
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: zyrgiUzT29ECGdPM0dTOX5MWBqPVKt/8f+i2uMXFJSE=
Subject key identifier: 9D:7F:20:78:4E:CA:9E:ED:CB:9E:D7:1E:0D:9A:51:EB:16:D3:40:87
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 019FA8996A54BA4E693EE409A17C34DF66B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0614
Signing time: Tue 28 Jul 2026 12:00:54 +0000
Manifest this update: Tue 28 Jul 2026 12:00:54 +0000
Manifest next update: Wed 29 Jul 2026 12:00:54 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: wxN+z7mpg1TJRwjxmZTZABeYBAD0fxwVRYb0VMId3R4=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:6a:54:ba:4e:69:3e:e4:09:a1:7c:34:df:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Jul 28 12:00:54 2026 GMT
Not After : Jul 29 12:00:54 2026 GMT
Subject: CN=9d7f20784eca9eedcb9ed71e0d9a51eb16d34087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:7b:c1:d2:62:ce:24:0c:49:ab:85:aa:20:
85:1e:b6:bd:ee:92:49:9f:a8:5c:8e:c1:54:2d:48:
ef:15:1c:28:46:f6:d9:0b:d8:94:dd:e8:8a:c2:92:
06:37:aa:aa:fa:c9:17:f2:97:69:62:60:a0:e0:c7:
98:49:15:e7:5f:0e:d9:e7:52:72:d8:4b:a8:93:ba:
ae:3b:d7:cf:3b:09:a5:b6:94:f1:87:00:8b:9f:52:
1a:1d:88:10:9e:7f:92:a2:f2:fb:41:6f:6c:07:1e:
90:8f:07:0f:32:81:bc:63:10:d0:f2:1a:cc:8a:67:
d7:2d:52:7b:4e:d4:b3:dc:7c:b2:7b:de:f7:fd:d2:
bb:13:9e:ec:38:64:43:cb:e2:c8:ab:09:92:87:ed:
7f:62:54:28:0e:9f:0e:92:bd:e7:fd:8f:b7:bd:51:
10:cd:66:dd:12:3b:85:d6:f5:3c:92:70:26:37:64:
47:49:4f:04:c6:2f:ec:79:9b:ce:11:04:bd:92:b9:
cc:c9:d9:93:33:27:10:2a:2f:5d:93:52:d0:83:8a:
d3:f1:87:74:15:f5:89:23:b4:87:0e:a2:bc:c5:5e:
fa:38:60:a2:d7:e4:8d:c6:96:67:20:bf:f8:96:c0:
c7:b6:7e:1f:99:cb:c9:dc:ee:68:eb:ae:3e:61:df:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:20:78:4E:CA:9E:ED:CB:9E:D7:1E:0D:9A:51:EB:16:D3:40:87
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:25:6b:27:7c:21:7c:37:7e:a4:0f:22:4a:b2:b7:d3:f3:
63:f3:a8:d0:08:e9:4e:7e:90:01:e1:03:7b:80:b5:f1:61:07:
a9:7c:d5:15:ae:40:47:86:27:7c:26:01:90:66:ea:0d:8c:7c:
a7:c6:8f:8e:f0:60:a4:31:ae:b2:b5:7d:29:0f:35:eb:89:2c:
59:ef:22:74:cf:8a:eb:fa:68:8c:bd:94:70:e1:bf:4f:9b:78:
d8:71:d2:23:8e:cc:20:77:ae:20:48:1c:24:cb:94:71:0d:de:
3f:e7:15:17:ef:27:38:72:4d:cc:0a:84:be:27:03:84:f6:0f:
18:9c:c8:06:b0:71:ea:d4:a0:b2:63:6b:d4:67:09:1f:20:16:
c5:e7:10:85:84:c8:0d:46:e1:d8:e4:65:15:d7:b0:e7:2b:2e:
51:9e:dc:ae:20:4b:e5:71:83:4f:2c:1d:98:1d:b7:3b:68:0b:
19:37:d3:c3:3e:d7:53:b4:39:5a:d1:ee:9e:6c:e6:28:96:55:
3d:cc:61:22:4c:5c:a3:db:ad:9f:a7:d3:e1:24:47:c0:de:37:
f8:11:f4:ed:4e:c7:09:f2:b3:d2:19:8c:67:fe:c3:2a:97:0b:
dc:6e:a3:67:c5:a8:fe:bc:ca:e8:05:bf:a5:ac:0b:b6:09:c2:
1a:56:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:35 2026 by rpki-client