Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: xeK/Kx6qkmOBUNp45NhNYnosONJiwjvybts1P0cNdlE=
Subject key identifier: AB:D7:2F:E2:FB:A9:C7:7E:70:D0:3A:96:52:51:20:6D:B3:7A:C2:8B
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 019CABD9AD9165841469C063C93A7B22D562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0488
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: AeX0/Iq8zyKenhf1qx169Tp5aVCH7E1EEU3IxH/h69U=)
2: aRuPqNH6CePYonZXCvJpNhdLTq4.roa (hash: sDab1uY8COS+SQpx2FBlz4C/BxfEX3Pxl+YkMtnLT5w=)
3: knrDAil7OO-Yx2NTo_oTE0lWvG0.roa (hash: EQdRod3nZJJQ0luHMt9XKGtHT/MSluOGADpnfRGbDAg=)
4: xHh-97Lta5LNVTnO8SR2JedTzJQ.roa (hash: YnOTNh9VfWJM3zMtcxSBKdQt1SEdIDNsrihIoA70J5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ad:91:65:84:14:69:c0:63:c9:3a:7b:22:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=abd72fe2fba9c77e70d03a965251206db37ac28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:9f:a2:30:f5:f5:4b:d3:b0:7e:a1:60:07:
d1:75:ac:24:be:ab:be:25:96:a6:1c:d4:b9:a9:01:
45:06:fc:f0:23:ac:ca:65:a2:4f:c7:3e:c7:41:c3:
d8:96:91:b4:e5:85:f9:75:b6:7d:57:e2:d4:fa:b9:
42:db:3d:98:cc:05:5b:b9:75:b8:2e:f3:fd:1b:d0:
57:c1:da:83:24:1d:42:8b:6b:97:08:b1:95:e8:14:
0c:ab:d7:80:c9:e8:b4:43:fd:d1:44:9e:7e:95:1b:
cd:e1:66:d4:11:09:f7:3c:bc:4d:cb:df:b2:fe:05:
35:28:5e:f2:15:bf:18:40:c0:64:10:31:94:5b:7c:
f8:2e:f5:e8:9d:ac:dc:09:1e:e6:7e:49:28:b6:ed:
8d:49:83:82:7b:ff:4f:bc:eb:c8:81:56:a1:e0:d6:
34:67:24:2a:7e:2b:59:68:71:aa:f4:8d:bd:89:4a:
ae:a4:bc:e7:a0:b9:50:f8:49:6d:8f:f3:8f:55:a1:
e4:9f:ed:7f:f3:8c:03:2d:8d:41:90:a4:4b:a2:3e:
4b:e1:d8:04:fa:38:99:c2:8c:7b:38:cc:bf:81:90:
d4:58:ce:46:16:83:e0:3d:ad:05:82:f9:47:2a:f0:
f6:71:a4:83:2d:fc:1d:a1:57:5b:2a:dd:94:0d:10:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:2F:E2:FB:A9:C7:7E:70:D0:3A:96:52:51:20:6D:B3:7A:C2:8B
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:80:f9:87:ef:6f:53:1b:d8:04:de:93:5f:c9:c0:3b:22:af:
04:c1:18:c5:79:cc:4c:35:3c:6e:7a:37:04:13:bc:5e:ac:6b:
37:e8:98:8b:3c:f9:3b:4b:dc:51:b5:f9:38:1e:8d:b2:0b:83:
d3:2a:99:7c:cf:75:75:2b:10:6e:5b:55:e0:be:1c:a3:05:fa:
14:16:f3:ba:bd:4f:7a:81:07:fd:b2:c7:ca:d7:6a:40:9b:36:
c8:ec:3f:26:82:d1:02:e8:38:67:ef:36:50:b1:8f:c3:88:b9:
da:81:23:8f:89:cc:43:f7:44:79:9a:7f:1b:a2:c8:e9:eb:df:
f5:9d:67:d9:22:6c:f0:25:8f:af:1e:c2:27:5b:14:b3:76:75:
09:c7:8d:9d:27:d1:8a:6f:00:69:c4:eb:9f:d5:81:9d:ee:7d:
9f:8c:fe:bc:dc:71:14:40:0f:79:3a:e1:11:7c:9c:2f:3e:2d:
db:5d:41:55:62:cb:58:6a:9d:69:58:36:fb:ec:5f:83:fc:12:
00:67:83:84:25:83:c7:03:9c:e0:5c:5c:f6:f6:75:bf:69:46:
e5:cd:c6:5e:09:c5:d7:01:20:82:be:d5:49:9f:51:1f:08:a1:
af:d1:25:fa:67:0e:7d:52:68:02:22:bd:7f:b6:8d:00:aa:45:
98:29:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:16 2026 by rpki-client