Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: BrAOsUqUSG8xKzNagq8MSQPSNcz6Gi7SHoM86Pylo9c=
Subject key identifier: BC:21:53:AE:41:00:49:9F:A9:D8:9F:DB:F3:07:BC:46:23:23:D2:05
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 01A09C247364CF19F0CA24FE3B5046EC099D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1A50
Signing time: Sun 13 Sep 2026 19:00:29 +0000
Manifest this update: Sun 13 Sep 2026 19:00:29 +0000
Manifest next update: Mon 14 Sep 2026 19:00:29 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: tQg9iDEbXMMMqaM1BMU3M0/8c6KI8wlMWjDtX8778CQ=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:24:73:64:cf:19:f0:ca:24:fe:3b:50:46:ec:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Sep 13 19:00:29 2026 GMT
Not After : Sep 14 19:00:29 2026 GMT
Subject: CN=bc2153ae4100499fa9d89fdbf307bc462323d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:24:2f:9a:0e:36:f4:63:12:59:d0:75:a3:
e6:c8:f5:6e:f8:b3:02:41:f7:b0:f6:ee:59:f0:81:
c5:a4:21:b6:1e:64:66:f7:bf:c7:59:21:78:16:25:
62:0c:52:3c:91:59:03:e7:77:10:5a:c5:c4:95:78:
00:33:75:c3:f2:03:8e:22:0e:00:17:e9:20:1e:55:
cb:75:49:5b:55:28:92:4e:0b:8d:b1:ab:2e:74:7f:
8f:96:2f:de:99:b5:de:7d:26:47:60:90:90:35:59:
84:db:2d:b3:7e:50:91:71:7b:02:ee:78:a8:77:75:
41:28:0e:1f:0a:69:da:e7:dc:be:fc:a3:25:72:31:
86:d3:9f:19:d5:e7:67:28:82:36:a0:e5:6b:eb:cc:
18:ee:0f:1f:5f:0c:14:65:42:a4:c0:71:7e:33:b8:
65:63:2b:ae:e3:71:0c:7b:55:8a:b2:7e:6d:53:e6:
e9:fe:58:b0:f5:0d:aa:32:44:ea:69:61:75:1a:20:
ad:5c:8e:33:3a:88:fa:e3:a0:cb:2e:ef:7c:46:1b:
ad:e5:95:06:3b:3d:72:62:fd:ec:37:e0:76:82:e3:
99:7e:2b:9b:e0:a3:05:35:38:a5:43:e5:bd:36:b2:
d9:e9:84:2b:21:21:78:f8:da:10:d5:8b:ea:02:75:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:53:AE:41:00:49:9F:A9:D8:9F:DB:F3:07:BC:46:23:23:D2:05
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:de:03:60:bc:1c:cc:da:c4:de:c5:fb:91:e2:44:29:51:
81:69:ea:09:94:60:1c:ce:f9:e0:14:de:51:a2:c4:ce:6c:5c:
67:85:0c:5a:5b:56:88:6b:bb:84:c7:88:4c:d8:2d:65:04:ca:
78:b5:59:16:f6:2d:fb:85:f0:79:8f:8f:8e:97:41:76:27:50:
38:fd:34:c3:0a:58:f1:fc:13:4b:d1:1d:25:10:e3:44:79:46:
2c:d2:aa:b6:e0:57:2e:ca:f2:fa:c6:2d:e0:27:05:03:1c:3b:
01:63:10:69:51:99:01:07:28:ec:26:e4:86:37:6b:6c:3c:91:
66:42:7a:a3:c4:25:ec:ac:2a:c6:21:78:b0:b1:43:74:27:43:
cc:e1:a0:ee:12:93:1b:26:76:ea:cb:23:ec:b4:f9:8a:60:7a:
11:31:cf:5e:8f:f3:69:28:d3:9b:f0:6d:99:35:4a:1b:4e:ba:
f2:64:ad:d5:50:df:b6:53:74:41:fd:cc:19:c9:3e:82:b5:84:
30:c7:dc:48:e3:f6:1d:fe:20:f9:c2:f2:32:b7:ea:9f:37:1f:
0c:95:84:02:07:86:29:60:e3:e5:ab:da:1f:4e:79:db:27:67:
14:38:27:e2:02:6a:50:2f:11:92:72:de:03:0c:27:e4:2b:f9:
b4:f2:53:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCcJHNkzxnwyiT+O1BG7AmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjYwOTEzMTkwMDI5WhcNMjYwOTE0MTkwMDI5WjAzMTEwLwYDVQQD
EyhiYzIxNTNhZTQxMDA0OTlmYTlkODlmZGJmMzA3YmM0NjIzMjNkMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoMkL5oONvRjElnQdaPmyPVu+LMC
Qfew9u5Z8IHFpCG2HmRm97/HWSF4FiViDFI8kVkD53cQWsXElXgAM3XD8gOOIg4A
F+kgHlXLdUlbVSiSTguNsasudH+Pli/embXefSZHYJCQNVmE2y2zflCRcXsC7nio
d3VBKA4fCmna59y+/KMlcjGG058Z1ednKII2oOVr68wY7g8fXwwUZUKkwHF+M7hl
Yyuu43EMe1WKsn5tU+bp/liw9Q2qMkTqaWF1GiCtXI4zOoj646DLLu98Rhut5ZUG
Oz1yYv3sN+B2guOZfiub4KMFNTilQ+W9NrLZ6YQrISF4+NoQ1YvqAnUnQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwhU65BAEmfqdif2/MHvEYjI9IFMB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9HeA2C8
HMzaxN7F+5HiRClRgWnqCZRgHM754BTeUaLEzmxcZ4UMWltWiGu7hMeITNgtZQTK
eLVZFvYt+4XweY+PjpdBdidQOP00wwpY8fwTS9EdJRDjRHlGLNKqtuBXLsry+sYt
4CcFAxw7AWMQaVGZAQco7CbkhjdrbDyRZkJ6o8Ql7KwqxiF4sLFDdCdDzOGg7hKT
GyZ26ssj7LT5imB6ETHPXo/zaSjTm/BtmTVKG0668mSt1VDftlN0Qf3MGck+grWE
MMfcSOP2Hf4g+cLyMrfqnzcfDJWEAgeGKWDj5avaH0552ydnFDgn4gJqUC8RknLe
Awwn5Cv5tPJThQ==
-----END CERTIFICATE-----
Generated at Mon Sep 14 03:31:54 2026 by rpki-client