Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: Roq4nRWQ3QN/xpIYDo1sTX8RUK9iTdU9HjZr8Gh0rtY=
Subject key identifier: EF:EF:E5:FB:7F:DF:4B:4D:19:C6:DC:98:86:CD:68:CB:CA:69:32:EE
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019D254C9126391487A3F3FB0FC285D27637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 14:01:08 +0000
Manifest this update: Wed 25 Mar 2026 14:01:08 +0000
Manifest next update: Thu 26 Mar 2026 14:01:08 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 8p4K0PjRBcWPj/wg0fX7dYPNrEXBtIVFI41e/Rcuduw=)
2: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=)
3: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:91:26:39:14:87:a3:f3:fb:0f:c2:85:d2:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Mar 25 14:01:08 2026 GMT
Not After : Mar 26 14:01:08 2026 GMT
Subject: CN=efefe5fb7fdf4b4d19c6dc9886cd68cbca6932ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:26:91:f2:d9:34:46:5d:d4:63:1a:a3:60:
fe:4e:68:6b:5d:bd:3d:1b:f6:21:66:ee:22:dd:5a:
a1:e9:dc:db:15:a8:f3:ba:20:80:da:e3:a3:73:ff:
ab:97:5f:a4:1c:6b:cb:40:53:ea:45:55:02:ec:aa:
db:88:0c:a5:c6:99:b5:d0:3b:eb:aa:ad:1b:c8:84:
6f:f4:60:04:24:cf:cc:c9:f7:d8:18:fa:3c:23:b0:
6d:fc:a7:83:e6:7c:69:61:76:eb:bd:08:47:39:e6:
35:10:45:7e:12:9e:18:69:91:04:65:b4:3c:42:b7:
94:9b:0a:ca:fe:a4:57:e4:da:15:c5:e5:75:d0:b2:
06:d9:c4:cf:e1:34:06:bb:69:9b:f8:54:f6:da:7a:
7b:77:bc:24:ca:63:91:0e:04:47:f4:c8:75:7f:0c:
3f:dc:90:f1:cb:9b:7e:ab:18:63:8a:a4:4e:87:c7:
5e:68:3c:a6:55:9e:1a:70:2b:5c:3d:b6:91:35:7a:
b9:cc:d8:26:e8:6d:65:2b:af:f6:4e:56:5a:19:68:
3a:92:61:74:9e:07:4e:f5:69:8a:63:f3:5b:49:56:
7c:54:07:eb:30:3a:ad:13:75:83:5f:25:5e:c9:2a:
12:57:be:0f:44:35:8a:d6:08:5e:98:3e:c6:6b:20:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:E5:FB:7F:DF:4B:4D:19:C6:DC:98:86:CD:68:CB:CA:69:32:EE
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:f9:36:64:47:37:33:3d:d5:d5:2d:1a:17:76:92:8b:59:
75:68:ef:40:3b:7d:4f:f7:36:ee:71:8b:36:b6:22:a7:2b:9a:
0f:0a:2b:39:e1:35:b1:1d:ed:4c:22:cf:87:1b:49:7b:5c:15:
ea:df:fc:af:28:8e:fd:e9:3c:77:dd:a8:85:4c:5e:ad:44:5f:
d6:4c:7c:3f:30:0b:a3:70:9d:d2:e4:eb:fc:50:81:d2:93:80:
b1:b4:fe:a6:43:3f:02:3b:14:16:1b:9e:14:7f:c4:bb:2a:73:
c5:e7:ef:81:6b:bd:9e:aa:78:db:c5:4a:ac:42:b9:c2:35:22:
b7:c1:36:ae:22:17:1b:bf:15:35:30:88:a0:97:7c:66:6e:7c:
b5:7a:eb:20:ee:22:be:8a:24:69:8f:79:59:79:d9:8e:7f:41:
0a:25:07:5c:04:e7:08:41:85:1f:27:7d:34:81:35:ae:dd:90:
87:f3:db:89:1b:d1:0c:57:dc:99:29:eb:29:46:d1:05:67:61:
6b:94:96:1a:82:c0:32:29:84:bf:2f:1f:7d:a9:4c:17:90:8b:
59:c9:f7:49:22:72:04:a2:d8:e8:03:8c:9d:4d:38:07:b4:62:
63:aa:e1:89:b9:88:6a:5b:36:48:f3:c8:24:0c:a4:7f:64:c9:
9a:7a:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:55 2026 by rpki-client