Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: mhe7LSpPk/IArZnr/atJLvXZxOO1VtJriPsCmaDaGi4=
Subject key identifier: AA:53:67:A4:41:85:CF:04:F1:B4:41:73:03:DC:45:EF:12:46:42:EF
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 01A0D538A51805C73D455A0CC177DFC9ED16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 114E
Signing time: Thu 24 Sep 2026 21:00:54 +0000
Manifest this update: Thu 24 Sep 2026 21:00:54 +0000
Manifest next update: Fri 25 Sep 2026 21:00:54 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: lIRdWQbQEdY8m6Rjkk5A2TSBIFjh6/Xgk8PARQCHq+w=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:a5:18:05:c7:3d:45:5a:0c:c1:77:df:c9:ed:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Sep 24 21:00:54 2026 GMT
Not After : Sep 25 21:00:54 2026 GMT
Subject: CN=aa5367a44185cf04f1b4417303dc45ef124642ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:c4:f1:f0:f4:68:94:24:0d:89:85:bb:f5:
aa:1b:70:8f:7f:71:8f:54:3b:a4:89:f5:64:40:6c:
34:87:fc:37:b8:79:61:76:8e:53:6f:e3:ac:09:a7:
44:cc:39:90:ca:dc:fc:cc:25:7d:ea:08:2c:9d:12:
fa:60:96:9f:ab:cd:57:84:05:dc:9c:19:30:5a:08:
b4:e2:e8:68:6c:01:3a:dd:81:79:d7:e3:5a:28:2f:
3b:1e:b3:58:e4:5b:c2:c1:fc:9c:a0:3b:b9:b4:28:
d1:66:d6:40:27:c2:fd:00:99:ab:a3:12:75:de:e4:
96:ee:31:b0:b9:d0:6c:84:67:d0:fd:b4:f7:43:1d:
cc:4e:74:ac:3d:8b:10:8f:64:ca:43:59:6b:94:b5:
b8:48:19:6f:77:c9:15:2f:da:42:a7:0b:99:de:d5:
ad:30:57:50:33:e0:cf:7b:e3:a3:5a:14:f7:c9:20:
0c:5d:9b:e6:ae:74:b3:51:b5:da:8d:6e:a9:c3:3b:
37:91:12:24:7d:b9:18:4a:ef:12:86:9e:c7:65:01:
a7:d8:fb:7c:14:9a:61:81:76:0e:97:43:15:64:c6:
0e:3d:33:5c:23:cb:55:bd:eb:29:5a:03:81:fa:cf:
a8:fc:c8:e3:81:db:18:79:7e:66:87:5d:9e:a7:d0:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:53:67:A4:41:85:CF:04:F1:B4:41:73:03:DC:45:EF:12:46:42:EF
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c5:b6:91:1d:03:dd:1c:34:e5:ee:9e:3b:b9:79:55:af:c6:
15:0d:a8:8a:50:7c:6e:3c:d9:e7:6e:be:a7:ae:cb:6e:f6:b6:
a2:2e:51:49:2b:51:b8:a8:29:56:29:56:86:49:1d:46:a2:79:
7f:9d:99:c7:0f:db:10:0d:8a:38:4b:43:48:fd:04:4c:be:e6:
03:17:d8:a8:1e:cc:68:a9:91:ff:50:bf:bd:df:d0:ea:03:64:
bc:de:f9:7e:98:be:d6:0d:d9:af:dc:6e:0d:e3:09:bd:5b:55:
a3:f8:29:7f:99:ac:1f:25:b2:7b:cd:a2:fb:13:1e:8a:92:9f:
be:c6:40:a0:1e:61:31:3a:ac:3a:13:cf:58:b0:77:ba:71:28:
93:62:c0:6f:8e:92:ee:6a:43:dd:6c:85:5c:94:7b:93:91:a2:
af:b8:a7:02:40:72:87:11:68:42:34:8b:1b:99:1a:b8:d4:ff:
05:07:04:55:8b:4f:ac:de:87:ce:a6:d3:c1:d3:70:29:3d:e3:
48:7b:30:05:ee:76:4a:b7:f6:4f:18:f0:8b:dc:ad:2d:88:34:
73:0f:a4:a7:0c:d6:ff:34:d7:26:38:5c:94:6b:2c:3c:e3:eb:
01:fe:c5:9f:1a:94:68:bd:fd:96:b8:3e:c5:17:1f:e4:4d:b0:
9b:4a:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:57:15 2026 by rpki-client