Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: Ccz+azZXQOS9lFSyEBH/O1hwTwD/M35EsqpzNdiM1ng=
Subject key identifier: 24:FE:1D:7C:FC:0D:E6:6A:57:71:CB:75:94:93:C6:69:2E:84:E1:AE
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019EC1B72F6A7B8E44FAF40F70F2540D7E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 1965
Signing time: Sat 13 Jun 2026 16:01:08 +0000
Manifest this update: Sat 13 Jun 2026 16:01:08 +0000
Manifest next update: Sun 14 Jun 2026 16:01:08 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: RRlJvXruCdZKOw0hqTRXPh40COppr2PS1HH2D7i0CQU=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:2f:6a:7b:8e:44:fa:f4:0f:70:f2:54:0d:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jun 13 16:01:08 2026 GMT
Not After : Jun 14 16:01:08 2026 GMT
Subject: CN=24fe1d7cfc0de66a5771cb759493c6692e84e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:58:b4:10:b9:5b:5e:94:b8:f5:0d:c8:61:
15:82:db:0c:bf:61:81:42:c0:25:e8:47:19:01:86:
62:83:53:31:aa:ba:e8:ca:5f:58:ba:fc:6b:2f:04:
c2:dd:0a:16:c7:23:15:3d:f0:11:3d:82:3b:a6:7a:
8a:83:7e:87:fe:54:12:36:54:35:1e:41:88:b5:21:
b0:96:dd:fb:9a:3a:a5:ee:64:73:68:a2:64:aa:ed:
ac:47:a7:a2:a1:98:e2:76:fa:4a:19:3a:19:7c:59:
07:71:05:a1:67:ff:6b:09:54:cf:5f:a2:c8:0b:93:
22:fb:7d:51:9f:46:f8:ea:ec:fa:1e:d2:99:8b:52:
f0:17:fd:6e:7f:99:f1:26:4a:29:8a:eb:75:11:13:
eb:fd:f0:f7:b6:2b:c8:35:e9:d2:0a:34:93:d3:a6:
db:97:15:25:1a:95:08:38:4e:5b:2b:e3:9b:2e:06:
fe:0c:5f:b2:ef:cc:c2:2f:e9:f7:62:33:a2:06:e6:
a7:8d:92:24:e2:73:e5:55:4c:fa:57:13:84:01:97:
8a:5d:29:17:9e:c8:22:41:68:04:b4:a7:06:fb:6d:
d9:e1:60:12:ea:55:7f:3b:8b:39:71:2d:1a:3f:70:
52:fa:b0:1a:f3:ae:36:09:26:5e:25:a0:7f:30:fa:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:1D:7C:FC:0D:E6:6A:57:71:CB:75:94:93:C6:69:2E:84:E1:AE
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:35:45:fd:d8:f7:ce:bb:c5:99:e8:51:95:f0:10:75:b9:
3c:d7:24:ac:43:9a:fb:19:ac:0f:c4:9e:db:ba:a3:1b:e3:5c:
a7:34:e3:87:a2:b7:8b:ab:e6:65:66:85:6d:8b:55:67:e2:ae:
f3:91:ef:88:69:47:47:be:93:c1:da:50:e0:7b:e9:1a:63:a2:
e8:66:40:5a:87:c6:54:0f:48:70:63:ff:66:77:2b:b6:3a:ca:
52:92:a7:5c:c3:09:21:4b:fd:fe:16:b0:dd:7e:4d:55:4c:8b:
cc:74:bd:65:a1:a8:1b:0d:2d:87:4a:3b:b4:d4:10:37:90:cb:
02:ba:ef:c8:04:80:c0:37:73:95:7a:13:a6:34:80:09:f8:11:
c2:cb:c1:ae:9f:6e:d1:af:e7:67:c0:09:98:6b:2d:32:4a:bc:
dd:ba:d4:75:4a:f8:93:af:ab:df:7d:79:3d:c2:c2:25:00:83:
5b:ab:fc:aa:3b:4d:1e:a0:1e:27:7b:c2:f8:5d:3a:8a:04:35:
cc:51:e5:01:32:5a:81:b0:66:36:e1:97:d0:bb:2f:d7:9d:77:
30:ec:a3:54:c2:62:b2:b6:f4:22:6e:fc:5e:a1:37:4e:55:e0:
ea:b5:ae:ab:d1:55:df:fb:88:22:af:e0:f5:b5:e1:04:55:27:
21:2e:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:33 2026 by rpki-client