Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: GIyD/F5Byw2wVHtYfv8t4/z+MITUkc/tC39Y0RG6bwg=
Subject key identifier: DC:D0:5B:C3:5A:8B:67:B2:FF:F3:2D:DE:84:D2:25:96:9D:BB:C3:76
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 01A0DBDF8FD9B31BD4DAEFF0898D1D685454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 04:00:56 +0000
Manifest this update: Sat 26 Sep 2026 04:00:56 +0000
Manifest next update: Sun 27 Sep 2026 04:00:56 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: n6GVkK4bRB1/1hmsa3NIjLFW4fsu29666ffMjaQoFXw=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:8f:d9:b3:1b:d4:da:ef:f0:89:8d:1d:68:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Sep 26 04:00:56 2026 GMT
Not After : Sep 27 04:00:56 2026 GMT
Subject: CN=dcd05bc35a8b67b2fff32dde84d225969dbbc376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:0c:55:f2:55:3c:ac:98:5e:8f:5a:c9:91:
5a:5d:29:ab:24:d0:25:ba:67:d0:5a:dc:b3:22:2b:
2c:a2:fc:4b:73:12:7a:c3:fc:59:ff:ea:83:6e:a0:
95:8d:ea:54:8d:af:6c:7d:f5:c5:cf:23:00:72:c2:
ef:cb:17:45:c9:9d:07:7c:03:85:9c:7b:8c:58:7a:
d6:1e:b5:c7:d7:19:94:84:38:ca:e8:19:14:6f:d8:
ab:c0:6a:9c:5f:f0:8f:2a:02:db:9b:21:9c:e8:91:
7c:46:66:53:00:de:52:57:54:04:23:a3:e8:17:8a:
05:84:37:fd:25:7a:1d:f4:55:ab:bc:3b:6a:be:2a:
57:22:d6:92:0f:d0:f4:40:82:4a:ea:49:1b:02:45:
1b:f5:bb:c1:05:f2:3d:31:c7:71:e0:f9:88:db:73:
50:8c:c7:e0:7f:44:a1:a8:29:25:de:30:af:25:44:
63:0a:01:59:50:43:62:ce:e6:67:21:ca:62:2a:8e:
61:4d:e1:cf:ec:d7:61:c7:07:7b:b0:7a:b7:fc:5b:
4c:25:d3:1a:1a:29:e7:44:d6:32:57:05:51:46:2a:
16:87:a5:6a:2e:30:5e:d4:47:ea:74:c5:2c:b4:d0:
75:0b:4b:73:c1:ab:a0:57:54:99:cf:24:20:2b:02:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:5B:C3:5A:8B:67:B2:FF:F3:2D:DE:84:D2:25:96:9D:BB:C3:76
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4f:34:f9:f8:a9:e1:56:9f:6e:ca:32:50:a6:aa:7b:41:53:
e8:a8:19:67:26:a0:12:01:f0:37:42:92:86:40:3d:67:a7:31:
8c:bf:57:1a:9e:94:20:3b:ac:fc:7e:d7:f7:19:6f:72:85:af:
a1:43:2d:4e:13:14:82:2b:25:b8:c3:7e:99:bf:40:bc:94:09:
3d:e3:66:97:86:c1:c0:8d:4b:96:05:47:a4:58:6b:ae:50:de:
34:dd:59:ec:46:c1:f0:b1:87:ef:6c:d9:f5:a5:39:de:55:f8:
3f:c0:1a:21:4f:ba:df:bc:5e:46:bb:38:75:c7:d2:04:be:18:
63:3a:53:6c:c0:33:1b:34:c1:e8:6f:6d:bc:4e:fa:d0:95:55:
35:4b:08:0b:f8:3c:59:df:1f:24:7d:ca:bf:cc:04:99:18:35:
56:dd:44:57:ba:ba:0b:4e:17:a6:99:47:1f:bb:c8:9f:15:0b:
a4:07:1b:b3:47:43:c2:7a:7d:82:05:e8:35:01:dd:cb:25:60:
2d:10:67:d8:89:a5:21:bf:47:81:a1:24:cc:de:ba:a5:6a:62:
06:ae:f2:10:20:83:1f:c6:f1:06:fd:e6:47:a0:3f:9d:ff:46:
a3:2b:b0:f7:8d:b5:6b:fe:15:17:c6:04:7d:83:99:7c:5e:c0:
4d:d9:50:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb34/ZsxvU2u/wiY0daFRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjYwOTI2MDQwMDU2WhcNMjYwOTI3MDQwMDU2WjAzMTEwLwYDVQQD
EyhkY2QwNWJjMzVhOGI2N2IyZmZmMzJkZGU4NGQyMjU5NjlkYmJjMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUEMVfJVPKyYXo9ayZFaXSmrJNAl
umfQWtyzIissovxLcxJ6w/xZ/+qDbqCVjepUja9sffXFzyMAcsLvyxdFyZ0HfAOF
nHuMWHrWHrXH1xmUhDjK6BkUb9irwGqcX/CPKgLbmyGc6JF8RmZTAN5SV1QEI6Po
F4oFhDf9JXod9FWrvDtqvipXItaSD9D0QIJK6kkbAkUb9bvBBfI9Mcdx4PmI23NQ
jMfgf0ShqCkl3jCvJURjCgFZUENizuZnIcpiKo5hTeHP7Ndhxwd7sHq3/FtMJdMa
GinnRNYyVwVRRioWh6VqLjBe1EfqdMUstNB1C0tzwaugV1SZzyQgKwKiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzQW8Nai2ey//Mt3oTSJZadu8N2MB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZU80+fip
4VafbsoyUKaqe0FT6KgZZyagEgHwN0KShkA9Z6cxjL9XGp6UIDus/H7X9xlvcoWv
oUMtThMUgisluMN+mb9AvJQJPeNml4bBwI1LlgVHpFhrrlDeNN1Z7EbB8LGH72zZ
9aU53lX4P8AaIU+637xeRrs4dcfSBL4YYzpTbMAzGzTB6G9tvE760JVVNUsIC/g8
Wd8fJH3Kv8wEmRg1Vt1EV7q6C04XpplHH7vInxULpAcbs0dDwnp9ggXoNQHdyyVg
LRBn2ImlIb9HgaEkzN66pWpiBq7yECCDH8bxBv3mR6A/nf9Goyuw9421a/4VF8YE
fYOZfF7ATdlQCw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:50:42 2026 by rpki-client