Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: YX/rpPRSA77TfTUJ6y/RJ0ZjMCJCad0J3NTWtNs6JVs=
Subject key identifier: F2:97:67:12:BC:F4:2A:6D:84:50:D1:A1:21:FC:35:9C:F0:A8:44:5F
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019F93C93DC1AFF3E81F7952FBC1B9E5F8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:01:06 +0000
Manifest this update: Fri 24 Jul 2026 11:01:06 +0000
Manifest next update: Sat 25 Jul 2026 11:01:06 +0000
Files and hashes: 1: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: K8GqGjDF/mT+yBZS54UDKrIp+UKMYg+FS2S/hxotYpE=)
2: vGVZSv8sGgM5BoLDh6fVjRk2w7w.roa (hash: RIvCgh4jwN9bhn2BuDsBle0NLGA7WV0r/x8kr5b3org=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:3d:c1:af:f3:e8:1f:79:52:fb:c1:b9:e5:f8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jul 24 11:01:06 2026 GMT
Not After : Jul 25 11:01:06 2026 GMT
Subject: CN=f2976712bcf42a6d8450d1a121fc359cf0a8445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:8d:f9:15:9c:1e:68:70:3b:67:d7:0b:1a:
cf:b2:09:6d:8a:3d:ef:45:4f:72:2b:23:05:9b:51:
6c:30:c9:4a:a0:33:9d:7c:e4:a9:02:43:fb:6a:b2:
a4:cd:5b:f8:f4:81:4e:eb:63:08:c7:1f:a3:d3:63:
a3:a1:ae:62:7a:df:df:e4:ee:00:a0:ac:9e:95:a3:
14:15:e1:35:c4:f6:58:70:08:01:9f:06:f2:a8:9d:
f2:59:47:e3:58:79:90:c7:61:67:20:b1:57:b3:98:
cd:d2:71:ad:af:ea:72:af:1d:53:51:39:13:05:3a:
cb:39:dd:d7:99:b4:77:6b:dd:88:e8:fe:d9:b3:4a:
b0:4c:f3:4b:cd:64:54:60:ce:8c:71:c7:11:39:b7:
f9:44:93:a0:ac:da:e3:d7:95:e9:38:80:38:83:71:
fe:3e:3a:05:6f:05:5b:1d:24:07:c4:56:dc:2d:87:
4e:8d:8d:bc:7e:99:1e:ef:00:f9:de:5c:5e:ca:ae:
64:51:13:05:2d:20:ae:2a:5a:d6:f8:27:19:8f:91:
25:7e:4b:99:0f:87:35:bb:1d:f4:c2:05:04:8d:af:
bd:83:2b:a3:76:59:73:1b:47:a8:5c:25:c5:87:a9:
be:35:4c:81:30:d7:e3:3f:e4:14:62:47:85:11:5d:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:67:12:BC:F4:2A:6D:84:50:D1:A1:21:FC:35:9C:F0:A8:44:5F
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6f:e5:d5:bb:43:e3:00:c1:d0:cc:ff:a2:72:57:36:7e:19:
b7:60:c0:bd:e4:5b:91:d8:c8:31:e2:b9:94:19:d3:04:45:ae:
9a:d7:4f:99:6b:43:28:a8:90:35:39:85:e8:69:30:43:c1:90:
80:03:23:7d:a3:4d:80:bb:b6:18:9e:83:d0:a5:c0:fa:cb:f2:
07:29:24:e5:1c:2f:e5:34:4f:60:ba:b2:b3:2c:e9:e7:b0:a3:
5a:4a:79:50:8a:b2:06:9e:b9:7a:6c:ca:9e:a0:18:22:ce:e6:
d6:5c:36:5e:ac:75:fc:bd:f4:dd:f5:4a:3c:f5:9c:f2:62:07:
2b:21:5f:ef:40:8a:14:25:ab:e3:da:b8:40:d8:32:b8:40:82:
89:8f:db:ce:d7:eb:2b:f9:9e:07:dc:2c:f4:39:4e:5b:78:1d:
9d:c2:07:87:75:4a:a8:af:c4:a8:87:52:c1:97:af:fe:79:9e:
7e:86:40:e7:6f:3e:c1:90:17:49:6d:86:eb:77:84:43:73:64:
c9:3b:04:f5:4c:ca:6c:d9:78:c9:8e:62:f6:00:d0:f3:88:bb:
64:be:d6:ec:18:9e:8f:35:cd:65:44:d7:68:e0:e8:73:2f:bb:
64:e0:45:4d:06:7a:ba:a3:b5:f3:0b:0f:ab:69:0b:33:cc:e1:
87:08:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:55 2026 by rpki-client