Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: eGnguA2IB2XNQrW/IOOHb6D/RoW5B9Y/SfV0GEYnWlQ=
Subject key identifier: 8E:96:A5:B6:73:E5:3B:AA:1E:25:C8:BE:45:BC:2A:97:71:5B:8A:48
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019FA8CFF6EB7C5AB926DD86B84DE077E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 13:00:29 +0000
Manifest this update: Tue 28 Jul 2026 13:00:29 +0000
Manifest next update: Wed 29 Jul 2026 13:00:29 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: 33Iela6SUa9ITs7yrbZH3fv8AdBXPTq7kFs/qde/6ms=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f6:eb:7c:5a:b9:26:dd:86:b8:4d:e0:77:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jul 28 13:00:29 2026 GMT
Not After : Jul 29 13:00:29 2026 GMT
Subject: CN=8e96a5b673e53baa1e25c8be45bc2a97715b8a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:6b:22:34:98:c2:59:0d:4e:97:59:71:a5:
c2:2a:77:a2:ac:2f:b7:4f:a3:be:df:e3:4c:f7:32:
bc:a5:21:9a:35:8a:9b:18:93:57:4c:35:6e:54:85:
98:dd:74:e5:60:2d:82:0a:58:16:c0:87:0d:14:7e:
99:f5:fc:94:0a:ca:1d:e4:ee:df:ae:fc:cb:61:fc:
87:ee:05:62:f1:84:38:e6:40:fe:69:db:7d:19:d6:
4b:36:bf:b7:c2:76:dc:d9:65:fa:7f:65:c4:64:3b:
76:bc:d3:8f:82:32:bf:94:cb:09:84:cb:3e:ca:42:
5d:f8:9b:48:ce:20:89:00:77:77:cd:d4:83:be:67:
1e:cb:72:59:8c:2e:ea:ec:1a:14:10:96:dd:80:f0:
d8:3f:11:e5:03:b4:4d:94:9c:7e:e9:63:85:dc:06:
f5:ff:f2:9d:76:dd:65:05:e6:71:b7:9f:ac:e8:a4:
42:41:7a:d1:bc:86:17:aa:b8:18:c6:fd:70:14:73:
85:53:da:08:dd:63:66:33:12:f6:1a:f9:86:5c:df:
71:95:e0:e6:a8:78:77:23:20:0a:86:83:7a:65:46:
6a:ca:f2:0b:91:27:03:a4:f3:2c:d5:bb:58:84:93:
14:6f:99:10:bb:a8:a2:90:9d:c6:8f:50:9d:f0:d8:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:A5:B6:73:E5:3B:AA:1E:25:C8:BE:45:BC:2A:97:71:5B:8A:48
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:32:be:77:85:44:84:9b:c5:f8:e5:63:c0:25:1c:b7:01:
94:c6:22:32:07:e4:5b:91:d8:e9:e1:b6:14:f4:5a:88:7c:b9:
5d:ae:91:20:69:f8:d5:cd:5f:b9:19:1e:ab:60:85:5d:7f:cf:
0f:0d:95:b8:31:b6:7a:5b:5b:94:c7:8b:99:fb:4a:24:47:0f:
2f:eb:2c:a2:75:61:14:4f:cf:41:a8:e3:cf:10:d7:4f:0e:7d:
68:20:c8:7f:cf:93:35:2d:9d:93:d6:f4:d6:bb:65:f8:d8:25:
3a:97:72:ee:4d:26:c0:88:da:6e:1d:eb:39:83:70:77:44:0a:
89:80:e6:4b:22:9f:49:12:87:cc:08:68:a0:60:bf:06:c1:cf:
fd:bb:fb:da:1c:20:3c:bc:16:fd:8f:1b:a6:0b:bf:be:57:03:
93:e5:4e:bc:eb:43:b2:6a:63:95:c0:93:5b:ae:5e:a8:08:d4:
97:c2:9b:a8:2c:88:0e:95:3c:ab:10:76:e0:b2:ea:83:04:ca:
5a:48:36:fc:cb:af:e5:be:fc:16:53:30:4f:04:20:d9:f5:1e:
d8:3f:cf:a2:e6:c8:d0:e5:9f:a4:50:59:a8:41:9b:42:cb:02:
9f:2f:64:41:c4:f6:90:30:6a:ce:8c:ef:a0:2b:eb:d4:cd:1a:
68:ab:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:37 2026 by rpki-client