Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
File: CVD6zJX7pJXse2VCcTl9VVmJWvs.mft (raw, json)
Hash identifier: CrtYy5xqCQPfRrOEkBMnpmoii7PSzReHZiZOSO+iV/U=
Subject key identifier: C6:40:B6:E0:E0:99:A7:20:EF:6F:24:C1:42:BB:B2:05:40:79:B9:81
Authority key identifier: 09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
Certificate issuer: /CN=0950facc95fba495ec7b654271397d5559895afb
Certificate serial: 01A0DA96A53EE532B44D077E26E2226759A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
Manifest number: C0
Signing time: Fri 25 Sep 2026 22:01:40 +0000
Manifest this update: Fri 25 Sep 2026 22:01:40 +0000
Manifest next update: Sat 26 Sep 2026 22:01:40 +0000
Files and hashes: 1: CVD6zJX7pJXse2VCcTl9VVmJWvs.crl (hash: /ubOYxZjPG+AD/b1Hb7zE1N6PSnMiGgcu90tI2gB1/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:a5:3e:e5:32:b4:4d:07:7e:26:e2:22:67:59:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950facc95fba495ec7b654271397d5559895afb
Validity
Not Before: Sep 25 22:01:40 2026 GMT
Not After : Sep 26 22:01:40 2026 GMT
Subject: CN=c640b6e0e099a720ef6f24c142bbb2054079b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:8e:a1:18:be:c2:5d:22:c1:d6:21:8d:c5:
34:ae:5f:69:25:a4:c9:88:ed:79:b0:21:3c:1b:e1:
ea:aa:86:c9:d8:c9:d6:71:7d:e0:41:2e:ad:a6:16:
2c:16:67:81:8a:83:5b:30:d9:80:8d:16:92:ff:33:
63:65:aa:55:95:3d:d2:77:38:e8:69:75:11:be:37:
af:cb:e4:60:0a:64:8b:28:9f:f2:98:23:8e:ad:e8:
54:95:50:d0:3b:dd:8d:c9:32:1f:6c:fc:49:49:23:
0f:4b:34:6a:8e:f4:81:29:46:a6:95:fc:c1:c5:84:
19:e5:4c:1e:4d:93:e5:53:c9:ee:af:1f:11:79:db:
c7:0c:c8:1d:67:a0:26:ea:79:88:d1:5a:72:c2:25:
8b:38:8f:1f:0f:67:68:f6:2f:ea:1c:85:47:71:52:
73:9b:8c:0f:3f:1f:78:28:6c:de:13:05:46:c5:92:
0c:9a:a5:46:16:a8:3b:1c:0f:ec:f1:86:4c:76:c6:
86:e7:b0:68:03:d5:5e:25:0a:57:62:70:4d:b3:87:
08:e8:08:6c:f5:e3:42:2e:cc:70:1e:01:0e:14:bc:
49:85:04:4c:f4:36:e8:c6:83:61:0f:a3:ec:8e:07:
fc:39:1f:34:b5:1f:63:31:75:88:7b:fa:0c:f0:61:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:B6:E0:E0:99:A7:20:EF:6F:24:C1:42:BB:B2:05:40:79:B9:81
X509v3 Authority Key Identifier:
keyid:09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:dc:1b:6d:17:9c:83:40:76:67:1b:9b:34:5a:d9:59:d3:
bc:66:06:fb:fe:80:d7:84:d9:b3:19:20:93:91:43:df:61:d5:
88:19:79:05:99:77:d8:12:6e:ce:af:75:e4:ab:fa:09:4f:da:
75:e1:9c:3b:33:6e:8a:b4:70:08:37:ce:f1:27:02:cb:c0:69:
61:37:91:6b:4f:19:a7:2a:31:d8:cf:14:44:c1:dd:fd:7e:24:
52:5d:f1:99:b6:b2:fb:49:e3:5c:3b:86:c2:37:e6:d6:40:77:
58:91:98:f9:21:0c:9f:11:bd:f7:66:f6:0f:9d:1c:87:41:4e:
08:2a:6d:4d:90:4f:b1:7e:78:38:92:03:ed:6e:61:d5:c4:8d:
07:ea:eb:ef:56:06:1f:38:ee:fd:6f:c3:ff:cb:83:f6:69:5b:
22:d9:98:d6:75:0a:bf:0a:23:7b:07:79:e6:18:3b:39:a8:56:
ae:17:00:14:c5:26:c2:a2:d2:79:75:c6:37:37:10:6f:08:38:
1f:14:5b:e8:12:a7:41:e5:0b:63:a3:c3:91:ee:a7:46:e6:4c:
5f:59:1a:2a:9d:ef:d1:8d:67:77:ad:31:82:63:60:cf:0b:be:
2c:d2:5a:6e:e4:ce:e6:1b:9a:99:0f:f7:25:d2:8e:0b:1f:dd:
93:d9:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:27:43 2026 by rpki-client