
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
File: CVD6zJX7pJXse2VCcTl9VVmJWvs.mft (raw, json)
Hash identifier: 6pTWGqdODp5MStTuCcll/WCc14Y00FwSXdn6KLN5FBc=
Subject key identifier: F5:94:19:20:8C:EC:2D:64:CD:A2:57:93:DD:D2:F7:15:9D:F3:CF:59
Authority key identifier: 09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
Certificate issuer: /CN=0950facc95fba495ec7b654271397d5559895afb
Certificate serial: 019F905A21E4CF9BAE488AC0D8351321FC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
Manifest number: 15
Signing time: Thu 23 Jul 2026 19:00:53 +0000
Manifest this update: Thu 23 Jul 2026 19:00:53 +0000
Manifest next update: Fri 24 Jul 2026 19:00:53 +0000
Files and hashes: 1: CVD6zJX7pJXse2VCcTl9VVmJWvs.crl (hash: +7iIcThmoDwv/5EOoLAGUMBIviErM4b6wZfwe9FDlSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:21:e4:cf:9b:ae:48:8a:c0:d8:35:13:21:fc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950facc95fba495ec7b654271397d5559895afb
Validity
Not Before: Jul 23 19:00:53 2026 GMT
Not After : Jul 24 19:00:53 2026 GMT
Subject: CN=f59419208cec2d64cda25793ddd2f7159df3cf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:6a:34:12:ca:30:e1:41:fb:64:c7:68:31:
e0:01:ab:d6:2a:5d:80:c9:0b:b4:b8:c1:8d:39:79:
18:9a:21:45:4c:9a:84:26:81:7a:f6:df:6c:41:4b:
61:c3:a1:67:49:45:28:57:97:59:42:82:0b:51:69:
5c:0b:59:95:45:a1:fa:de:af:f6:d9:e1:26:f6:41:
32:89:54:d9:4d:45:ae:5e:d9:1e:99:99:cb:16:22:
a3:59:b4:95:09:0d:1c:b7:43:64:60:bc:5c:ce:f5:
8e:2d:5c:ba:9f:83:67:64:80:e1:ac:56:f9:d2:6e:
fa:e6:3b:c8:c2:d8:74:d0:df:21:8c:f2:b3:57:10:
c0:08:53:01:9b:b4:e9:90:9d:20:d2:f3:d7:4e:65:
bc:a9:64:4b:d7:dd:d5:b9:5f:e9:e1:0d:26:62:71:
50:30:5d:66:d9:1e:61:da:9b:71:04:6d:f0:b8:e9:
83:75:07:0f:2a:ad:72:4e:02:3f:4b:04:af:2a:3e:
2e:22:7d:03:9c:d0:8b:e9:2b:63:70:1e:a6:47:c6:
bb:4d:5b:12:d1:38:19:d4:16:9b:ad:8c:0f:0c:13:
59:6e:77:8e:32:6a:d2:cb:c7:d0:0b:0b:3e:c5:b1:
95:37:eb:37:72:cb:32:8a:08:cc:fc:90:b1:33:4b:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:19:20:8C:EC:2D:64:CD:A2:57:93:DD:D2:F7:15:9D:F3:CF:59
X509v3 Authority Key Identifier:
keyid:09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:8d:c3:02:a7:f8:7e:d4:21:a6:63:e9:2c:d2:6c:ba:78:
5f:b7:d7:2a:a4:94:61:91:43:c2:c5:39:06:93:dd:7f:cb:13:
38:1e:08:d6:76:ac:52:85:ab:d6:9f:5d:fc:2c:24:10:83:01:
5c:52:63:be:a5:69:c0:d5:80:cc:76:dc:0b:c0:05:dd:f2:d8:
83:05:c7:57:64:79:e9:98:01:6d:5f:1f:6e:e2:76:56:57:07:
ed:df:0c:b8:ef:08:35:a2:8e:8b:bc:de:1f:bb:75:05:36:da:
7c:96:cf:1c:9a:64:11:e3:2c:bf:7b:f0:05:4d:d2:d0:05:37:
b1:72:ac:96:68:27:37:29:10:00:e4:01:f7:70:5e:36:12:a3:
bf:e9:00:76:6f:5d:09:76:08:34:98:de:c8:c3:5c:73:6d:47:
35:cc:db:f4:be:ba:4a:f8:ff:a1:f5:07:b4:da:f1:7d:4e:73:
06:76:31:59:75:04:cb:0a:a2:c1:35:c3:a9:19:54:95:c0:52:
03:46:a1:04:18:5a:0c:0a:ae:2a:a9:73:5e:9c:61:80:2a:7c:
96:0d:de:cf:62:31:3a:31:e5:0f:8c:5e:e4:c4:c4:51:f8:af:
97:33:40:86:f1:34:e2:d2:3d:77:b6:fb:50:c1:34:77:8b:5e:
b0:d2:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:25:53 2026 by rpki-client