Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: r4pagRgjMQZJgtOE9GvT+PT0LNytlmSJV63qp/E/DLI=
Subject key identifier: 93:6E:D8:1B:86:54:62:CE:AA:C2:C4:31:56:F1:4B:48:CA:3F:4F:64
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019D26280C9525A5871F29997B28708153D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0997
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: aI4QmOuQCzEhJH89k/J4vWOPCPcGDbj9iyWXjBf2gbg=)
3: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
4: yz9etzU3WAij-xTcB349cOYhteM.roa (hash: MWnxlRDoogvVu7rgyi8dvl0hLzqj48ZRfL2MzhVICvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0c:95:25:a5:87:1f:29:99:7b:28:70:81:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=936ed81b865462ceaac2c43156f14b48ca3f4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:21:19:41:eb:04:de:ae:4d:e0:00:ca:3d:
b0:0f:fa:3a:12:76:f4:9c:c4:f4:e7:2d:1c:f5:3c:
1c:0c:e9:fe:bd:e8:c0:25:91:39:cd:fb:9d:b8:c3:
09:26:03:73:d2:b5:f5:2c:3f:df:e5:fb:3d:6a:f3:
4b:77:cc:83:97:b2:d3:14:7d:d6:37:cc:03:e3:6f:
ea:5d:46:73:2b:ac:e0:9a:79:51:15:fa:a0:e9:08:
88:3e:87:0e:30:d2:c6:7f:3a:0f:3f:a3:fa:13:48:
dc:28:30:0a:ff:31:c9:dc:f6:df:5a:5d:f6:a5:c5:
ff:5c:a3:18:40:1a:81:d3:b2:4e:3e:67:1d:04:88:
12:12:94:6e:19:40:94:28:e6:bc:6c:58:68:d5:51:
e9:f0:62:e4:ea:7d:4a:54:72:12:4d:64:bd:9d:d6:
76:7b:1d:1c:8b:14:c2:2f:b2:26:f6:4a:21:63:1c:
39:21:80:c8:8b:7b:7d:1e:68:8d:ee:f5:22:8c:84:
f0:60:3a:ba:4a:cd:31:60:e6:e1:71:b8:33:82:f3:
a1:4b:e6:94:46:8c:6a:4a:a7:91:44:b4:1c:1f:61:
2b:42:aa:62:30:ed:e1:c8:72:65:e0:7b:1a:b8:7f:
62:d8:17:cb:fa:3b:36:54:d1:71:c3:8f:48:13:2c:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:D8:1B:86:54:62:CE:AA:C2:C4:31:56:F1:4B:48:CA:3F:4F:64
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:89:7e:3f:bf:91:27:3a:c0:17:47:56:68:62:74:f0:02:7a:
53:51:3e:65:41:17:83:84:b1:5b:80:0d:78:37:9e:88:99:5b:
05:c6:d6:2b:8c:e9:c0:4e:a1:6c:0b:c8:0f:bb:29:7f:79:f1:
20:c1:37:f4:8c:4e:e4:25:3b:19:e3:d6:c2:84:0e:a4:53:a0:
23:c3:2d:e5:cc:6d:83:6d:29:a8:52:5a:f1:6c:76:56:34:4e:
66:23:a9:48:6f:2b:ae:f0:d3:15:4d:6b:e9:9f:ea:98:9a:ca:
30:2f:89:cc:1d:93:66:75:1c:4a:00:10:3d:85:6a:29:48:a0:
ac:99:e6:4c:f3:77:78:35:d0:22:d9:88:73:f2:e4:3a:b5:51:
d7:c8:9a:ce:a9:61:25:82:91:54:69:33:bc:5c:f3:9e:66:c8:
91:59:12:64:af:cb:74:36:e7:f2:a2:35:74:41:4a:f9:44:a5:
17:fd:49:a3:42:6e:53:53:a2:90:e1:bf:ff:88:dc:fa:6f:f0:
a2:59:30:cf:5b:b9:0a:e1:c5:1e:a8:93:cc:80:a1:97:16:eb:
6f:b7:e0:b7:31:94:4d:a4:b5:29:60:2d:1b:74:a3:8b:69:66:
97:d6:2b:ec:60:b6:f5:99:14:77:e2:4d:0d:85:4b:b8:aa:b2:
8d:5b:09:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:44 2026 by rpki-client