Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: 0G5KV4UraO9jg0A/uaz25p8nE8+8hLMfR7BR94Z+Flo=
Subject key identifier: 0C:13:06:24:B1:DE:0F:EB:E8:E4:2F:E0:7C:D9:BF:04:6F:6E:E4:E7
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019D26CD553646BE4A8BAAD5E2E93B85E6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0F66
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: KOQ4PLkDiSxs6xuAukLFNyQlRPFbqwYHOSUic1hd9u8=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:55:36:46:be:4a:8b:aa:d5:e2:e9:3b:85:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=0c130624b1de0febe8e42fe07cd9bf046f6ee4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:d5:35:7b:d8:a1:32:22:3a:76:a7:6e:a3:
d9:65:ba:70:ae:3c:bf:52:72:d5:43:8e:39:f4:60:
b2:6e:7e:7d:43:a2:4c:53:4e:03:06:84:0a:38:a7:
3f:49:12:eb:8d:40:44:55:8d:12:02:bd:47:11:5e:
68:e3:d6:7d:f7:51:8d:ae:2a:5d:ed:4a:e8:45:03:
2e:10:ae:7b:d6:13:2d:a6:67:ee:9e:49:97:ad:6c:
25:98:e6:d0:e9:23:3f:bd:e3:68:c0:e9:e7:43:3f:
c7:e1:a9:ff:39:5b:fc:62:91:39:11:84:1e:d2:9e:
d8:73:cc:6c:5a:be:bc:3f:3c:95:f5:cf:08:31:cc:
fd:6e:cb:e7:3e:5c:c2:d1:86:f3:cc:99:09:a7:93:
f0:ae:42:d0:b4:f5:9b:c6:98:2b:c0:af:cc:b0:46:
a2:68:e0:f5:df:60:24:81:43:c8:99:a5:a0:fe:41:
84:32:91:f8:1a:52:08:75:85:34:44:32:89:5e:5f:
65:89:53:ee:2b:a1:55:df:fb:05:1a:d9:7e:2c:a9:
8a:91:f7:2a:f6:87:73:b7:4e:aa:9e:9a:72:4c:95:
60:90:68:23:60:54:d6:34:d0:22:92:de:1e:b0:2b:
12:78:98:ae:4c:92:ec:37:04:69:31:51:19:60:27:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:06:24:B1:DE:0F:EB:E8:E4:2F:E0:7C:D9:BF:04:6F:6E:E4:E7
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:d4:42:63:f8:8f:e9:ed:5b:18:f3:82:b2:e4:51:5a:1f:
6b:3a:37:e5:fb:91:e3:38:55:44:5f:48:a4:0f:43:8c:b9:ac:
19:ac:3c:fe:ad:8f:9b:54:23:ee:9e:f5:15:12:e1:d9:a1:9a:
8a:23:c2:e6:f2:f2:39:87:ee:1e:86:ae:4a:10:4a:0b:52:a9:
dd:30:b5:42:95:f6:4a:ef:61:a0:54:1d:1e:29:c8:c9:6f:5b:
0d:8c:b3:54:93:6e:41:12:85:b9:32:77:be:8d:8c:75:ea:a4:
fe:e4:9b:c8:d8:47:d4:39:81:c6:59:38:74:28:f9:c5:6c:e6:
b6:c2:e4:37:8e:26:d4:07:31:a0:0b:64:f2:ea:27:4c:97:1e:
3a:88:1b:5d:1f:0b:cf:86:8a:ae:68:ec:45:98:c4:28:dd:95:
7c:95:f1:e0:4a:b3:fc:cd:07:17:72:68:43:6c:3a:9e:16:8a:
29:dc:ff:81:86:65:a7:9d:51:52:e1:5d:0d:5a:84:c9:e9:d3:
fa:c3:26:d5:e8:63:dc:74:da:f1:eb:c4:12:37:1a:e6:04:43:
c9:6f:fa:2e:67:fe:31:cb:cb:85:f3:45:35:36:d7:a7:66:6e:
66:51:5f:35:a6:52:7c:ec:c4:51:07:17:b0:11:62:af:da:ac:
e8:90:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:42 2026 by rpki-client