
$ rpki-client -vvvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File: C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier: N9C0A83FN6I9elmfLoJ+DKEy79n4N7nB9rROgCiIZo4=
Subject key identifier: AE:1C:6A:98:AA:3D:9A:24:B7:C7:A0:F1:C5:8C:15:66:69:81:42:5B
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer: /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial: 4DE7E5C9116981C8BCB591165DAC1289D8512FAC
Authority info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number: 0467
Signing time: Fri 09 Oct 2026 03:52:57 +0000
Manifest this update: Fri 09 Oct 2026 03:47:57 +0000
Manifest next update: Sat 10 Oct 2026 04:25:57 +0000
Files and hashes: 1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: ei2AeRZmSFt6vv5tll+PSCGx7rh+4oXvNsAj/xNrffM=)
Validation: OK
Signature path: rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 15:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e7:e5:c9:11:69:81:c8:bc:b5:91:16:5d:ac:12:89:d8:51:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
Validity
Not Before: Oct 9 03:47:57 2026 GMT
Not After : Oct 10 04:25:57 2026 GMT
Subject: CN=AE1C6A98AA3D9A24B7C7A0F1C58C15666981425B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:2a:e1:e8:a9:54:43:43:ee:b0:d5:fd:8d:
d5:e3:3e:a0:5c:00:c7:a1:45:1f:e8:bd:ee:ab:ab:
65:9a:0d:b0:08:e1:12:21:54:52:6e:3b:c2:48:98:
52:2a:0b:29:c6:ac:27:2a:8a:3d:7c:d6:9a:bf:bb:
ef:bf:98:c9:2d:61:13:ad:29:22:ab:c9:6b:3b:79:
7e:df:da:8e:12:73:50:ef:cf:3c:49:bd:8b:d1:7e:
f8:04:ac:76:ea:6c:de:04:3c:7e:98:bc:9f:bc:4c:
2c:ba:3c:cf:63:d5:c1:51:fa:c1:43:a1:1c:37:10:
ca:b2:59:70:2a:31:7d:b6:82:30:a6:53:eb:0f:2b:
34:f9:f4:16:e2:4d:50:75:60:36:e6:30:b4:5b:67:
60:b0:b1:12:49:74:cf:bc:10:65:3a:c8:24:41:af:
fc:17:eb:c1:e1:ef:2b:8e:e9:c2:fa:01:53:14:9a:
cb:a9:ab:95:97:34:a6:bd:81:ae:3c:5d:e4:d1:c8:
97:b6:ae:ff:4b:30:eb:a5:9d:75:77:71:90:01:fe:
00:3f:fc:a2:24:ed:4f:0e:58:8d:f2:7e:ed:01:d7:
2e:13:45:76:30:e8:90:52:03:40:5a:3d:56:5b:0d:
68:c2:60:b7:34:e1:c3:cd:18:0a:cd:85:b3:4d:44:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:6A:98:AA:3D:9A:24:B7:C7:A0:F1:C5:8C:15:66:69:81:42:5B
X509v3 Authority Key Identifier:
keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject Information Access:
Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ec:b8:5e:26:94:1b:72:7a:1c:a0:1e:90:0d:3d:ff:99:a1:
2d:66:a0:02:1f:5e:2b:09:07:17:98:6f:fa:ed:8a:62:17:c1:
31:4c:97:fb:e5:e3:8c:03:32:00:30:28:1a:85:86:b9:a6:08:
78:fc:45:a3:be:c4:3d:f6:9e:6b:31:8f:bd:93:71:e3:a8:3c:
d7:89:a1:0f:cf:2a:e6:09:71:ff:ae:77:31:3c:96:07:ed:c5:
cf:1a:96:56:ed:b9:0b:54:a1:d3:03:ac:a7:6f:ed:d7:fe:fc:
74:7a:a4:9f:18:d1:d6:30:00:f5:f0:a7:78:ea:09:41:ea:ee:
27:7e:6c:f9:42:2e:83:bf:b6:8e:d2:62:33:1b:ee:6a:1b:55:
21:7e:6d:d2:01:af:e6:d7:da:77:8d:15:bc:4c:5f:e0:9f:72:
b1:2a:fe:85:de:ff:03:a2:bb:cf:ef:93:b8:ec:19:fd:52:18:
bb:80:ed:31:8f:4e:8d:63:ac:d9:cc:da:c6:ad:5d:2b:d1:7a:
06:56:a4:ef:ab:7a:08:8a:bb:8b:5d:68:a0:0d:08:d9:5a:49:
fb:24:cd:6a:1b:5a:b7:f7:72:b2:4b:5a:e0:a1:b9:ae:ae:fa:
f2:47:b9:22:ca:d0:be:6d:3e:c2:76:82:86:06:05:db:ec:4b:
9b:e5:b4:f0
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUTeflyRFpgci8tZEWXawSidhRL6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg2MjNBQTZDMzBGQThFMDU4MjQzNzA4RjU2NzJENzk2
MEU1MjM4OTAeFw0yNjEwMDkwMzQ3NTdaFw0yNjEwMTAwNDI1NTdaMDMxMTAvBgNV
BAMTKEFFMUM2QTk4QUEzRDlBMjRCN0M3QTBGMUM1OEMxNTY2Njk4MTQyNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qirh6KlUQ0PusNX9jdXjPqBc
AMehRR/ove6rq2WaDbAI4RIhVFJuO8JImFIqCynGrCcqij181pq/u++/mMktYROt
KSKryWs7eX7f2o4Sc1DvzzxJvYvRfvgErHbqbN4EPH6YvJ+8TCy6PM9j1cFR+sFD
oRw3EMqyWXAqMX22gjCmU+sPKzT59BbiTVB1YDbmMLRbZ2CwsRJJdM+8EGU6yCRB
r/wX68Hh7yuO6cL6AVMUmsupq5WXNKa9ga48XeTRyJe2rv9LMOulnXV3cZAB/gA/
/KIk7U8OWI3yfu0B1y4TRXYw6JBSA0BaPVZbDWjCYLc04cPNGArNhbNNRJ6PAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUrhxqmKo9miS3x6DxxYwVZmmBQlswHwYDVR0j
BBgwFoAUyGI6psMPqOBYJDcI9WcteWDlI4kwDgYDVR0PAQH/BAQDAgeAMHwGA1Ud
HwR1MHMwcaBvoG2Ga3JzeW5jOi8vcm92LW1lYXN1cmVtZW50cy5ubG5ldGxhYnMu
bmV0L3JlcG8vcm92LW1lYXN1cmVtZW50cy8zL0M4NjIzQUE2QzMwRkE4RTA1ODI0
MzcwOEY1NjcyRDc5NjBFNTIzODkuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEF
BQcwAoZecnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5l
dGxhYnMvMS9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5
LmNlcjCBhwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jvdi1t
ZWFzdXJlbWVudHMubmxuZXRsYWJzLm5ldC9yZXBvL3Jvdi1tZWFzdXJlbWVudHMv
My9DODYyM0FBNkMzMEZBOEUwNTgyNDM3MDhGNTY3MkQ3OTYwRTUyMzg5Lm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAV+y4XiaUG3J6HKAekA09/5mhLWagAh9eKwkHF5hv+u2KYhfBMUyX++Xj
jAMyADAoGoWGuaYIePxFo77EPfaeazGPvZNx46g814mhD88q5glx/653MTyWB+3F
zxqWVu25C1Sh0wOsp2/t1/78dHqknxjR1jAA9fCneOoJQeruJ35s+UIug7+2jtJi
MxvuahtVIX5t0gGv5tfad40VvExf4J9ysSr+hd7/A6K7z++TuOwZ/VIYu4DtMY9O
jWOs2czaxq1dK9F6Blak76t6CIq7i11ooA0I2VpJ+yTNahtat/dyskta4KG5rq76
8ke5IsrQvm0+wnaChgYF2+xLm+W08A==
-----END CERTIFICATE-----
Generated at Fri Oct 9 10:47:14 2026 by rpki-client