Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: LHGWO3TTalYXlM9TKrvsT8rTYrl9vzcL295dbs6oglw=
Subject key identifier: 2E:16:77:C2:8D:5C:F5:72:44:5E:B0:E3:15:51:C9:1F:74:C7:F0:41
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019FAB63874E5C13E19E235931BBA905B050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 01:00:54 +0000
Manifest this update: Wed 29 Jul 2026 01:00:54 +0000
Manifest next update: Thu 30 Jul 2026 01:00:54 +0000
Files and hashes: 1: 7J7CpuHDJ76xvl_NCA0HUnOCU6o.roa (hash: /1D8z/DnFXinEXWi/AyE4l+2zJU5ScnntznioSwwJVg=)
2: GhRfbSGe51z6Jb6sfbK_5O7-fIw.roa (hash: iRqtkY5Ddgt99U2md8cn4+ApKi05lHDrF49d41JL04g=)
3: I1PzUcXNjBxYeo630GuIpE7IjlA.roa (hash: Y5ZMf+TBdH3qLA7l0TZhWo1fAKRU6szJtcrpQqkBd3E=)
4: I2jQfaxLKISTH7B8zgD6nj4vgJI.roa (hash: U3gCL5v8ToOjVSasN5bBGtq59kQaQUBtiI3CwNxEnn8=)
5: ON8MLVsom3Xc93Gj451fNhkOr1c.roa (hash: /aqp5tg5AkomZ2NTsffPfjLyDQc2VPOTKznItgMcVyQ=)
6: RYps1AeaS_nQ2M2q4VWNRGeKUmQ.roa (hash: EfSYr+HjNu8LmkSIzGJ5/tHGdu5M0PPTQ4lvfxjZUOY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: 46W6tdYBiRnjCiHuHqyCToetCkAjpuL5eh9OzXgg0RI=)
8: p0n9o8cWsap486TlFaXze5SalOY.roa (hash: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:87:4e:5c:13:e1:9e:23:59:31:bb:a9:05:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jul 29 01:00:54 2026 GMT
Not After : Jul 30 01:00:54 2026 GMT
Subject: CN=2e1677c28d5cf572445eb0e31551c91f74c7f041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:64:d6:ac:19:38:13:e9:ed:d5:d4:e2:ca:
0b:60:c4:82:47:e5:d3:4c:50:c9:f8:2e:3a:32:b7:
90:a5:f6:84:c6:b8:ca:01:a7:6b:17:40:1c:3f:32:
68:e6:8f:a2:43:ad:1a:46:08:dc:b7:75:b3:8b:bd:
fd:35:8b:05:d4:f3:70:b7:ee:61:b4:b6:a9:a8:7a:
11:e1:61:ba:7b:ba:7c:a0:7d:5c:b0:31:77:cc:72:
4c:ad:bc:3e:e2:00:21:66:7c:c8:b7:71:cc:98:42:
8d:c0:64:4b:51:f9:c4:89:3d:ec:0a:42:f7:e6:4a:
0e:3e:b1:78:e8:03:66:f2:6d:4b:6c:5a:e6:4e:9f:
f5:df:17:28:83:27:8a:70:c7:ee:60:16:28:40:43:
de:67:f6:19:fd:2e:b5:1e:a2:0f:72:75:9b:eb:b1:
22:73:91:75:54:20:48:b9:f8:53:1c:4f:22:66:37:
11:a6:59:cf:72:06:28:1f:af:4b:d5:e4:ce:47:69:
27:7f:21:ff:ba:28:44:44:f0:f9:e0:e1:55:33:1d:
ff:b8:73:ae:10:6b:a5:58:1f:8c:d4:34:c7:7e:64:
93:66:69:09:7c:76:4c:03:91:35:7e:aa:e4:ca:c4:
30:2d:90:3e:4c:a1:c7:a1:c2:c3:e5:83:d7:cc:1c:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:16:77:C2:8D:5C:F5:72:44:5E:B0:E3:15:51:C9:1F:74:C7:F0:41
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f9:52:85:6a:f2:9b:20:75:0d:76:58:2f:ec:6b:b8:8f:db:
46:cc:da:0f:6c:64:88:1b:d0:d7:7e:2a:ce:aa:89:2c:3b:4c:
ea:31:eb:85:80:46:6f:3d:c2:69:03:cb:6b:95:b6:61:c5:9e:
98:8e:10:3b:be:e3:e1:86:a6:f1:da:96:f8:6b:23:b4:f0:d8:
10:b7:ef:87:2e:5e:86:8f:eb:95:ba:81:5e:4d:51:7b:8d:87:
4d:34:ae:40:0f:7c:c2:02:ae:f4:5f:1e:c4:eb:23:cf:64:92:
43:d7:63:dc:d8:bf:f4:af:83:f5:cf:9c:5a:c3:6e:25:e5:96:
35:ab:0b:10:54:d8:4e:8f:0f:8c:f8:cc:a9:35:78:e3:2e:ec:
31:1d:3e:ee:ae:bb:51:11:c9:8e:1e:55:13:bf:36:da:a2:18:
3b:ec:ed:3b:1b:dd:ae:69:f0:ee:0c:d4:00:1f:16:28:6b:8e:
d1:60:0e:c5:32:c6:d4:98:85:f6:95:35:c2:b7:56:22:ca:20:
23:2c:c9:9f:70:d9:76:49:cf:c6:53:ef:8a:10:b5:0c:40:6a:
56:96:58:4b:fb:58:10:d0:1d:9a:bd:d0:fe:87:04:05:7d:52:
1b:a8:77:b4:b4:0f:b3:69:53:df:82:8f:f9:62:3d:58:71:50:
9a:c2:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:34 2026 by rpki-client