Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: ilWIheML+6W4ophb5yEpDxAXxkiUAmp95vsj7Zy5YqQ=
Subject key identifier: 81:05:81:39:1B:3D:CD:60:0F:E9:AA:05:99:46:CD:14:89:99:AC:7F
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 019CAC472FC8AA43D053D931F03B2297EA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 05D5
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: DnJ7tAwGQiDP7/7GnnhGAb9/GCKBakaELPU8dx73w28=)
2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2f:c8:aa:43:d0:53:d9:31:f0:3b:22:97:ea:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=810581391b3dcd600fe9aa059946cd148999ac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:52:c3:d6:24:6f:dc:73:6d:d1:c6:37:51:
e6:9b:d4:e2:69:29:3e:36:94:0b:ee:65:f4:de:47:
23:28:8c:af:61:55:ba:45:32:f6:0a:11:81:2f:3b:
81:e0:9e:5c:12:3f:e2:8a:b1:9f:41:f1:33:d6:da:
5e:d7:ae:9e:1a:d5:89:5c:d3:68:04:db:3c:d9:d2:
2a:f2:02:79:ed:f2:78:b1:9c:12:c8:a6:dd:b9:62:
44:fc:63:31:16:3e:50:e0:fa:52:a8:b7:35:9d:d9:
cd:15:60:10:7e:87:2e:64:1d:ff:bf:f7:bf:44:4d:
bb:3c:e5:3b:94:e5:bd:fc:d4:61:8a:36:9e:f1:f2:
49:6a:62:7b:26:72:98:5c:a0:10:7c:7a:a3:5b:a8:
45:05:97:6a:02:6f:22:aa:87:2a:c8:27:8a:5e:30:
66:a6:c7:42:a6:06:44:57:cb:5a:05:c4:04:0d:e6:
8c:05:01:d9:a9:a4:a6:3c:4d:4f:3b:d6:dc:38:0e:
1c:1f:0f:1e:53:c3:06:06:a5:3f:36:63:f4:64:1c:
ef:22:81:2b:b9:05:8a:9a:6a:c2:39:15:04:67:5f:
41:17:04:e1:8b:e2:12:ce:b8:03:8f:41:c9:0e:c2:
53:4e:ca:af:e6:8d:3b:83:11:76:dc:32:4e:9f:89:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:81:39:1B:3D:CD:60:0F:E9:AA:05:99:46:CD:14:89:99:AC:7F
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:15:a3:da:08:63:06:5c:19:c6:21:e1:03:1c:6a:63:57:b3:
f5:d3:8c:61:f4:b0:9a:72:01:ad:f9:11:92:98:d3:48:ef:df:
81:24:40:21:ac:80:ce:39:19:f0:d9:6c:69:0a:ef:64:e1:89:
88:1a:5d:14:f7:36:e3:1b:5c:55:d1:9e:20:6f:d1:6b:9c:f5:
41:00:48:0b:7b:b1:1a:9b:0b:e8:c7:a1:e4:3b:61:ad:f6:da:
ac:72:28:c7:ba:08:e8:9f:e3:a9:ec:fb:97:7d:69:3a:a4:b2:
3c:75:54:d0:dc:6a:09:1b:92:fa:be:7b:72:b8:ed:af:dc:11:
d1:7e:8f:55:ea:4b:77:e0:de:17:1c:55:bb:a3:f8:be:e0:e7:
a1:63:ec:13:93:cb:aa:53:c9:d9:c9:33:cf:e5:34:60:eb:ea:
48:84:ae:52:2b:07:d9:f7:7b:10:f5:5b:a4:73:41:8f:0d:e1:
2e:a7:1a:77:83:87:f1:98:2f:91:67:41:4c:e8:0d:e1:1a:92:
a3:d9:22:82:6c:9e:bd:12:23:01:75:fc:c9:d3:ce:2f:8b:be:
95:e7:aa:1c:54:b8:fb:aa:b7:ab:f1:d3:71:ca:7a:24:9f:ff:
8e:7e:a2:1a:aa:5c:60:16:52:cc:f3:93:6d:1e:f1:54:59:4b:
d9:c5:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:13 2026 by rpki-client