Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: I0OPap+BK0sYMdyk3JUnuTMMBwpQg+ECeq1xHQk391E=
Subject key identifier: D1:A6:0D:BF:20:71:46:19:68:B4:C0:21:14:62:7F:65:56:B5:A3:DE
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019FA86217A96DC75ED048FF7FAADFC15137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 11:00:28 +0000
Manifest this update: Tue 28 Jul 2026 11:00:28 +0000
Manifest next update: Wed 29 Jul 2026 11:00:28 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: teOZYDIjXUxmD3sxBnPwVdTFhoceJwESZb+JDJj0S6E=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:17:a9:6d:c7:5e:d0:48:ff:7f:aa:df:c1:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jul 28 11:00:28 2026 GMT
Not After : Jul 29 11:00:28 2026 GMT
Subject: CN=d1a60dbf2071461968b4c02114627f6556b5a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:1e:e8:78:65:0c:71:ea:f3:0b:1b:be:46:
bd:01:a7:bb:94:26:fb:15:cc:57:81:f4:1e:0a:f0:
06:e8:46:5a:64:dd:98:18:e1:a2:b0:30:ac:a2:fe:
32:54:da:dc:42:4d:05:14:57:98:0b:d1:a6:69:ce:
6d:09:e9:6a:ec:7e:7b:26:57:f5:12:29:2f:74:10:
5a:21:03:77:bb:76:d9:12:8e:d8:94:44:50:76:49:
4a:7f:cb:e7:8a:5b:8b:62:20:37:0d:60:60:3c:95:
3f:64:1e:87:00:7c:3f:96:a3:2c:e9:87:d3:fb:9b:
1b:3a:dc:07:6b:8d:4e:2b:78:be:d3:84:b0:9c:8c:
29:3a:36:fe:cb:0e:f9:37:aa:07:1e:9b:95:0a:5c:
b9:b5:4b:cf:60:d3:61:25:c0:be:8c:ea:84:cf:e8:
72:b2:bd:6b:ef:0f:0a:d4:9d:7f:f1:36:1b:5f:2a:
a5:65:e6:4b:65:eb:fd:b6:73:10:8b:00:2c:81:2c:
fe:c7:2c:fa:ba:77:45:8e:61:f3:f2:74:60:30:f9:
8e:84:1e:3d:9f:6e:07:10:70:a6:2f:13:f7:23:7a:
1e:bd:ed:50:03:ad:43:61:ea:db:f8:ae:3b:57:17:
14:bb:94:c8:40:2e:67:44:d7:94:d9:f1:99:4e:83:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:0D:BF:20:71:46:19:68:B4:C0:21:14:62:7F:65:56:B5:A3:DE
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:73:ea:3a:38:a2:70:74:02:5e:cd:95:72:98:2d:26:fe:
0c:37:f1:9f:0f:77:8a:38:bc:6d:87:7e:cf:71:0b:af:e2:c6:
b5:fd:0d:7a:5c:d5:57:ee:9f:02:c2:e3:ea:1a:d4:5e:fd:45:
9b:31:88:75:37:8d:14:d7:a8:e3:d8:88:b9:64:94:65:7e:4f:
65:14:22:94:dc:9f:76:09:fe:0e:bc:bf:64:12:60:73:5b:24:
37:00:b8:38:4b:85:c9:22:c4:50:70:c3:a1:04:0e:05:2b:1d:
73:fe:af:79:53:47:46:79:af:9b:19:71:3d:fa:fd:b0:d8:49:
8b:39:82:0e:25:a9:ee:74:09:77:ff:15:f3:e5:e1:49:40:49:
0c:64:1a:81:20:6f:8b:9d:3c:29:8e:23:df:95:9e:21:be:78:
22:b4:20:d4:3a:dc:c0:0a:54:8d:57:63:98:41:b1:ee:6e:e4:
e4:06:d0:d0:4c:bf:b2:56:8c:7e:18:25:e7:b0:ed:01:67:14:
fa:4a:7d:07:f9:be:64:fa:ac:aa:78:db:5d:e6:f1:47:47:f9:
31:2d:02:1f:73:90:d9:13:5b:84:0a:2a:d5:7f:2d:3a:5d:d9:
1f:a9:e9:a7:9d:82:af:1e:1a:2f:bf:9d:13:63:aa:28:bb:63:
fe:7f:a0:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYhepbcde0Ej/f6rfwVE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4
NTgyNmUwHhcNMjYwNzI4MTEwMDI4WhcNMjYwNzI5MTEwMDI4WjAzMTEwLwYDVQQD
EyhkMWE2MGRiZjIwNzE0NjE5NjhiNGMwMjExNDYyN2Y2NTU2YjVhM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Ye6HhlDHHq8wsbvka9Aae7lCb7
FcxXgfQeCvAG6EZaZN2YGOGisDCsov4yVNrcQk0FFFeYC9Gmac5tCelq7H57Jlf1
EikvdBBaIQN3u3bZEo7YlERQdklKf8vniluLYiA3DWBgPJU/ZB6HAHw/lqMs6YfT
+5sbOtwHa41OK3i+04SwnIwpOjb+yw75N6oHHpuVCly5tUvPYNNhJcC+jOqEz+hy
sr1r7w8K1J1/8TYbXyqlZeZLZev9tnMQiwAsgSz+xyz6undFjmHz8nRgMPmOhB49
n24HEHCmLxP3I3oeve1QA61DYerb+K47VxcUu5TIQC5nRNeU2fGZToO2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGmDb8gcUYZaLTAIRRif2VWtaPeMB8GA1UdIwQY
MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut
OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx
LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB5z6jo4
onB0Al7NlXKYLSb+DDfxnw93iji8bYd+z3ELr+LGtf0NelzVV+6fAsLj6hrUXv1F
mzGIdTeNFNeo49iIuWSUZX5PZRQilNyfdgn+Dry/ZBJgc1skNwC4OEuFySLEUHDD
oQQOBSsdc/6veVNHRnmvmxlxPfr9sNhJizmCDiWp7nQJd/8V8+XhSUBJDGQagSBv
i508KY4j35WeIb54IrQg1DrcwApUjVdjmEGx7m7k5AbQ0Ey/slaMfhgl57DtAWcU
+kp9B/m+ZPqsqnjbXebxR0f5MS0CH3OQ2RNbhAoq1X8tOl3ZH6npp52Crx4aL7+d
E2OqKLtj/n+gxg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:21 2026 by rpki-client