Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.mft
File: cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.mft (raw, json)
Hash identifier: rzsZIt4juJs6AbGeELvQAOBHGdlicCCMjf1VAExPxks=
Subject key identifier: 5F:23:27:E6:BC:5B:BA:A4:A9:0B:AA:C6:08:E3:59:FB:D8:74:25:55
Authority key identifier: 70:B8:6A:FE:3F:13:91:BD:D5:F4:C1:1D:88:FF:99:16:57:3E:AD:38
Certificate issuer: /CN=70b86afe3f1391bdd5f4c11d88ff9916573ead38
Certificate serial: 01A1DD2707EDAE11FE6BE735D7B4A4B7D196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.mft
Manifest number: 32
Signing time: Sun 15 Nov 2026 03:01:24 +0000
Manifest this update: Sun 15 Nov 2026 03:01:24 +0000
Manifest next update: Mon 16 Nov 2026 03:01:24 +0000
Files and hashes: 1: 0tvwEt2yYAwmsg3w2AzUC_Mugq8.asa (hash: spcBB4RbLBy4aF0gRdVdkzcWXkuk1U51pYJKy8UjZRM=)
2: cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.crl (hash: ZYC9vtyjXNi0oQ+ELPLy8FBEeAe6Ul5RzFm15zzzPNw=)
3: jNlgTV4ouJ-bH3s7YCEA8m-Q90I.roa (hash: U8HpdxHXTUOR1UyJQ/dDk8x0kvfpMefqsjL18WfScA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:07:ed:ae:11:fe:6b:e7:35:d7:b4:a4:b7:d1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b86afe3f1391bdd5f4c11d88ff9916573ead38
Validity
Not Before: Nov 15 03:01:24 2026 GMT
Not After : Nov 16 03:01:24 2026 GMT
Subject: CN=5f2327e6bc5bbaa4a90baac608e359fbd8742555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:cc:b7:4b:54:13:74:87:a2:66:7a:07:14:
07:ff:19:12:7b:7b:bd:4b:68:b6:97:f0:e5:59:f3:
73:79:44:b9:ad:d7:58:fd:4c:f9:20:08:91:85:70:
44:59:80:2d:4e:38:24:b1:38:13:b9:16:cc:09:a8:
c1:76:03:2d:ca:6a:9e:cc:a0:99:39:20:7b:99:b6:
ab:75:f5:9a:ac:f2:82:84:92:c0:d6:aa:09:1a:2d:
b3:24:b2:79:9b:79:0c:95:03:58:e1:be:e3:3b:3a:
19:83:1a:ea:d0:40:c6:c0:24:ff:a7:7d:34:3d:75:
b9:c6:8c:ac:7e:ea:42:37:20:78:c9:7a:84:5a:17:
e8:59:18:c5:c9:e8:31:dc:52:85:60:f0:c6:e5:1d:
cf:8f:a9:39:60:ad:54:91:36:e3:2e:13:19:fa:60:
33:48:75:ea:73:68:ab:b8:13:75:6e:a8:b7:7d:e7:
ce:ac:ef:ea:f3:15:98:38:8b:25:43:b7:d2:6a:68:
1c:77:7f:b4:3d:17:29:81:2c:f2:e0:9f:ad:db:44:
dc:8a:d0:a1:81:47:a6:fe:d5:09:96:34:34:8c:6b:
2c:05:5e:4b:19:40:9b:74:f6:a9:fe:32:e3:42:07:
ff:5a:69:2d:42:ff:44:ba:96:37:3f:2b:37:e3:ec:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:27:E6:BC:5B:BA:A4:A9:0B:AA:C6:08:E3:59:FB:D8:74:25:55
X509v3 Authority Key Identifier:
keyid:70:B8:6A:FE:3F:13:91:BD:D5:F4:C1:1D:88:FF:99:16:57:3E:AD:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cc6085-e208-48af-bc40-41c935f416db/1/cLhq_j8Tkb3V9MEdiP-ZFlc-rTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:ca:00:d9:23:3f:43:bf:5d:46:dc:27:be:65:b2:fd:2e:
bf:5e:1d:86:5f:db:5f:c9:29:97:16:68:6f:0f:c2:87:61:fb:
f5:60:0f:5f:99:91:d0:37:ba:87:e7:f8:1d:56:69:5f:ba:a0:
83:39:98:34:26:88:02:41:8c:4d:3e:f3:98:27:90:00:84:30:
17:a2:27:8a:18:05:04:5c:2a:1e:4d:ca:f9:de:d3:17:28:94:
57:e8:9c:f3:d5:3b:3e:6f:92:9d:06:fa:d9:1d:1a:39:df:0c:
12:16:12:01:24:0f:68:f4:19:8c:a6:df:bd:81:b1:aa:b8:c8:
e2:1a:55:8b:3b:d9:f1:c6:ee:a0:e3:ea:45:cf:92:62:29:7e:
b4:f8:d1:8d:c0:84:79:0a:96:f3:99:8b:d2:1d:c3:f7:a3:67:
73:1b:7e:70:ef:87:89:1b:21:ef:26:3a:26:03:d5:aa:59:1b:
42:97:63:1f:68:1c:ad:62:6c:d0:bf:b8:cd:b3:2c:2c:b2:03:
a5:81:42:68:3d:75:4f:46:bb:97:76:5d:66:6d:e8:0a:39:28:
68:8c:07:4c:2a:8a:12:83:62:2d:0e:9d:f9:7e:a8:a9:b7:5b:
49:ec:d1:0d:c5:04:36:88:e3:04:6b:49:50:9f:e5:18:82:17:
4c:ff:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:26:07 2026 by rpki-client