Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: rIHElMnA0NM/DwtHok6tII47K8h+VK/uGGQQqCoPh2o=
Subject key identifier: 74:3C:A3:61:EC:DE:E2:6D:49:20:67:6D:1F:97:04:75:9E:01:26:B3
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01A0CF360581594EB1BA89780C8658B1D222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 17:00:19 +0000
Manifest this update: Wed 23 Sep 2026 17:00:19 +0000
Manifest next update: Thu 24 Sep 2026 17:00:19 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: XNXwkl8pY7sx764MJaEfGhToztnxBllGQS69jnJ0b2g=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:05:81:59:4e:b1:ba:89:78:0c:86:58:b1:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Sep 23 17:00:19 2026 GMT
Not After : Sep 24 17:00:19 2026 GMT
Subject: CN=743ca361ecdee26d4920676d1f9704759e0126b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:97:50:e7:d5:0f:76:25:4a:9e:ac:eb:9b:
03:96:5d:c4:ca:4f:5f:31:a2:d1:3f:08:42:fb:95:
81:24:38:32:12:27:96:a3:44:79:47:13:f4:72:69:
5a:24:64:23:a7:89:7e:9e:af:b6:1f:99:69:df:ea:
93:17:cd:cb:05:b4:b3:9a:cb:f6:d4:2a:8a:84:b3:
67:30:c5:05:95:df:46:ac:95:35:d2:1c:5c:75:ab:
c8:06:8c:92:e3:67:1e:29:bc:80:21:e0:57:31:a9:
4d:8c:64:cc:37:fd:18:15:df:68:fc:cd:9c:f1:84:
0f:aa:6d:20:05:e1:80:4e:95:d3:71:ba:c9:c0:c4:
7f:df:a2:3f:6f:93:d7:e8:d2:7f:f9:16:de:a6:fd:
ea:51:b1:c4:5c:08:7b:4e:5a:c3:f3:b9:55:05:ad:
de:53:1c:0c:89:ec:65:3d:69:12:85:e7:29:aa:77:
54:11:7a:24:0c:ec:c7:be:81:09:b0:3d:e4:70:5b:
18:c7:6d:58:01:7b:6d:68:fc:19:c6:a1:43:d8:06:
df:dd:7b:16:3f:2d:81:fb:12:01:92:0b:92:d9:4e:
a7:7f:5e:c3:69:58:67:db:8e:41:fc:74:68:c0:23:
ff:fd:e6:34:87:44:93:82:40:3f:af:27:f8:85:a7:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:A3:61:EC:DE:E2:6D:49:20:67:6D:1F:97:04:75:9E:01:26:B3
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:00:df:e8:fc:76:51:90:c3:dd:51:39:72:f9:72:f0:b3:bd:
a5:9a:1d:7f:b4:76:fb:62:58:49:41:d8:78:ee:c7:cb:4d:55:
12:e3:fd:26:a1:5e:ea:d3:77:db:f3:3b:82:93:59:98:cb:20:
39:31:cc:d3:b9:00:1e:57:ac:03:a3:6d:f6:69:fc:87:fc:19:
35:8f:1c:bd:c5:72:b2:d3:e4:e7:f6:a8:bf:20:96:07:35:a1:
8e:fc:19:87:ba:9d:90:3a:1b:28:18:d8:e6:6d:29:8d:80:15:
6d:ae:9c:34:8e:68:d6:32:83:68:b9:a4:82:7f:bb:12:dc:9a:
7f:81:f9:38:a6:8f:c8:05:7c:92:ee:3c:df:98:c7:ea:ed:4f:
7e:49:98:4e:05:bc:56:28:87:2f:d7:6d:5b:80:73:2a:fa:67:
a4:93:55:ef:98:02:c5:8b:8f:d4:ce:1e:39:6d:11:b2:f7:de:
22:72:7e:41:c4:81:6d:c7:77:9a:cf:31:d3:83:7e:9b:80:4f:
e9:de:5f:67:d7:46:b5:12:da:a9:41:3f:51:dc:0d:ba:d6:4c:
5c:cc:97:a1:7e:3f:eb:bd:34:c9:1b:7a:02:0c:f1:87:47:0b:
c3:47:01:58:27:18:02:77:9c:aa:58:ab:57:87:7c:7d:47:9b:
af:91:5a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:59:16 2026 by rpki-client