Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: E0sfIDhCjEz0VhUVk/6j7nM5gkXSRTokOylaDulxzpc=
Subject key identifier: 7B:C8:26:59:5B:66:6E:D8:0E:C5:B4:56:15:07:EC:62:99:91:F3:62
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019D270471407B382397F6761DDC0BE269D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 02DA
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: 4p2i3_lV2Xm21VM3RkLxfJEz5kE.roa (hash: NW8zzFhQ2+ZAvR18p5GH/sVm8t6bYcOGdrKnOofJKBM=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: JpskyUvDbNnZrxKHV+cNR+tpVSuwjSvup3c69Q76v1E=)
3: rrMzogUtnNYohdiYHBUx1xdS4QY.roa (hash: gXfiVkS6pTRRTpVE1kuG1Q8iGKyEXJ5GRFNZwq4pmAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:71:40:7b:38:23:97:f6:76:1d:dc:0b:e2:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=7bc826595b666ed80ec5b4561507ec629991f362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:03:5d:cf:72:c9:59:cb:cc:e5:e2:a6:fb:
65:e0:52:eb:3c:9f:3f:a8:39:a0:b4:b4:df:1b:e4:
b8:2b:49:e6:f9:1d:6a:05:86:a9:90:ac:e3:cf:61:
48:03:e5:fb:6c:35:49:54:fc:17:91:7c:98:88:74:
67:f3:8b:af:98:22:67:ff:e3:1a:d5:e7:7a:07:36:
4f:72:5c:56:09:f4:81:a8:68:86:20:64:f2:46:27:
e1:03:0d:ef:46:0c:ad:6d:89:e9:4b:41:3d:dc:78:
cf:8d:01:89:56:d6:9a:5a:55:9d:bc:e8:99:12:35:
7e:25:d4:3a:ea:13:ec:ae:b0:dc:c9:f7:e9:6b:1c:
93:c9:32:68:67:b6:82:2f:c1:95:cb:c5:d8:6e:98:
1f:c8:1a:3a:75:98:e3:86:8e:21:72:76:cd:50:44:
28:11:da:3f:98:89:8d:8e:dc:96:3b:aa:f5:f2:81:
15:b0:6e:0a:fe:80:00:e9:90:a9:89:a5:c3:5c:37:
a0:3a:40:b6:27:b9:b4:ae:34:ed:d2:82:ef:57:25:
45:35:af:5d:7f:dc:86:0a:6a:09:bb:4d:fd:a1:00:
c8:e2:95:a0:9f:15:be:91:99:b5:bd:6b:a1:1b:32:
de:3d:ed:06:45:a0:e2:bb:c1:af:83:92:23:ed:07:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:26:59:5B:66:6E:D8:0E:C5:B4:56:15:07:EC:62:99:91:F3:62
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:07:5e:e5:9b:31:b1:f6:b1:35:94:3f:8c:dc:34:d7:f3:08:
4d:c8:4f:c8:79:24:d7:db:0b:60:f0:61:32:34:18:8c:0c:af:
ea:1e:c9:75:bb:ba:3e:0e:67:3f:0b:77:55:f0:b8:fe:dd:40:
eb:79:ed:51:f8:8c:2e:9d:4d:59:4c:dc:d3:cb:c2:19:dc:a6:
42:d3:7d:4f:4e:89:9d:2d:41:79:af:e7:b0:74:d8:d2:a8:81:
39:8d:f3:05:b3:6c:94:69:f4:51:3c:49:4b:16:0f:ab:c1:6f:
9a:84:52:83:3d:d9:c6:df:16:d8:dc:c6:c3:56:d2:29:e1:eb:
f9:79:b1:3c:30:fc:44:64:34:b1:93:08:41:2d:94:06:bf:ae:
d6:50:57:4c:50:61:9a:12:74:08:7f:40:0b:64:05:c0:25:a2:
2d:8e:ae:39:36:bb:bf:f0:61:f0:4f:e5:77:09:89:53:e2:f0:
0c:d0:96:f9:0c:c1:52:a1:e5:e7:38:c6:6c:7f:f3:18:22:1d:
c8:b5:09:4f:13:b1:59:5f:6a:58:e6:6c:22:cc:6b:66:28:ca:
67:96:0c:e4:58:a4:01:d4:93:99:1d:1a:19:9f:07:45:2a:b0:
b4:7f:9a:8e:fe:57:51:d3:f6:5a:b5:a1:cc:1a:1f:ea:28:c8:
69:b2:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:41 2026 by rpki-client