Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: 9CSMhVWy31qbAyslF4cmQssFHMuMKrHA5k5qZQ0y/J0=
Subject key identifier: 71:46:A6:5C:F5:53:EE:E2:66:48:E5:D5:04:60:C9:B7:A6:FA:3D:5C
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 019FA11646A576F7507F643EE286EF20A64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 01:00:19 +0000
Manifest this update: Mon 27 Jul 2026 01:00:19 +0000
Manifest next update: Tue 28 Jul 2026 01:00:19 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: EgXbWGQ31YtBPCbldhV1luBWAf0sDZZUkawlwOA565k=)
2: sPT_dPM8M-1DZ37Rs-G1BW6_lkg.roa (hash: rvqXHRiB6yIq5Ga7UKUI3l/uI3IYPLJIYXXxgzP0H8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:46:a5:76:f7:50:7f:64:3e:e2:86:ef:20:a6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jul 27 01:00:19 2026 GMT
Not After : Jul 28 01:00:19 2026 GMT
Subject: CN=7146a65cf553eee26648e5d50460c9b7a6fa3d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:b7:dd:b4:99:8f:80:6a:34:d5:ef:76:02:
9c:73:ea:ec:e3:15:95:51:2f:25:6e:3f:b5:7f:6a:
bd:97:11:76:06:9f:bd:24:cf:0a:e8:94:25:3a:d3:
09:90:0b:91:17:1b:5f:0d:94:51:b5:84:ac:5e:58:
13:94:8f:a7:dd:cb:93:fa:80:55:ec:dc:6c:31:0a:
24:99:a2:79:81:33:08:ff:d1:fc:90:1c:ed:2a:eb:
d8:4a:97:ce:d6:f4:09:1c:0b:92:ec:5e:1a:7c:f2:
9a:43:58:10:7e:2c:df:7e:b2:5f:69:7c:fa:be:a4:
77:ba:04:ed:d2:c3:17:5a:36:1e:a2:d4:82:6b:20:
bc:c8:db:91:78:b1:f5:e2:a7:c1:78:76:2a:fa:82:
49:22:ef:43:6a:8f:f4:6d:46:66:85:01:ba:e8:d7:
70:b7:a2:9d:43:c1:a2:7d:59:5c:eb:e5:1b:2a:ab:
93:ff:da:c6:83:15:10:89:7e:47:0a:ca:fd:6b:b7:
2e:80:2f:dd:fa:46:61:29:3e:31:b5:1f:09:87:74:
04:17:d5:0d:60:8e:8f:ff:74:79:5f:d8:d6:3b:78:
85:50:31:5c:58:0c:fb:7c:b7:dd:f9:b6:97:29:fd:
0a:3e:3c:fb:66:cb:76:89:96:95:ad:6c:c8:0f:37:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:A6:5C:F5:53:EE:E2:66:48:E5:D5:04:60:C9:B7:A6:FA:3D:5C
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:c4:6c:2b:91:b1:34:73:69:c9:1b:26:d8:8a:8f:ea:36:
97:6f:14:8a:99:d6:18:a0:2e:3e:68:0e:c9:a4:fb:0e:56:c0:
e6:62:58:c8:dc:f0:42:51:71:fb:1a:2f:8e:cf:60:80:dc:83:
61:f4:c0:45:9c:3c:55:44:77:22:cb:07:da:97:c9:20:f3:a7:
65:8b:8b:46:7a:47:d8:cb:c3:28:f1:cf:5d:16:18:b4:94:b1:
f4:ad:73:59:de:35:2c:b6:d4:32:9d:fe:9d:4a:57:6f:f3:ff:
af:91:d0:2b:6e:8c:81:71:f7:67:bf:29:37:f9:1f:e4:e9:35:
98:21:29:b8:f8:13:bc:1d:dd:45:37:37:27:9b:cf:b7:79:93:
a2:60:a1:36:f5:27:ce:3c:06:ac:ea:85:0e:82:ca:d8:83:ba:
79:20:71:78:8e:c3:36:2f:45:21:ee:fa:ba:05:48:89:ea:ea:
37:dd:a1:a8:d9:35:b8:6c:a2:0f:75:25:3a:2b:29:59:d0:e0:
c1:c1:4d:19:f7:78:2e:7a:76:a2:2e:5c:15:1a:cc:dd:34:16:
33:20:cc:30:be:f4:e8:27:04:51:ac:4c:44:cb:aa:f0:68:78:
02:a2:f2:5a:49:c6:f0:33:30:fa:87:ed:b1:16:ec:9d:4a:01:
e7:34:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:11 2026 by rpki-client