Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: NZmCz++N9/eyBI1faVum2TWA/9htzRnvh5ypMm+SbD0=
Subject key identifier: 1C:CD:76:AD:83:71:C0:24:CA:43:A2:DE:2E:98:DE:45:BA:A3:74:D7
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019D25BA0F921602A8D44756473DFB987660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:00:43 +0000
Manifest this update: Wed 25 Mar 2026 16:00:43 +0000
Manifest next update: Thu 26 Mar 2026 16:00:43 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: HzjbHOb/GaJOV9nsEU4BJ1HMt4iahIyIzoDl1HBzph8=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:0f:92:16:02:a8:d4:47:56:47:3d:fb:98:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Mar 25 16:00:43 2026 GMT
Not After : Mar 26 16:00:43 2026 GMT
Subject: CN=1ccd76ad8371c024ca43a2de2e98de45baa374d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:97:7e:a0:01:c1:fa:e1:1d:42:5f:57:cb:
3a:79:3b:3a:ab:c4:25:89:23:e6:1e:42:59:68:0a:
fd:7e:c2:76:bc:5c:d4:98:49:e8:8a:80:33:5c:68:
ec:55:b8:93:34:bb:d9:f8:0e:ff:a5:1e:af:cc:79:
72:c6:96:54:23:60:ee:ef:90:cb:b3:3a:25:4d:01:
c5:e7:6b:8e:97:da:35:42:fd:a2:c6:1b:e9:76:25:
cb:a6:8d:30:96:d1:df:9d:64:8c:25:11:da:75:2c:
a1:2b:da:bc:23:5f:c1:51:06:e1:0f:a5:eb:e6:ad:
da:d2:b3:d6:b4:95:75:5e:71:bf:1d:5f:ab:06:1a:
72:3d:bd:89:5b:7c:9b:0b:1d:4d:bf:61:5f:60:68:
6b:05:0a:9d:99:f6:0a:00:56:ae:82:62:09:b5:fe:
75:b3:75:d4:d5:1c:89:f5:0c:98:a7:2b:af:66:07:
b1:7c:5a:53:4d:18:0f:20:2a:90:52:01:93:77:d6:
e5:26:0d:eb:d3:df:bf:e4:14:9a:f1:62:ff:ce:27:
10:79:55:7b:18:35:14:90:14:c4:ea:8c:c8:5b:50:
9f:48:5d:a4:04:e2:7d:d1:0e:ef:87:70:0e:34:7a:
89:0f:4d:3e:0b:06:de:bb:52:b3:90:48:e9:77:ec:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:76:AD:83:71:C0:24:CA:43:A2:DE:2E:98:DE:45:BA:A3:74:D7
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6c:a9:51:aa:17:35:be:28:27:8c:67:80:28:9e:57:f0:f8:
46:94:39:ef:90:f8:46:83:29:b4:e3:60:1d:5e:4e:16:b3:b3:
61:e7:d6:07:58:26:62:fc:77:c3:32:e4:c0:f6:b9:e8:fd:23:
db:07:20:5a:41:f6:b3:cb:25:58:ba:92:11:7f:57:6b:16:d9:
38:21:d1:ce:ec:2a:de:0e:5e:d0:1f:6d:ae:f6:98:b0:5e:fb:
c2:6b:19:38:2a:77:0f:06:74:00:24:e6:b8:db:db:39:38:96:
ee:d2:f2:6e:3a:4d:5f:a8:23:23:34:ae:f0:94:f9:70:eb:f5:
67:02:77:10:39:9b:c8:c6:0a:29:e8:9b:e9:31:46:6a:da:f7:
ba:67:38:60:14:74:34:2c:98:3c:36:56:6d:20:ec:7d:d4:cd:
77:04:de:88:bb:c5:62:01:e5:c1:68:c9:62:56:e6:3f:85:87:
e9:39:01:ac:70:a6:34:c1:d6:8e:c6:ce:e5:1a:6f:38:62:f8:
3c:0a:66:a7:e6:83:20:62:8b:bc:83:cd:58:48:40:9b:36:c3:
89:b5:b7:64:79:d8:0e:14:23:00:4a:44:9a:3e:a4:66:4a:da:
91:d4:3e:62:39:94:8d:47:8c:63:04:69:6c:40:80:4d:8c:f8:
33:f9:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:47 2026 by rpki-client