Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: IDMhf6+4bcZy0/VtPLOSokNvpFuIn1guehIix3idRv0=
Subject key identifier: F9:42:32:9D:68:E6:72:0A:52:3E:F3:BB:6A:A9:8B:64:FC:DA:B3:D2
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019E1F4834F3276A0FF75EF8620B19F625F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0A19
Signing time: Wed 13 May 2026 03:01:26 +0000
Manifest this update: Wed 13 May 2026 03:01:26 +0000
Manifest next update: Thu 14 May 2026 03:01:26 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: DKX3XkW7PlgsouucDPYEs3laLwOKRZDzRXjmuo7qBz8=)
4: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:34:f3:27:6a:0f:f7:5e:f8:62:0b:19:f6:25:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: May 13 03:01:26 2026 GMT
Not After : May 14 03:01:26 2026 GMT
Subject: CN=f942329d68e6720a523ef3bb6aa98b64fcdab3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:0f:91:96:54:52:ee:f0:f5:0b:c9:2d:c7:
12:b8:0e:3a:70:1c:25:06:31:8b:ac:6b:1d:ee:34:
4b:4e:74:ee:b3:1b:42:06:88:a4:91:de:f0:1d:8f:
a6:29:6c:d9:41:d4:6b:6a:5c:1e:e8:df:3d:6b:91:
0c:cf:d8:d1:d6:4b:ce:be:8a:75:25:d1:b1:c4:1b:
cf:a5:2f:94:0c:c2:0e:62:ab:16:e4:b1:f3:97:11:
a0:f9:04:0c:57:83:0b:f2:e7:f5:ab:68:dd:ee:7d:
ad:e0:ad:7a:dc:3b:58:e2:64:61:52:50:7a:64:ad:
05:cd:de:b8:af:33:e8:77:8a:9d:ed:56:91:49:fd:
90:4c:aa:24:9f:37:75:f5:ba:76:cc:eb:87:0e:f6:
2b:e9:58:75:e4:bd:0f:26:ee:51:27:65:2f:f5:1c:
e2:89:97:90:2d:c3:c5:c7:e6:1b:39:da:59:a6:fa:
84:c0:0c:75:d4:31:a2:93:1b:9c:56:75:83:06:6c:
ec:31:eb:a9:15:d6:97:26:6d:d7:0c:5b:c8:c6:f4:
a0:6a:0d:e9:f0:81:2a:3b:08:d5:69:b4:0f:c3:4c:
ee:24:a2:4d:df:39:db:9f:5d:2e:24:d4:f6:2a:08:
a5:97:82:1e:12:dc:40:94:df:3a:b9:9e:df:9f:08:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:32:9D:68:E6:72:0A:52:3E:F3:BB:6A:A9:8B:64:FC:DA:B3:D2
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f9:e0:2d:28:96:94:4a:cf:67:68:d0:d3:7a:c1:60:bf:a7:
39:5a:3b:cc:30:cc:fc:dc:8a:8b:7e:2a:ae:34:fe:dd:0b:de:
29:df:ea:27:07:87:2e:a6:93:03:4b:b0:66:98:bb:54:83:5c:
90:0a:aa:31:67:0a:e8:15:05:81:16:62:d9:b4:db:25:0d:7a:
b9:e1:26:95:19:20:5a:e4:38:c2:32:4e:5f:ad:e8:f1:8f:d9:
18:ac:86:2e:11:fb:87:c1:4a:59:6b:a5:bb:6b:f5:9a:1f:55:
bc:5e:ed:0c:ef:13:0d:91:f6:66:af:14:65:81:13:31:c6:e7:
16:d1:a5:d0:da:00:8c:08:a9:ca:38:58:49:ed:cf:d5:92:06:
ff:4b:78:ee:0e:8c:fe:26:7b:90:19:0b:e5:d1:53:a4:79:4d:
6c:f1:b5:e5:3b:73:c9:50:e5:c4:a9:16:5d:a6:0a:2f:75:fe:
da:7c:fd:f8:36:98:a3:02:63:1e:a6:3d:09:8f:dd:c6:50:a3:
9b:89:12:7a:b2:57:87:2b:23:9e:fc:26:c6:ff:2f:94:11:c8:
9e:43:f8:54:3f:b0:fe:e7:44:81:60:62:e0:ba:42:85:9b:02:
ed:99:82:ec:32:59:fc:6a:9e:99:39:19:10:f5:75:e9:f4:b5:
61:f7:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:18 2026 by rpki-client