
$ rpki-client -vvvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier: NswJS3AJGHKYf/h6rgnzV/rN8g9/SouZ5Xjy4BG8lXk=
Subject key identifier: 2F:94:E1:0B:38:CC:D3:80:95:71:1C:AE:EF:A3:34:75:56:E5:E1:20
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial: 78E061C98A9B03C3CA00DBED1F3F104D72537091
Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number: 0458
Signing time: Sun 27 Sep 2026 10:22:47 +0000
Manifest this update: Sun 27 Sep 2026 10:17:47 +0000
Manifest next update: Mon 28 Sep 2026 13:46:47 +0000
Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: FpmP7dXq+jMETabOgjWBN6amxfemjzyGRySE5KbEIN0=)
Validation: OK
Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e0:61:c9:8a:9b:03:c3:ca:00:db:ed:1f:3f:10:4d:72:53:70:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Validity
Not Before: Sep 27 10:17:47 2026 GMT
Not After : Sep 28 13:46:47 2026 GMT
Subject: CN=2F94E10B38CCD38095711CAEEFA3347556E5E120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:36:5a:c1:6d:f1:22:5e:45:00:b0:e9:b1:
fe:61:e9:b9:f0:b2:64:36:10:a7:9c:d3:67:99:2d:
f7:01:d9:ce:0a:3c:f2:f1:5e:be:bd:4a:01:61:81:
d1:3e:b0:a8:16:0d:49:f0:6b:fe:71:70:d8:f5:bc:
26:f0:be:33:29:6e:7c:a7:d6:06:5e:dd:9d:61:c8:
a7:e3:47:e8:74:b7:40:f7:6c:fa:db:61:36:c1:ec:
23:c1:f7:8f:9c:cf:b8:05:93:73:a0:c7:d2:ec:53:
d6:c4:dd:60:6e:cc:c5:8e:42:a0:ef:83:b6:8f:e0:
49:e6:26:fb:41:db:5b:4b:34:65:b4:d6:f9:31:7c:
3b:d4:5d:60:1e:d6:6c:cf:8c:c6:9a:71:2c:1e:7b:
61:49:73:55:81:1c:9c:93:68:06:ce:30:66:b8:af:
da:40:2d:32:2e:b9:c8:0d:1c:6a:8d:b9:c1:5b:40:
55:21:08:27:40:6f:84:29:fd:19:7e:1e:92:b8:4b:
65:06:dc:e6:eb:98:a2:28:38:ba:70:5f:6b:e1:2f:
bb:ae:e4:bc:05:d4:31:dc:39:dd:98:9d:91:43:43:
60:84:55:30:a4:58:45:b2:fe:a7:83:2b:dc:7b:84:
04:21:8e:78:2a:83:70:94:2e:b1:1f:09:9e:63:f3:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:E1:0B:38:CC:D3:80:95:71:1C:AE:EF:A3:34:75:56:E5:E1:20
X509v3 Authority Key Identifier:
keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject Information Access:
Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:77:71:65:66:53:32:50:c0:71:34:0e:1d:10:12:59:71:
14:a0:40:36:59:ea:8e:f1:9c:5b:b4:b9:65:5b:cd:ee:ac:13:
e7:ed:29:c3:4d:d3:2d:28:bd:35:fa:d5:93:2f:ee:a9:24:16:
c7:a0:a4:d8:8a:15:70:33:46:04:a2:04:51:7a:39:63:b6:5b:
00:f4:2e:62:2a:e8:17:9d:b5:f8:40:b7:f2:53:9d:7b:2f:bc:
6d:56:f7:63:3f:6a:13:67:fb:59:5b:76:8f:e7:9b:06:a6:1a:
b2:c7:74:71:3a:c9:aa:e5:cd:6a:40:96:33:5e:71:ff:8a:0d:
ad:ac:b2:eb:ce:18:5f:34:72:68:47:ea:a7:c3:3a:36:2e:77:
0d:1b:b5:de:b6:f9:84:38:72:73:b2:b4:e5:19:b5:ac:28:9a:
cf:78:48:16:2f:ca:ea:88:03:14:a5:cd:20:4a:4f:d7:a4:de:
db:b7:7d:de:69:01:e9:6c:cf:9a:2a:34:64:da:e5:8e:01:90:
02:85:1b:f8:27:30:61:bd:4b:89:84:f2:96:d5:26:6e:9d:e6:
87:82:7e:67:64:ac:91:1a:d3:7a:ed:ae:e1:4a:ae:cf:20:b5:
bc:fb:b7:65:d4:22:00:5a:13:cb:67:8c:d0:e3:4a:c6:6f:4e:
43:61:bc:45
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUeOBhyYqbA8PKANvtHz8QTXJTcJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2
MEU1MjM4OTAeFw0yNjA5MjcxMDE3NDdaFw0yNjA5MjgxMzQ2NDdaMDMxMTAvBgNV
BAMTKDJGOTRFMTBCMzhDQ0QzODA5NTcxMUNBRUVGQTMzNDc1NTZFNUUxMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsjZawW3xIl5FALDpsf5h6bnw
smQ2EKec02eZLfcB2c4KPPLxXr69SgFhgdE+sKgWDUnwa/5xcNj1vCbwvjMpbnyn
1gZe3Z1hyKfjR+h0t0D3bPrbYTbB7CPB94+cz7gFk3Ogx9LsU9bE3WBuzMWOQqDv
g7aP4EnmJvtB21tLNGW01vkxfDvUXWAe1mzPjMaacSwee2FJc1WBHJyTaAbOMGa4
r9pALTIuucgNHGqNucFbQFUhCCdAb4Qp/Rl+HpK4S2UG3ObrmKIoOLpwX2vhL7uu
5LwF1DHcOd2YnZFDQ2CEVTCkWEWy/qeDK9x7hAQhjngqg3CULrEfCZ5j8z47AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUL5ThCzjM04CVcRyu76M0dVbl4SAwHwYDVR0j
BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud
HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu
bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0
MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF
BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l
dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5
LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t
ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv
My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAiqx3cWVmUzJQwHE0Dh0QEllxFKBANlnqjvGcW7S5ZVvN7qwT5+0pw03T
LSi9NfrVky/uqSQWx6Ck2IoVcDNGBKIEUXo5Y7ZbAPQuYiroF521+EC38lOdey+8
bVb3Yz9qE2f7WVt2j+ebBqYassd0cTrJquXNakCWM15x/4oNrayy684YXzRyaEfq
p8M6Ni53DRu13rb5hDhyc7K05Rm1rCiaz3hIFi/K6ogDFKXNIEpP16Te27d93mkB
6WzPmio0ZNrljgGQAoUb+CcwYb1LiYTyltUmbp3mh4J+Z2SskRrTeu2u4UquzyC1
vPu3ZdQiAFoTy2eM0ONKxm9OQ2G8RQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:42:20 2026 by rpki-client