:ba:08:d5:f3:91:e9:70:d3:11:
99:96:d6:f0:b1:e6:31:c9:67:49:66:7c:af:24:8a:09:16:fb:
a8:1c:80:70:45:e4:63:16:8a:43:c6:0e:14:c1:f5:d6:81:3b:
3f:05:e3:05:bd:ea:53:93:22:0a:50:ee:04:44:11:b9:55:5b:
0d:73:6e:cf:a2:dd:60:4d:87:92:0e:4f:36:96:c1:96:88:ec:
a9:e8:76:97:56:7e:bb:6a:e7:c6:0b:d5:98:8a:ba:6e:0d:f8:
fe:90:2a:b0:2b:b9:8c:07:e9:1b:70:8d:a1:77:5b:53:9f:f7:
c9:e1:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:54 2026 by rpki-client