Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: KhkWd4lq8cVCpqoc8jp9pKQsiFZy9+2F5tN3JaUsGok=
Subject key identifier: 5E:1F:50:9A:E2:C5:25:A0:D6:F7:6B:4F:39:0B:69:3D:AE:63:96:FE
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019F90C7E1A0E5B1F3441F22357A6AD82150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 10A6
Signing time: Thu 23 Jul 2026 21:00:46 +0000
Manifest this update: Thu 23 Jul 2026 21:00:46 +0000
Manifest next update: Fri 24 Jul 2026 21:00:46 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: x0M4aAnQn/CJ5KU7w3hqJnvKwkbe9t1kR+FrI38/Yjc=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e1:a0:e5:b1:f3:44:1f:22:35:7a:6a:d8:21:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jul 23 21:00:46 2026 GMT
Not After : Jul 24 21:00:46 2026 GMT
Subject: CN=5e1f509ae2c525a0d6f76b4f390b693dae6396fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:87:ee:9c:63:5d:5b:5e:44:7c:b5:ac:90:
f2:88:c7:6e:b0:6e:d1:fc:3f:9e:97:ac:14:23:3f:
97:ca:b8:f6:98:f0:55:81:e4:d3:5a:1a:0b:69:57:
08:6b:d3:23:30:51:ef:6c:4f:20:3e:57:bd:76:c0:
ce:34:64:c0:fa:4f:49:46:4c:ec:ab:94:40:d6:a3:
fc:be:9c:cc:a4:b3:20:e9:76:c2:bd:f8:24:c6:92:
8c:73:93:26:7f:19:0d:32:d9:42:ed:a0:55:18:0e:
c3:9e:b3:2e:80:06:69:56:af:5b:25:e8:bc:d7:df:
06:4b:f8:46:47:5c:16:41:31:13:ee:d4:ac:d2:46:
5d:5e:2c:54:95:16:4c:f2:8f:9b:85:87:79:45:52:
b1:d3:0a:b0:ef:a9:89:f9:4a:7a:e7:40:18:04:3e:
5a:d8:a7:49:d2:04:36:9b:37:e8:8e:9b:20:f0:b4:
42:62:5f:cf:fa:19:c1:ea:de:ad:eb:d6:0d:22:82:
ee:56:5a:ec:ef:af:a2:ea:66:28:1b:54:a8:54:c1:
5b:55:3d:10:f6:e8:df:f1:7c:a7:5c:06:50:d3:f3:
8c:3c:66:aa:32:91:9c:df:33:ae:98:e3:d3:fe:d5:
b6:69:ce:b5:2d:6f:55:ee:56:11:9e:89:d5:7a:8b:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:50:9A:E2:C5:25:A0:D6:F7:6B:4F:39:0B:69:3D:AE:63:96:FE
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:38:90:f7:2c:f1:d3:b8:eb:4d:32:6f:0a:4b:56:d7:5a:
04:50:96:15:c6:2f:d8:06:4d:9b:55:9f:ff:46:14:21:b4:e3:
52:ae:f6:2e:d7:c7:65:1b:e9:30:cf:2f:09:1b:31:7a:f3:ab:
b8:d5:e9:c8:a7:7c:99:8f:82:a8:52:73:7a:f0:9b:89:62:96:
83:fb:fa:2e:25:57:22:e5:57:02:a3:bd:ba:7c:fd:d8:10:d8:
98:2b:13:d6:d9:38:83:12:b7:c6:22:9a:7e:30:f1:2f:ff:77:
45:f8:68:ef:f1:bc:af:0c:2d:1a:b6:2e:b0:de:a5:d0:3c:34:
cc:78:9c:2a:ce:84:7b:4c:6a:d3:fa:3d:e8:f1:51:da:d8:04:
c6:a2:6d:67:ba:dd:27:6b:a4:67:5c:ed:a4:16:e6:ed:27:8a:
44:68:7f:98:a7:53:ea:07:d6:47:89:2d:a0:aa:79:6e:91:05:
cc:ce:23:c2:02:b1:e1:37:ff:89:d1:d0:24:58:1a:53:6a:65:
04:32:3a:07:6e:e8:fb:31:ee:c6:4e:29:52:bd:61:83:18:3b:
de:64:0b:5a:20:96:48:3e:b4:1b:a2:d8:9e:6a:ea:1e:a3:a5:
db:76:93:4d:f7:86:4a:df:27:b3:99:75:9a:50:da:a4:0b:ce:
db:de:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:08 2026 by rpki-client