Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: aDNTMLb32rtD2hFQK/sWzURGeqbRvM8fyBL51dy7Tyo=
Subject key identifier: 35:F5:48:9A:7F:2E:96:C6:86:BB:3D:67:B0:86:5B:28:65:7D:E7:7C
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019D9A3E8A55AC349868D1DA709FDD4C1FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: Ght3JfAulctlS80Ieo5niKu0qVBNMxktVQ3Bg0bOCSQ=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8a:55:ac:34:98:68:d1:da:70:9f:dd:4c:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=35f5489a7f2e96c686bb3d67b0865b28657de77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:99:fc:b6:92:cf:26:03:d0:7b:14:8c:b1:
c2:be:7a:13:58:46:2c:ca:7a:62:f6:df:3c:a9:c1:
14:cc:f5:8f:9d:d2:06:f5:6f:cb:07:f2:af:f9:08:
6b:0a:50:c5:7b:b9:9c:d7:43:f4:bb:27:b2:3e:4a:
a0:08:51:44:2b:8a:a1:3d:ff:46:fd:ee:9c:b1:ce:
11:54:56:08:0c:11:b0:69:8c:5d:a2:51:9f:c9:26:
82:32:30:b8:27:a9:79:45:0a:5e:f1:95:66:fc:d7:
04:18:6f:34:30:76:d3:fd:10:53:ff:9b:40:80:89:
9c:27:a7:83:0c:9c:2c:9c:44:6b:5b:16:44:31:12:
a6:28:96:1b:64:c2:09:e1:88:8e:31:85:37:72:7a:
01:b1:20:02:b4:22:c9:28:73:fc:81:9c:12:98:20:
32:11:55:50:8f:d9:f4:07:57:20:c3:92:cd:52:20:
11:ab:af:fc:db:0b:82:ba:11:31:8b:fb:ba:bc:52:
4d:57:b7:a8:e9:c6:3b:97:a3:db:19:11:3b:40:22:
e9:35:f8:88:1c:5d:38:77:84:eb:11:ca:64:24:7e:
48:c2:9d:a5:fb:1b:e1:2d:c2:a0:98:f1:f7:ec:59:
8e:3d:85:6f:84:f9:48:12:5c:74:c8:32:9e:80:eb:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:48:9A:7F:2E:96:C6:86:BB:3D:67:B0:86:5B:28:65:7D:E7:7C
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:43:d2:2f:ea:7b:38:41:88:3e:70:d4:07:df:bb:95:29:
95:51:b7:6e:82:4f:8b:83:74:20:24:5d:54:10:13:8d:bf:77:
9f:bd:06:bd:f1:50:82:06:75:3a:cf:c1:2f:cf:b3:5f:e6:21:
bb:9f:30:09:ee:94:31:83:86:82:0d:f1:8b:f6:fc:38:06:c5:
3e:b2:10:3f:69:a5:cd:06:96:f0:b1:ff:30:51:e9:8a:53:61:
e6:71:fe:3a:95:83:8c:0b:84:35:ef:d2:45:75:42:3d:ca:e0:
54:f0:45:95:12:28:73:bf:9e:14:c5:dc:16:d3:4f:a0:ef:f2:
77:ff:71:01:6b:74:cf:01:cc:4a:6d:c0:26:8e:cd:a1:eb:18:
1c:4b:dd:35:8d:d5:29:bc:3e:01:10:93:73:d6:ed:fa:0d:e7:
cc:a3:91:04:c9:ef:3a:4c:8c:49:f6:32:4c:5f:e6:50:f4:ba:
89:5b:a6:ca:a9:ad:32:5b:94:9c:09:9f:b3:ac:08:bf:26:0d:
fa:39:29:fe:29:07:79:ce:d1:90:05:58:47:a3:dc:21:d6:9a:
ae:f0:ba:e0:ba:e4:04:39:00:7b:de:54:d5:78:79:a4:b3:af:
3e:a3:61:fb:1f:80:c1:eb:2e:47:d7:64:dc:6e:b8:4d:9d:4b:
63:b6:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:45 2026 by rpki-client