Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: lcA8WwE4zPBpWNkpKirb8ngGXKc3ixQ+TJHN8rCimCo=
Subject key identifier: C5:AA:D9:BF:A9:D3:A1:3B:68:61:5E:0F:39:9F:DA:90:A8:C0:51:F1
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01A125E7A79C8F059BF921E3875A0F46AD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1AA2
Signing time: Sat 10 Oct 2026 13:01:41 +0000
Manifest this update: Sat 10 Oct 2026 13:01:41 +0000
Manifest next update: Sun 11 Oct 2026 13:01:41 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: u6smocSYcvbA/r254zKh4vKiOxSP6euZZf8YFtAouEY=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e7:a7:9c:8f:05:9b:f9:21:e3:87:5a:0f:46:ad:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Oct 10 13:01:41 2026 GMT
Not After : Oct 11 13:01:41 2026 GMT
Subject: CN=c5aad9bfa9d3a13b68615e0f399fda90a8c051f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:dd:04:85:2e:69:5e:04:35:91:f9:a5:60:
1e:c2:42:28:fe:b8:88:44:4f:31:ad:9c:51:96:f9:
e0:b7:47:a5:54:d2:19:84:3c:bb:70:2e:c7:f8:27:
85:02:6a:54:a8:9c:5b:7c:70:88:56:4a:69:17:6e:
b0:dd:7c:9d:86:1d:3a:92:3b:f3:d1:9c:36:f1:81:
40:03:92:7b:ea:6a:dc:b7:b8:58:92:91:84:e2:80:
cc:db:05:4c:51:dd:8a:48:59:29:7c:2d:fc:c2:22:
29:01:e6:62:26:23:7e:1f:b6:6f:d9:d6:d9:de:3f:
03:1b:99:9f:6a:09:a7:6a:17:f4:15:dd:e9:dc:c1:
13:cd:bf:3a:d2:b2:a7:1a:ec:14:0c:16:9c:75:f4:
7d:e6:92:64:18:4d:0f:b4:fa:96:68:05:1e:bd:3d:
7f:f4:53:93:55:90:12:f3:70:37:00:1e:5a:c3:13:
ac:bf:69:70:f0:d8:1a:4d:29:e0:f9:e6:28:be:2a:
50:0e:72:94:32:50:0a:e4:09:4c:40:75:64:67:e2:
6c:5a:7f:03:7d:67:5a:7c:58:06:8b:9b:e8:0a:6a:
70:54:5f:2a:f0:6d:22:0c:e8:75:c0:02:4f:d9:4c:
a3:84:e4:04:fd:d7:ff:b0:55:f5:6b:a1:fb:10:d3:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:D9:BF:A9:D3:A1:3B:68:61:5E:0F:39:9F:DA:90:A8:C0:51:F1
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a5:2f:0f:38:48:dd:1d:76:52:41:36:dd:bf:62:4f:bb:14:
e3:1c:11:82:1b:85:f0:b9:bb:95:c9:57:93:d2:f3:85:fa:39:
d5:8e:6c:ba:e1:b6:29:d5:3b:43:50:8f:1a:78:37:2a:00:98:
a0:c5:96:23:70:68:41:e5:cf:9e:0c:5b:5f:63:d4:c4:2d:37:
4b:59:20:ef:95:b7:b3:f1:8f:dd:7a:ac:66:b7:97:b3:1c:b8:
9c:1d:76:c6:23:68:5d:89:eb:af:02:0a:50:c4:9c:8d:5c:b7:
85:6c:5c:68:e1:6e:02:b4:9f:35:9d:d9:74:2d:2e:49:94:e7:
4d:16:59:76:a5:2c:3b:7c:db:fc:39:5c:fa:84:3b:ca:57:28:
68:d9:4e:3d:b4:74:83:4a:8b:2e:12:59:f4:ab:21:4b:2f:11:
09:0c:5c:eb:c6:c7:f7:4f:2b:37:82:cc:47:6e:e4:5c:ac:cf:
39:df:63:a2:a3:03:69:09:a7:a8:1a:d2:82:dc:5f:ed:75:14:
74:c3:30:fa:5b:5a:24:8c:03:c8:1b:ff:3e:3e:b5:bd:87:af:
fa:d3:1f:0c:6b:d5:d8:ed:24:cf:3f:06:2a:99:6e:f9:22:09:
e0:ab:0c:ab:de:fb:79:43:8d:8d:44:e9:e3:f4:3e:85:32:f4:
1d:ae:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:43:19 2026 by rpki-client