Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: Nih0qcPIvRNdGCnmhJMXbxSa8QVh6PDDjHoPK22NdEQ=
Subject key identifier: 14:DD:15:4B:93:A4:7C:D4:AA:E5:35:4D:DD:48:DA:0C:1B:E4:C9:19
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019E1ED9A5532B41D639C35C82798BE598E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 01:00:40 +0000
Manifest this update: Wed 13 May 2026 01:00:40 +0000
Manifest next update: Thu 14 May 2026 01:00:40 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: lRfeeQALHXbP5250P/lxhanddmFqjmuEsEzYZghXkr0=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a5:53:2b:41:d6:39:c3:5c:82:79:8b:e5:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: May 13 01:00:40 2026 GMT
Not After : May 14 01:00:40 2026 GMT
Subject: CN=14dd154b93a47cd4aae5354ddd48da0c1be4c919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:cc:63:7f:ba:ab:48:62:c8:48:e6:35:fe:
f1:31:d3:27:6d:98:17:25:74:84:56:28:3d:fe:dc:
f6:96:fd:b4:18:f8:8a:54:bc:2c:2f:be:8c:39:e7:
16:e8:64:da:64:f7:07:40:75:da:fd:26:63:89:98:
f0:5d:be:f2:be:71:04:19:f0:5f:70:c1:a8:bf:00:
73:9e:65:48:84:75:3c:35:e8:33:c2:3d:ba:26:8c:
31:f6:96:d1:03:d0:ce:bd:5d:87:b1:14:b6:e4:09:
c9:cb:8d:d3:a2:ef:f2:cf:50:e8:b8:22:28:5e:ec:
0a:08:b5:c0:47:53:f4:30:3a:7b:26:98:9f:08:69:
51:07:e8:ce:04:c0:1b:f0:ac:6c:48:60:66:79:6c:
89:9f:44:07:45:12:d7:a8:7b:5e:93:80:b0:dc:2b:
57:0a:97:97:16:8c:39:fb:0d:ca:c7:87:22:c6:e8:
9c:03:a3:70:64:9d:d9:cf:82:b0:16:b7:80:d5:9c:
1b:77:a2:6b:60:10:f3:81:9f:c4:13:42:32:05:24:
fa:66:c2:6c:38:03:1b:6e:5b:ee:54:9a:25:d0:5f:
6f:9a:85:3c:2c:1b:74:8a:dd:74:a8:d1:25:82:be:
51:f6:4e:00:30:fc:2d:4a:fd:20:53:3b:eb:54:73:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:15:4B:93:A4:7C:D4:AA:E5:35:4D:DD:48:DA:0C:1B:E4:C9:19
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7a:2a:16:3f:2a:12:ba:e9:65:d5:44:1d:89:9e:80:38:aa:
ba:d5:a4:f1:0f:53:a2:4d:db:fb:96:59:c7:9d:18:e0:d2:f3:
86:c8:a6:7a:69:dc:b7:39:bd:6d:03:61:38:d2:c9:4e:69:2d:
75:8b:f6:85:b5:14:83:55:36:6d:48:79:61:d8:05:83:78:0a:
5c:b5:7c:9b:79:78:3a:87:75:f7:bd:dd:5e:ff:7b:05:b0:b0:
ef:b2:1a:7e:77:52:67:c2:c7:0f:14:b0:ec:8e:06:ab:a3:e4:
71:97:d7:b5:66:da:99:8d:2b:d5:c5:53:25:41:0b:62:c7:e5:
1f:e8:db:80:ff:8e:42:84:83:b8:86:8a:c2:7f:26:3e:b5:61:
06:f2:7d:13:78:fa:2a:6c:ba:77:3c:fa:fb:8b:16:9c:c3:88:
80:00:15:75:61:33:b2:8f:c9:db:1c:57:ab:7d:a3:56:09:9f:
6f:36:6a:d9:0a:f5:41:9e:f7:51:7d:c3:e7:7c:19:a4:d6:bb:
2c:78:86:5b:ed:28:e4:f5:cd:f0:2e:bf:c2:a8:66:a9:91:f7:
f1:c8:00:d4:73:9d:8a:ea:56:11:60:b3:14:79:2c:2e:6a:4b:
72:d2:0f:c3:90:85:3e:b9:55:95:cb:1c:0c:d0:45:d4:83:3b:
42:9a:ad:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2aVTK0HWOcNcgnmL5ZjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjYwNTEzMDEwMDQwWhcNMjYwNTE0MDEwMDQwWjAzMTEwLwYDVQQD
EygxNGRkMTU0YjkzYTQ3Y2Q0YWFlNTM1NGRkZDQ4ZGEwYzFiZTRjOTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8XMY3+6q0hiyEjmNf7xMdMnbZgX
JXSEVig9/tz2lv20GPiKVLwsL76MOecW6GTaZPcHQHXa/SZjiZjwXb7yvnEEGfBf
cMGovwBznmVIhHU8Negzwj26Jowx9pbRA9DOvV2HsRS25AnJy43Tou/yz1DouCIo
XuwKCLXAR1P0MDp7JpifCGlRB+jOBMAb8KxsSGBmeWyJn0QHRRLXqHtek4Cw3CtX
CpeXFow5+w3Kx4cixuicA6NwZJ3Zz4KwFreA1Zwbd6JrYBDzgZ/EE0IyBST6ZsJs
OAMbblvuVJol0F9vmoU8LBt0it10qNElgr5R9k4AMPwtSv0gUzvrVHObwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTdFUuTpHzUquU1Td1I2gwb5MkZMB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXoqFj8q
ErrpZdVEHYmegDiqutWk8Q9Tok3b+5ZZx50Y4NLzhsimemnctzm9bQNhONLJTmkt
dYv2hbUUg1U2bUh5YdgFg3gKXLV8m3l4Ood1973dXv97BbCw77IafndSZ8LHDxSw
7I4Gq6PkcZfXtWbamY0r1cVTJUELYsflH+jbgP+OQoSDuIaKwn8mPrVhBvJ9E3j6
Kmy6dzz6+4sWnMOIgAAVdWEzso/J2xxXq32jVgmfbzZq2Qr1QZ73UX3D53wZpNa7
LHiGW+0o5PXN8C6/wqhmqZH38cgA1HOdiupWEWCzFHksLmpLctIPw5CFPrlVlcsc
DNBF1IM7QpqtdQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:17:32 2026 by rpki-client