Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: bS1a1nnewaYqQWEEXPZ7ugoGf7fxTOAQpt8f0KjR5YY=
Subject key identifier: D8:8E:B8:DF:41:EF:04:4E:4C:0A:4D:F5:51:AA:96:8F:85:55:AD:B0
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019CABD912579713C17633CCAA26019DD445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
2: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
3: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
4: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
5: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
6: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: hqHnKoZY2W9TcHzTHhN7y8QfrJhoHCV7GXFpyjvytOk=)
7: hae0gayGe2g1D03nvSh_u0H2u2s.roa (hash: OF2Bvd/NPLRNkpIH3hrjKElY0WK9eslhWgO2CIxPJCw=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
9: rgwz7iF3hHaUl5V19C4BKoY9OnE.roa (hash: ve1MCW6t2kzIlC3EVE/Neu+wkMeFHcsHuQFg1OD/guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:57:97:13:c1:76:33:cc:aa:26:01:9d:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=d88eb8df41ef044e4c0a4df551aa968f8555adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:e3:b6:c3:39:51:60:ca:0e:86:e5:ef:ee:
e9:7f:ce:23:17:1c:29:7b:74:c0:35:ca:4f:4d:4c:
e4:09:6d:82:9e:ad:49:11:6d:da:56:ba:80:ce:5d:
2d:ca:0f:90:ac:ce:e8:41:d5:82:6c:61:ab:dd:db:
dc:ac:52:96:b2:dc:0f:75:b0:f7:21:e5:20:cc:7f:
d9:35:04:49:a7:45:57:95:cd:b2:95:61:4d:33:2b:
81:c7:c9:79:7d:59:51:06:81:64:81:f1:04:9e:bd:
19:69:c5:00:a0:e6:46:81:35:01:c6:5c:13:4e:f6:
0b:6d:b6:68:26:f1:88:af:98:2a:46:03:4d:d0:a3:
c3:e3:66:e1:2e:98:b2:7a:17:b9:f9:20:55:b1:b5:
b3:bc:3d:30:b5:02:fe:4f:18:b9:c5:6e:30:93:02:
13:8f:e7:09:0e:24:73:1d:01:bc:8d:95:aa:bf:81:
56:e0:b9:ab:05:34:be:eb:b2:7d:58:13:9d:79:32:
70:7c:2b:59:a4:da:84:06:8a:e0:ef:7e:35:d5:61:
80:2a:5e:cd:8e:1a:fa:aa:a6:4f:e0:c6:6b:87:3e:
18:4d:d1:eb:ab:c1:0e:ba:ba:c0:6e:b9:6f:e0:83:
23:1d:c9:49:b5:ea:1a:eb:c3:08:fe:d8:33:3b:89:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:B8:DF:41:EF:04:4E:4C:0A:4D:F5:51:AA:96:8F:85:55:AD:B0
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:98:c6:ee:84:53:ea:a0:35:30:4b:63:64:9d:45:f4:e7:2e:
86:45:d9:1e:6f:be:e1:0f:07:af:c3:7f:d7:79:88:46:41:7a:
98:05:04:6c:3e:8a:55:ff:6b:1c:0e:ac:b8:77:b8:e8:38:47:
f6:a4:b2:1d:5a:5e:ad:bf:08:98:9c:a0:61:e0:27:b8:52:4e:
ff:91:cd:3e:43:a2:92:9e:94:a6:a6:55:c5:30:96:48:83:64:
82:6b:88:db:e5:97:93:1b:c1:18:69:e3:b8:01:4a:ba:0b:b8:
68:42:c2:42:f1:40:1d:5d:f7:85:e2:9f:b2:b6:43:ac:98:ac:
ff:e3:92:76:ed:b7:72:b7:aa:30:e8:7e:e1:f6:e1:07:8e:ef:
b4:fb:1c:08:b5:bd:95:03:61:7b:d9:6d:04:c5:bf:7d:44:7a:
08:ea:a8:53:d3:5d:c9:9f:df:ff:46:4b:98:41:9c:da:89:79:
e3:6c:97:92:bf:d1:fb:99:b8:55:f8:1f:1e:33:9a:09:0b:e0:
54:fd:65:a5:27:9b:3c:cb:95:e0:77:41:a2:38:29:99:b6:b0:
e3:4b:9b:12:f9:32:75:5a:ff:47:14:d5:86:7f:83:d2:9a:4f:
7d:9e:ad:54:3c:2f:06:d0:39:e0:e0:da:40:d5:27:9e:4d:75:
cc:d5:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:02 2026 by rpki-client