Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: JOmvrxqRlEC5U5j+LghsmqoTwaKMx6mrsQBl0Gx4mm8=
Subject key identifier: 69:FF:DE:34:EA:10:51:98:CC:9C:96:AF:4C:25:72:C5:82:8B:70:04
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 01A0D61465DDE16ED5A5A0207B02672AA0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 01:00:55 +0000
Manifest this update: Fri 25 Sep 2026 01:00:55 +0000
Manifest next update: Sat 26 Sep 2026 01:00:55 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: wUXbv9rVTm3AaXf89Ef7O/6xSVoibziArQKYnQypkfA=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:65:dd:e1:6e:d5:a5:a0:20:7b:02:67:2a:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Sep 25 01:00:55 2026 GMT
Not After : Sep 26 01:00:55 2026 GMT
Subject: CN=69ffde34ea105198cc9c96af4c2572c5828b7004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:3c:0f:6d:b2:84:b5:7d:2d:bf:94:78:d3:
85:ea:41:76:c8:00:a5:ec:e8:2c:22:7f:c0:1d:8a:
0c:9a:74:90:b5:0e:55:91:1a:fe:11:8d:08:73:8a:
6c:2d:a0:c3:53:a9:e2:35:5d:40:39:0f:39:b0:05:
7f:e5:0c:0d:90:5e:b3:dd:c3:7f:28:93:48:8e:69:
08:98:06:45:8f:66:6c:c8:e6:fd:5d:6c:2d:bb:40:
59:20:93:a6:c6:fa:f4:9f:08:d4:2c:83:90:94:bd:
84:d4:96:05:b3:88:85:4a:4d:55:06:d9:86:dc:f8:
04:5e:1a:c0:f7:25:0c:95:d6:6a:d6:4d:c9:a6:0c:
e7:7d:73:b2:92:ff:9b:9f:ab:1e:d1:d0:45:a6:cb:
a4:6c:e4:ba:07:93:07:1c:fa:dd:fb:ff:ce:12:00:
19:43:ce:f5:37:b2:ae:03:a8:e6:c4:ee:5b:cd:7e:
f8:bd:cc:d3:60:5b:e4:6e:e4:9e:75:4e:b0:91:a0:
1d:16:99:e7:1f:cc:1a:fd:60:7b:38:3b:83:ed:61:
e2:fe:f7:92:61:fe:b7:de:03:a4:5d:ba:59:05:33:
dd:eb:d4:25:af:37:44:9e:65:56:50:37:a8:d6:60:
b6:6d:89:04:1a:08:7a:be:69:3f:00:99:22:bf:0b:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:DE:34:EA:10:51:98:CC:9C:96:AF:4C:25:72:C5:82:8B:70:04
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:1b:63:a5:b7:5e:d4:c5:d4:24:69:4e:b0:a5:00:13:ba:
d4:6d:c6:f9:c9:44:04:b4:fc:1b:cb:81:21:e7:28:1f:8e:29:
3a:8d:47:54:ab:6b:d1:ab:77:a3:00:49:48:81:cb:e8:a3:39:
32:6a:25:e2:a0:ee:d4:94:d7:4d:1f:85:89:e6:55:5b:63:86:
af:be:ff:6b:35:90:69:ce:9a:84:b3:ef:ed:83:ae:4a:fa:bf:
9b:c5:2e:c5:e8:b4:a1:4e:4d:fc:61:b0:0f:95:df:f5:98:4a:
03:fd:23:2b:a6:f6:7a:2d:23:c7:b0:96:0f:04:33:e5:b0:70:
54:be:60:41:54:9e:9e:d1:fb:0b:de:10:a5:25:65:d7:51:e0:
a0:6a:d9:b6:78:bb:89:81:4f:c1:6e:4f:37:fd:a1:74:33:62:
4b:cd:d0:d0:be:48:7c:03:9e:ea:23:17:60:c7:1c:cf:ce:b3:
c0:9a:5f:b2:3a:db:14:e4:db:70:29:29:30:91:99:07:99:d6:
2f:a4:9d:03:b5:c6:24:0a:23:88:fb:3f:f0:0a:c6:9e:da:e7:
20:d9:f4:d4:c6:22:6a:74:56:21:f9:9b:c0:c3:9c:09:1f:b5:
93:b9:f2:65:28:93:00:b6:98:43:c0:3f:34:7d:57:79:8e:a1:
fd:fb:a2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:05 2026 by rpki-client