Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: 11eph4RF0j4c1EGW+K3CwHVDNi+rm1IPe+ChZFHKD0k=
Subject key identifier: 08:7F:92:EB:76:65:4D:82:AC:01:72:5B:2F:8A:8A:9F:02:FD:B6:DA
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019CAC10341A3E181F1FBB804CDE721DA4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:08 +0000
Manifest this update: Mon 02 Mar 2026 01:01:08 +0000
Manifest next update: Tue 03 Mar 2026 01:01:08 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: JQo4Czidbkv1Vr5Yty9EcGoU/Im8k+ykw8n1IKLXi/k=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:34:1a:3e:18:1f:1f:bb:80:4c:de:72:1d:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Mar 2 01:01:08 2026 GMT
Not After : Mar 3 01:01:08 2026 GMT
Subject: CN=087f92eb76654d82ac01725b2f8a8a9f02fdb6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:3b:00:10:ea:ff:84:59:c4:7d:56:96:1b:
71:48:3f:99:86:eb:3e:93:dd:fe:de:79:03:17:e7:
90:0c:60:12:03:c7:96:d3:2a:2b:4e:e8:6c:70:bc:
47:7a:8f:21:70:dd:38:e3:44:fd:97:78:0b:e3:26:
6b:32:e7:71:12:e5:08:37:c4:dd:12:06:fd:de:d7:
ed:1d:2c:b3:6b:47:ac:21:98:89:6f:02:35:e4:f7:
17:97:f5:0e:a9:76:5c:03:50:70:69:88:c7:1b:00:
84:85:46:df:8c:dc:af:69:f2:b7:c5:3e:b5:5a:9d:
06:a5:1a:5b:aa:92:05:48:ce:6b:e4:8c:33:6f:82:
64:d2:7b:68:c0:1c:c1:c0:8f:f6:7f:d2:34:52:25:
68:c7:ff:d1:cf:9a:86:37:49:a6:dc:27:5a:b9:fc:
32:f6:0f:61:78:13:23:70:e3:c7:1b:6c:96:f0:82:
c9:80:b5:ac:62:5e:14:35:39:57:5b:d4:70:f3:e8:
23:b2:fd:cf:3a:83:cb:4d:96:a7:9f:2c:b2:12:13:
9d:fc:ca:13:7d:ce:15:85:c7:7f:e9:76:ac:2b:29:
ae:c9:37:de:d1:dc:7e:54:bd:fe:ba:b9:ce:9f:91:
02:c7:08:28:fd:eb:81:38:a5:d1:94:28:60:c9:a8:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:92:EB:76:65:4D:82:AC:01:72:5B:2F:8A:8A:9F:02:FD:B6:DA
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:e1:d1:9f:54:7c:4c:7e:f5:a5:75:86:47:1f:6f:60:5d:
89:0d:60:1d:e6:8d:71:f3:b0:df:f5:da:d9:d5:9c:47:22:b5:
7d:ff:d4:76:83:8a:13:f4:88:b2:45:0f:76:29:d4:60:c7:d6:
0f:2d:52:1f:bc:55:5b:f2:31:1b:47:d7:86:c0:89:82:0a:e6:
59:bb:6b:d3:5a:ff:bc:7b:b6:9d:79:3d:1a:9f:3a:22:bc:9e:
39:02:38:95:c5:2c:96:18:e1:34:b5:71:39:5f:80:be:ad:f0:
ab:fe:f1:27:d1:ce:07:6d:00:45:88:a4:f1:d8:31:6c:d0:42:
24:ad:7b:54:f1:2c:d0:8c:76:1b:16:8a:41:61:35:1f:99:6e:
e7:41:a3:82:39:59:01:72:b8:8c:15:39:e4:8b:1a:d2:c2:8a:
c4:f0:cf:43:aa:54:a4:7b:34:c0:65:9c:50:45:62:3d:e4:ed:
4a:b9:2d:b8:4a:1b:fb:89:33:60:fe:c1:da:65:60:40:8d:e9:
f5:de:93:df:f9:c5:b2:15:be:1a:4f:d8:59:a4:d6:35:d3:38:
bc:ca:21:28:7f:82:cd:98:22:ec:f4:32:79:21:7a:3b:1e:b8:
0a:49:90:35:b7:21:16:0d:20:72:15:d4:c1:2a:37:36:bb:22:
97:29:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:18 2026 by rpki-client