Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: TaIYrclxH51RhD5drh4CA4GBc99uzg9L7qBRbpZdwqQ=
Subject key identifier: 57:EA:DE:46:2F:0B:27:7A:EE:F8:20:C8:88:69:C9:AD:B1:77:BA:28
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01A0E550E367B62DB95F379C278EEF0E00BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0B89
Signing time: Mon 28 Sep 2026 00:01:18 +0000
Manifest this update: Mon 28 Sep 2026 00:01:18 +0000
Manifest next update: Tue 29 Sep 2026 00:01:18 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LPUMGL0DH5PcG1AojfBAEkKYHe4.roa (hash: N5ZeUyAle6r7IlHtw9k67XdUKJ/pt6NdHoxYhDtnO8Y=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: 3cMznV0GDJMEUbhOQAvno7znmjm/8P7UtH4tDoPUyo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:50:e3:67:b6:2d:b9:5f:37:9c:27:8e:ef:0e:00:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Sep 28 00:01:18 2026 GMT
Not After : Sep 29 00:01:18 2026 GMT
Subject: CN=57eade462f0b277aeef820c88869c9adb177ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:88:c2:11:a6:41:ef:07:17:8a:2c:cb:3d:
b4:cd:0d:d1:ff:e7:d7:cb:ba:73:e9:9c:eb:30:4e:
20:9d:14:69:0c:ad:1a:a2:2e:78:cc:66:cc:4b:00:
34:9a:e5:d5:98:4e:9e:f2:47:f0:10:7c:70:13:cb:
8a:7a:d6:b8:6e:96:05:61:95:4d:67:12:04:38:37:
d6:59:47:f0:4d:3f:d7:6e:ce:71:54:15:9a:6c:7b:
33:da:51:53:20:86:18:e4:d8:12:0c:50:56:9f:d3:
9e:d6:81:fd:76:3b:42:e1:70:25:3d:80:05:ab:eb:
f5:ca:ef:c2:3e:16:00:ab:67:a1:60:fd:2e:a2:0a:
8b:f4:1e:03:bd:00:b8:f1:4a:8c:f9:21:cd:2f:e8:
82:56:1d:df:69:6d:a4:48:b6:b1:f9:62:5c:49:b1:
59:46:6a:7b:90:59:de:80:19:37:13:6d:22:ce:4a:
24:1f:9b:ed:ad:fa:04:9f:99:4c:df:dd:b4:9c:f3:
ee:ea:e3:72:3c:dc:b8:2a:3f:fc:b3:34:07:c1:b7:
4b:a7:8b:e5:ae:ae:01:69:ce:60:78:b1:89:c5:c4:
2a:65:a4:53:92:08:cf:08:19:a9:c6:03:ca:72:0c:
6a:10:34:14:c8:5c:da:52:40:11:96:b2:c3:82:a8:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:DE:46:2F:0B:27:7A:EE:F8:20:C8:88:69:C9:AD:B1:77:BA:28
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:1f:df:89:a7:8e:50:38:91:17:1f:25:45:4d:45:1d:04:
07:dc:32:02:81:3a:0d:f0:aa:4b:2c:12:b8:05:70:1d:76:09:
38:60:97:aa:95:55:82:90:18:40:35:27:12:5e:6f:80:88:8c:
5c:30:18:64:30:44:23:e5:6f:f6:04:44:fc:3d:f4:82:f3:d6:
02:73:ed:5e:2d:8b:96:a3:4f:bf:3e:9f:ac:6b:b2:f7:ec:5a:
bb:d4:50:49:46:7b:67:b0:39:68:91:87:c6:e2:17:ec:2b:8e:
bd:de:c5:e9:c4:10:b8:77:31:73:15:de:7e:bc:c5:5b:9f:22:
c3:6b:8c:26:99:08:73:80:ae:8a:01:8d:95:5d:20:eb:4e:3d:
1f:5c:e4:4c:07:13:02:d5:e6:e8:50:17:c9:2c:8c:38:3c:8d:
c8:b9:24:b4:7e:d5:4b:87:6a:1f:1d:e4:3f:67:b5:97:9d:75:
8e:56:79:88:72:8a:67:32:eb:37:f7:29:5f:29:d8:4e:ce:d8:
9f:89:d4:cd:44:c9:63:48:ae:6d:31:45:b6:2d:b4:ed:b3:56:
d2:50:0a:6d:7a:78:53:62:a9:7f:af:0d:23:55:fb:0a:f5:25:
fa:c0:70:f7:3c:d9:eb:39:63:02:0a:89:8c:e0:1c:04:7d:3c:
32:23:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:15:49 2026 by rpki-client