Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: YAbhmJt0YrMV+5kUS3HBYe5U15JjBvszHVpKEGcPYDo=
Subject key identifier: AE:8E:E2:66:69:92:D1:FC:D0:D7:F0:9E:CD:3E:D3:C2:AF:B7:35:0A
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 019D992BA552B2A6D4F017E523662204B29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: 5Uhlt0jHUNJ9KyF0FiuhaeGuwbY/hbLEqUv7IpYTg0w=)
2: ixuWn-b3XpJ3SMQCrfqgImVGuwg.roa (hash: g9bCpFsdakOSR6mQCT+LLlrF/4rAUtsRvw9kKEgItuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a5:52:b2:a6:d4:f0:17:e5:23:66:22:04:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=ae8ee2666992d1fcd0d7f09ecd3ed3c2afb7350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:33:e2:c7:93:cb:3f:84:a7:54:37:3c:5a:
52:4b:83:8c:b9:41:23:c4:68:28:ad:84:76:0d:75:
89:a0:49:fd:c1:a1:bc:06:06:b9:d0:5a:14:ae:89:
bb:f8:66:79:44:ec:00:b9:d5:e9:2b:53:f7:36:17:
1a:b0:cf:b0:3c:80:2f:89:6f:61:b5:78:35:ca:14:
29:5e:0b:55:73:ab:c8:82:b4:79:79:ec:c2:71:e1:
17:c3:07:cf:82:45:74:fb:cf:d9:0d:84:5a:42:fc:
7a:c0:62:b7:7e:61:16:74:06:fe:48:41:b3:e9:74:
d4:d7:28:5e:8a:3a:c8:32:59:d2:76:5a:70:52:d0:
bf:1f:92:8d:69:f8:6b:fa:a4:ec:22:7c:96:b6:3c:
29:a9:e6:57:ae:06:56:f6:f6:45:3d:33:4a:e8:45:
54:e9:d9:0e:37:25:17:98:4e:d7:02:c1:94:91:1d:
72:3b:66:18:8e:81:37:36:a9:6c:dc:28:1d:c8:35:
31:df:f9:9f:7a:e5:f8:8f:bb:03:97:c8:12:83:b3:
0b:a8:90:d7:97:60:f8:d1:52:8d:77:c3:5b:fb:2e:
62:cc:00:70:3c:7b:54:1b:54:31:49:4c:8b:d5:8e:
f2:27:c1:1c:aa:ce:d2:7c:0b:79:b5:90:cc:dd:6f:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8E:E2:66:69:92:D1:FC:D0:D7:F0:9E:CD:3E:D3:C2:AF:B7:35:0A
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:ed:f2:22:9f:49:ac:38:8d:d2:cf:82:64:fb:d8:c5:28:
e2:ed:ab:7a:d6:05:31:c7:fa:e7:b6:df:bf:de:4f:b7:4d:93:
39:dd:a4:9a:e4:6c:7c:2d:e5:b2:93:39:06:1d:67:bd:28:b8:
12:3a:13:0d:db:14:97:d8:62:27:ac:f0:60:3d:7b:26:f0:1a:
17:e8:55:b7:44:62:14:55:0d:8e:f1:94:97:48:ae:c1:75:9b:
c2:43:ab:5d:8b:e4:b4:78:63:fe:15:1b:79:6a:74:0a:2a:9b:
1d:3c:c9:8a:a9:2b:af:a0:bf:11:ad:c6:8b:00:cd:ba:dd:2e:
8e:ff:14:f4:4a:74:34:a0:28:42:f0:25:37:36:b7:bf:c1:cb:
c9:dc:40:72:fc:b2:85:4e:48:f5:c9:cd:a5:78:b3:fa:69:89:
13:45:ef:7c:31:ac:da:da:91:5b:7e:e5:fc:ed:4f:33:e0:c5:
37:04:05:e1:4d:eb:e0:72:91:38:cf:99:48:37:c6:ba:55:dc:
3a:a5:0f:87:11:de:91:74:ac:e2:26:72:92:69:b4:a9:73:cc:
f3:65:c8:47:e3:dc:58:45:20:32:b6:1e:3b:63:65:96:de:25:
99:45:35:bd:e5:dc:ce:28:ed:e1:4c:87:e8:2f:69:76:24:cf:
07:b9:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:33 2026 by rpki-client