Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: emNPiL6yER2EKbhL9QjvhOiVkAChbDQL4C3cNZP2e4w=
Subject key identifier: AE:15:2E:64:99:54:3A:58:71:6E:F7:C5:4B:6C:45:63:42:75:7E:4A
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019CA9B3786D07DE9C25D77335B4F645D243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 14:00:37 +0000
Manifest this update: Sun 01 Mar 2026 14:00:37 +0000
Manifest next update: Mon 02 Mar 2026 14:00:37 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: wPAmYH8COhO1IkojPTBcZVth5FgPZHcosOc+KNmX4Wk=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:78:6d:07:de:9c:25:d7:73:35:b4:f6:45:d2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Mar 1 14:00:37 2026 GMT
Not After : Mar 2 14:00:37 2026 GMT
Subject: CN=ae152e6499543a58716ef7c54b6c456342757e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:31:52:a7:34:99:65:2a:60:f1:13:34:95:
5e:b8:1f:e4:67:94:8d:0f:d4:ce:28:85:85:ef:09:
6c:91:7b:4d:8a:5a:80:94:96:c7:92:6f:22:26:6c:
49:c4:2c:49:6c:c6:75:3c:6d:d9:80:3a:1b:92:10:
cf:ab:20:18:95:a7:da:72:66:14:92:38:eb:c6:8b:
09:5f:3d:bd:40:85:50:bf:c2:14:88:2a:2a:ac:ab:
e1:51:0f:c4:b0:48:27:0a:3c:bb:54:ab:b8:ac:94:
96:9e:92:a8:bc:9b:aa:70:c7:66:f5:36:19:a4:e0:
67:65:20:c1:a5:ed:ae:d2:0d:21:8e:cc:79:9a:e2:
d0:2d:c7:9f:10:17:15:5c:fd:51:41:24:36:cb:b1:
2c:f4:d6:e2:f9:25:62:89:4c:1d:5b:04:0b:d1:a1:
3c:6b:ac:ec:63:ee:10:8e:b3:75:b9:fd:e8:b2:21:
9a:e0:b6:8e:be:ca:62:7c:d6:1b:2f:58:f0:ba:34:
5e:7b:e2:39:ed:7b:28:40:e2:50:dc:04:a7:80:60:
94:32:2e:58:10:84:4b:45:83:ff:8a:07:30:24:b8:
4b:df:86:b3:d5:d5:50:43:30:b0:07:73:ef:02:6c:
8a:c2:e5:29:36:5c:92:02:2d:35:d6:0c:82:39:94:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:2E:64:99:54:3A:58:71:6E:F7:C5:4B:6C:45:63:42:75:7E:4A
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:47:58:32:c4:d9:6a:cb:66:f8:0d:91:48:59:3a:04:59:12:
96:63:f3:59:ce:2f:0a:25:3c:b7:8b:c9:bc:3d:77:09:d7:5d:
44:a1:d2:09:ed:54:ec:0e:6e:ba:7c:b0:39:4b:04:a5:3a:05:
c2:7a:f9:6b:83:af:8b:06:09:cd:db:1e:85:27:12:20:2c:6a:
76:68:c4:60:46:08:de:8a:e2:20:52:6a:ab:13:eb:df:df:53:
65:1b:6b:95:e8:93:0b:5a:75:4d:63:42:84:cd:81:ac:28:ca:
c6:eb:27:9f:cb:46:d6:9c:c1:18:d4:08:a1:0f:46:3c:07:3c:
8e:a7:5e:2b:26:6e:44:80:04:09:6c:e0:74:dd:a5:f1:33:ff:
00:22:e0:54:1e:a8:6f:62:33:fe:48:bf:e2:b1:87:d3:85:68:
44:c2:03:b2:0b:82:8a:0e:a4:4e:02:fb:ca:4e:3f:6e:41:71:
b7:22:42:f9:fc:30:6d:8b:e4:ac:15:06:c9:de:64:25:ac:be:
f1:dc:69:37:8e:d3:fb:cb:f9:41:29:32:42:1c:79:51:22:d4:
e5:1b:43:a8:71:52:50:b3:00:c8:9c:7b:11:de:60:fd:e5:9b:
74:48:30:f4:d9:2f:aa:88:bc:9a:e7:b3:6d:ec:1f:81:10:ca:
50:7d:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:22 2026 by rpki-client