Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: 6GXREjKkzw1qUPcomgBlnZppwgGgnaWG2nevfpfCo+U=
Subject key identifier: C7:E5:98:57:12:B6:23:CD:D4:A3:AB:A6:9F:49:41:E4:3F:B9:3E:8A
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019CAA8F729E9102389D5392E99CBC1D1E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: 8-89J-VDYbXo5QJ6KxQpyalUIfY.roa (hash: 6ikDySot4sJSAZPqWZ7X36wEO/TGRKEez0qZEAZB7js=)
2: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: YA1KDlEmiBco2R7unDFIyxuEbNPd0KeV5o1K2Tbk6fA=)
3: L8AVKGa-B0wTU4PbL9QcxbYeJJk.roa (hash: o6V+qlxfeOpUo6BdN79h+Rr8zer3sNJyIWZIjdcrgXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:72:9e:91:02:38:9d:53:92:e9:9c:bc:1d:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=c7e5985712b623cdd4a3aba69f4941e43fb93e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:ba:24:48:b5:7b:c5:b1:62:21:19:7d:66:
c3:c5:c1:2d:82:3b:f6:19:f8:61:ce:78:b9:82:a8:
79:68:1b:7b:a5:56:c8:71:df:fb:59:86:60:be:60:
16:e4:ef:d6:7f:e4:30:75:c0:ed:fd:20:34:08:18:
2a:02:03:6a:fe:eb:37:e4:a7:37:0b:a5:e1:eb:97:
90:88:df:b9:7b:c4:7c:ea:4f:cf:d9:87:b0:f5:78:
d7:dd:d8:db:ea:21:01:83:a6:b6:23:cd:1c:8f:c4:
09:15:ec:99:53:87:35:20:71:86:67:71:d9:62:29:
14:ac:e7:95:39:73:44:dd:4d:10:f5:9e:aa:a2:df:
ca:6e:e9:06:30:5d:9a:13:85:04:0a:96:38:da:03:
f0:7d:6f:fc:fa:8e:ca:98:33:fb:7f:1a:e7:54:38:
c0:bb:5f:3c:90:b1:c1:2d:0c:73:d5:d2:28:6e:4e:
78:e7:90:94:24:e9:ad:60:62:59:fa:de:b3:ce:2b:
af:b3:ce:54:48:a4:53:14:87:16:aa:31:d7:fe:47:
a0:c9:b4:e1:27:75:1f:f2:8b:d4:92:97:7f:ea:40:
b1:76:b6:03:48:08:9f:ce:5b:1e:84:cf:92:c0:47:
9b:6f:76:ff:8b:29:99:4d:cb:d6:6a:cb:c8:21:61:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:98:57:12:B6:23:CD:D4:A3:AB:A6:9F:49:41:E4:3F:B9:3E:8A
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:80:dc:2d:5d:87:d7:99:60:15:61:70:2e:6f:ed:11:cc:a9:
b1:37:36:bf:18:33:f8:53:ad:67:e8:03:8b:53:13:e8:be:5d:
8b:88:1e:6c:12:27:ea:b6:ad:75:27:af:46:5a:82:20:31:10:
55:cd:09:b2:bb:f8:9c:e4:e1:27:4a:de:34:8b:dd:f0:3c:91:
51:5a:b1:0a:0b:1c:e3:58:c1:9f:1b:f1:94:ea:82:01:18:92:
98:74:dc:30:f0:45:4e:37:e8:89:48:ae:0b:3e:54:f0:98:67:
66:5b:4e:60:e3:a2:a6:33:5f:1b:2e:d9:b9:1a:60:84:6a:b6:
76:3a:55:c4:e2:36:82:aa:bd:4d:51:c0:5e:e4:ce:87:e0:ad:
e7:c5:9f:79:4c:62:b5:0d:48:f5:ef:60:1a:16:03:2a:9b:48:
1f:55:88:04:f5:44:69:56:8f:ee:7a:38:b5:12:4b:85:4e:c1:
8a:ff:d3:1c:18:f2:7f:52:6b:b2:05:61:70:65:3a:29:a8:8a:
f5:48:df:91:25:bf:4a:47:d3:5e:59:1c:0d:53:45:c5:5f:da:
99:ed:53:aa:80:07:49:ff:da:9a:00:19:68:48:77:33:67:d9:
7e:60:1a:8d:f9:5a:1c:17:a9:54:a8:6f:89:1f:1d:fd:f1:07:
99:62:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:12 2026 by rpki-client