Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: NVa2s1ob6bEyuRwmgHZyHSwNbGxQ/gTguSfsrmLrsoc=
Subject key identifier: FB:2E:E2:C2:C1:03:1F:0C:1A:06:0E:2D:B8:2C:D1:A8:08:AC:AF:1C
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019E1DFE1BB175B262A761E56530B22FCB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0FE6
Signing time: Tue 12 May 2026 21:00:52 +0000
Manifest this update: Tue 12 May 2026 21:00:52 +0000
Manifest next update: Wed 13 May 2026 21:00:52 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 3oYpVM5nJBkoGpbUpPq4TTAF9pcJjceI7ZJQXqZ/3qU=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:1b:b1:75:b2:62:a7:61:e5:65:30:b2:2f:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: May 12 21:00:52 2026 GMT
Not After : May 13 21:00:52 2026 GMT
Subject: CN=fb2ee2c2c1031f0c1a060e2db82cd1a808acaf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:c7:f2:2c:34:4a:4c:ad:c5:d0:e9:f6:8a:
24:25:5b:90:92:d7:0a:a2:94:7e:03:d9:4c:1e:10:
a5:3d:df:e1:72:51:5a:01:e5:f8:51:b9:af:e4:4d:
4b:05:dc:85:d3:1c:2d:d9:cc:fc:e8:12:74:58:bf:
64:01:c5:61:4f:36:2c:77:7a:c6:55:81:2f:7b:e2:
b7:0a:d1:75:f5:83:95:85:dc:d0:f0:0f:30:05:06:
3a:52:23:0b:eb:e4:30:6c:dc:59:50:ee:44:dc:6d:
b8:27:f9:62:ea:46:ca:c8:0e:23:a9:4f:22:e9:77:
ae:20:c7:d9:99:39:28:aa:17:43:8c:3f:d5:7d:aa:
cd:b7:78:40:90:da:8b:c8:b4:7c:99:ad:8c:c2:87:
fa:66:a5:af:5f:db:ad:a7:2a:ce:30:a7:90:ca:2f:
9d:f8:0d:31:81:1b:62:62:65:b1:76:5a:15:95:46:
bb:21:bc:d3:a3:cd:0f:77:c6:b2:19:ed:29:ff:f4:
d7:a8:e9:43:83:4b:f3:de:1c:48:49:f9:f7:19:e4:
6b:98:32:d4:76:eb:17:d2:68:1c:e3:4b:a4:bf:08:
c3:6e:cb:29:31:b1:a3:0f:94:21:7e:3a:11:36:c6:
18:b9:ae:be:9a:59:8d:2f:82:c7:f8:29:df:13:d9:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:E2:C2:C1:03:1F:0C:1A:06:0E:2D:B8:2C:D1:A8:08:AC:AF:1C
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:6c:eb:70:05:4d:f9:93:2c:b9:55:c5:10:ae:d1:e5:99:
cf:32:98:32:a9:04:2a:8c:96:cf:59:62:19:7e:04:35:7c:c8:
a2:4e:01:15:8d:b6:1b:47:92:f2:43:1f:cc:47:62:e1:7e:68:
56:07:10:c0:c9:84:37:ad:4c:d0:ed:a2:05:57:48:7f:9b:14:
0d:bd:b8:43:d8:c1:2c:8e:a0:c6:c6:c5:89:d1:be:b5:08:9e:
ff:dc:de:fc:a5:ce:eb:21:fb:05:a9:3b:b0:41:34:e5:f2:14:
12:9b:1f:25:d0:4f:b3:8e:35:40:c6:16:6c:28:17:37:35:be:
b8:8f:90:4e:45:a8:54:17:67:3a:ce:32:fc:ac:5d:25:4e:a4:
7f:5d:5f:89:05:ec:51:79:2b:4e:1a:eb:c1:07:ab:b8:4d:59:
3d:93:0a:d3:7d:53:9f:23:04:ea:bb:9a:41:eb:9b:19:3a:ab:
9c:a3:19:7f:93:56:ed:3f:7c:8b:75:99:64:df:a8:85:ab:75:
3c:85:c9:9e:43:af:41:51:75:40:cf:c5:36:72:01:b5:09:15:
69:7d:b1:8e:95:18:6d:8c:66:08:b2:ad:a5:7f:2d:cc:96:07:
46:28:4f:2e:f3:a3:04:c3:4f:18:a7:80:65:12:7b:23:8c:53:
3d:c7:e5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/huxdbJip2HlZTCyL8uQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk
YTA0NmIwHhcNMjYwNTEyMjEwMDUyWhcNMjYwNTEzMjEwMDUyWjAzMTEwLwYDVQQD
EyhmYjJlZTJjMmMxMDMxZjBjMWEwNjBlMmRiODJjZDFhODA4YWNhZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNfH8iw0SkytxdDp9ookJVuQktcK
opR+A9lMHhClPd/hclFaAeX4Ubmv5E1LBdyF0xwt2cz86BJ0WL9kAcVhTzYsd3rG
VYEve+K3CtF19YOVhdzQ8A8wBQY6UiML6+QwbNxZUO5E3G24J/li6kbKyA4jqU8i
6XeuIMfZmTkoqhdDjD/VfarNt3hAkNqLyLR8ma2Mwof6ZqWvX9utpyrOMKeQyi+d
+A0xgRtiYmWxdloVlUa7IbzTo80Pd8ayGe0p//TXqOlDg0vz3hxISfn3GeRrmDLU
dusX0mgc40ukvwjDbsspMbGjD5QhfjoRNsYYua6+mlmNL4LH+CnfE9mgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsu4sLBAx8MGgYOLbgs0agIrK8cMB8GA1UdIwQY
MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt
ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm
LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYNs63AF
TfmTLLlVxRCu0eWZzzKYMqkEKoyWz1liGX4ENXzIok4BFY22G0eS8kMfzEdi4X5o
VgcQwMmEN61M0O2iBVdIf5sUDb24Q9jBLI6gxsbFidG+tQie/9ze/KXO6yH7Bak7
sEE05fIUEpsfJdBPs441QMYWbCgXNzW+uI+QTkWoVBdnOs4y/KxdJU6kf11fiQXs
UXkrThrrwQeruE1ZPZMK031TnyME6ruaQeubGTqrnKMZf5NW7T98i3WZZN+ohat1
PIXJnkOvQVF1QM/FNnIBtQkVaX2xjpUYbYxmCLKtpX8tzJYHRihPLvOjBMNPGKeA
ZRJ7I4xTPcflpA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:51:13 2026 by rpki-client