Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: +1OlBYGZXUCRPPIxzwHfgM0QV5SFYwolZiifwUeHyW4=
Subject key identifier: 66:0C:F9:19:D6:D2:03:D0:5B:6A:F9:60:8C:1B:4D:B6:1D:E3:38:75
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 01A0CFA409039870AC6787ABA6DD266ACE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 04BF
Signing time: Wed 23 Sep 2026 19:00:28 +0000
Manifest this update: Wed 23 Sep 2026 19:00:28 +0000
Manifest next update: Thu 24 Sep 2026 19:00:28 +0000
Files and hashes: 1: 4p2i3_lV2Xm21VM3RkLxfJEz5kE.roa (hash: NW8zzFhQ2+ZAvR18p5GH/sVm8t6bYcOGdrKnOofJKBM=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: 37pvI31VP9Yjjp0ohRuad4Nonxfcjn5obH/h8N50heI=)
3: rrMzogUtnNYohdiYHBUx1xdS4QY.roa (hash: gXfiVkS6pTRRTpVE1kuG1Q8iGKyEXJ5GRFNZwq4pmAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:09:03:98:70:ac:67:87:ab:a6:dd:26:6a:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Sep 23 19:00:28 2026 GMT
Not After : Sep 24 19:00:28 2026 GMT
Subject: CN=660cf919d6d203d05b6af9608c1b4db61de33875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:8c:14:15:51:fe:59:0d:6b:0f:6d:d5:d9:
00:11:fd:f6:93:fa:3c:98:18:65:82:ae:fe:ee:33:
da:e6:c6:6f:03:22:ac:55:d0:2f:ba:a2:e6:ef:10:
12:2a:51:f5:2e:6a:46:8f:8d:a6:74:36:7e:b4:fc:
95:fa:8c:a9:fc:6c:70:ef:0c:b8:9a:6f:6d:d1:e4:
20:7c:21:6c:39:22:a3:f4:05:24:dd:56:1f:d0:a5:
7d:3f:67:fc:19:66:0d:eb:eb:45:3e:3c:49:64:9f:
a4:3d:ab:fd:cd:c6:dc:43:d8:28:d8:68:2d:82:ba:
9b:43:ae:8a:59:22:29:73:00:4f:cb:5a:93:28:ee:
56:29:ca:a4:18:f3:9c:73:6d:20:0f:e0:b8:67:20:
67:23:97:9d:4c:62:c3:2d:e3:2f:8d:c0:d7:6d:3f:
fa:f1:81:23:e4:41:80:b6:6a:6a:0b:ed:05:12:3b:
73:f7:a1:8c:e8:01:9e:82:91:a4:04:c3:15:00:a4:
45:05:63:71:9b:77:c1:ee:0e:76:55:83:d9:ac:89:
d9:25:02:67:c2:fd:fd:4f:d7:52:d6:32:e2:9c:06:
0a:00:a2:36:f5:9d:bb:3e:0a:8f:87:96:ae:ec:e4:
17:64:e6:5b:6c:9d:af:c7:59:43:ef:98:7c:e1:6c:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:F9:19:D6:D2:03:D0:5B:6A:F9:60:8C:1B:4D:B6:1D:E3:38:75
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:0b:86:6b:6f:28:26:8f:dc:37:c2:f1:77:87:3e:fd:4c:
b5:37:8d:69:93:08:e9:df:9f:76:eb:bf:5a:67:ad:80:69:59:
2c:37:9a:f7:e6:64:ed:d7:cf:51:68:ae:28:94:58:0f:06:02:
17:32:3d:0c:59:5c:a1:b5:e2:1a:b7:66:7b:8f:df:85:de:87:
67:5d:5a:d9:ef:55:df:95:8d:76:b9:b3:64:1a:95:18:47:9b:
f0:d7:2e:22:cb:bc:c1:a3:1d:f1:6c:d3:e2:d1:0b:97:44:2c:
f6:81:62:af:69:ac:b2:fc:06:14:66:30:bc:dd:f2:ea:54:74:
b0:00:cf:6b:57:55:51:ae:95:df:72:c7:f5:05:f3:4d:e7:d2:
de:0d:d6:b8:fb:4d:66:09:77:f8:cf:3d:30:94:53:b5:ff:ca:
43:64:6c:3b:b4:75:d2:d1:ef:45:a5:9b:41:8c:fd:f5:67:85:
ba:34:91:b3:4b:20:ab:b5:57:5c:1f:e0:c5:83:ee:62:00:df:
b6:b3:21:e0:d6:51:8e:fc:2d:2a:40:a9:a8:f3:e9:57:db:7e:
c3:21:02:29:a3:cf:46:ec:0d:84:f4:62:28:4a:fb:db:17:5d:
e5:d1:32:c8:27:5c:c6:d7:39:6b:14:72:35:2b:7f:c5:4f:0c:
2a:92:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:44 2026 by rpki-client