Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: VnMBsGTJ2MhfDP2gk0HCKhIml/1rV0T02k7aSLb/+LI=
Subject key identifier: AF:29:FB:01:5E:BC:59:19:20:B1:16:C8:E6:23:15:D9:2A:7D:2B:4B
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019E1F10D9E9E6F3C0B4554DF26454546670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:00:58 +0000
Manifest this update: Wed 13 May 2026 02:00:58 +0000
Manifest next update: Thu 14 May 2026 02:00:58 +0000
Files and hashes: 1: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: 92ZRyVB09nEAc1Bkrjhbh138AaBz+uphV6J6TNayBcY=)
2: vGVZSv8sGgM5BoLDh6fVjRk2w7w.roa (hash: RIvCgh4jwN9bhn2BuDsBle0NLGA7WV0r/x8kr5b3org=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d9:e9:e6:f3:c0:b4:55:4d:f2:64:54:54:66:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: May 13 02:00:58 2026 GMT
Not After : May 14 02:00:58 2026 GMT
Subject: CN=af29fb015ebc591920b116c8e62315d92a7d2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:ce:ea:9d:45:f7:98:d1:46:37:38:2b:dd:
56:30:d7:27:86:43:22:11:36:49:29:4b:0d:b3:81:
3f:b6:eb:bb:85:88:a8:9f:e0:e9:84:0b:06:e9:d0:
02:59:5f:1b:7b:6b:54:73:f8:bc:3d:4b:67:cc:15:
66:b9:1b:e3:43:75:2a:39:c2:71:92:68:16:35:74:
bb:45:d1:90:f6:ba:2d:02:15:5d:66:eb:ff:12:e8:
37:36:97:e6:2b:b0:56:58:01:9b:80:59:68:be:20:
af:e2:48:3e:45:c6:b7:94:17:55:6d:6b:4d:ee:8b:
d0:24:f8:e8:ef:2f:b7:a7:22:a3:ba:ae:fb:f6:82:
55:13:cc:48:e6:d4:47:89:82:83:6b:9c:36:eb:b6:
c4:1d:75:ba:0c:26:42:ec:61:5a:a9:dd:e0:7b:31:
11:56:50:37:09:03:b2:e3:ab:3b:01:97:b0:b1:e7:
80:e8:d4:24:5f:0d:41:c0:d5:cc:ad:02:ea:69:73:
e0:eb:dc:4f:b0:46:74:8f:d1:07:87:26:c3:d6:f0:
f0:7a:05:d3:92:e0:4e:86:d7:44:98:6c:20:91:ae:
2a:0b:f5:09:a3:f6:fb:26:3b:46:6c:b6:12:ac:67:
9f:04:d3:52:4b:52:ef:4c:eb:49:5b:68:d8:27:d3:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:FB:01:5E:BC:59:19:20:B1:16:C8:E6:23:15:D9:2A:7D:2B:4B
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:53:eb:d9:ed:00:94:dd:31:a8:5c:8e:78:98:16:8e:ae:71:
b8:da:a5:94:14:9f:75:70:02:43:68:31:4e:cd:53:dd:12:f7:
21:e9:6b:07:a0:1c:e7:ab:92:3a:2b:97:4f:40:c6:67:13:06:
a6:48:68:cf:84:bf:f9:e0:c5:56:33:7b:f1:b5:97:c8:6a:17:
e7:bf:29:3c:b5:46:bd:a4:41:ca:e4:f9:93:41:94:df:d0:a3:
72:2b:c8:77:b5:98:fa:06:b2:cb:f1:01:c5:85:7a:1b:a6:6f:
5c:42:36:60:86:5a:99:a0:cc:79:95:77:d2:5f:1c:cc:73:24:
f5:e8:bd:a6:42:bd:1f:5c:1e:72:b9:37:f1:b9:50:bc:b3:30:
33:a3:26:54:73:b0:66:39:6f:4e:47:15:78:f7:07:ab:0b:ea:
8e:45:bc:83:27:ce:77:6d:c7:ef:67:78:df:66:d4:37:79:9b:
b9:49:c1:12:0e:7f:8e:0a:2a:39:92:8b:81:c1:57:e1:ec:fc:
d2:1a:1a:18:ec:ae:e8:81:35:82:dc:48:3f:7d:f2:d7:74:f4:
01:07:42:19:16:f0:a6:b0:8b:11:ac:b4:c7:5b:27:33:3b:a5:
77:07:06:0f:28:ae:7f:18:58:eb:b2:35:ce:68:a1:1d:7f:ad:
ce:62:18:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:34 2026 by rpki-client