Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: lnJEFs0MvuwHgpTX5OeQZopYhxtja/dbrI9OCRx2sYM=
Subject key identifier: B4:85:09:4D:3C:A0:8A:4B:10:9C:48:A2:85:25:9B:87:A6:35:F7:E3
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019D27DF7C98B32484B51295742A6F558D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: 6Yq81NoGyzy0TIJND/y8+MZQPW3maQ2FZqKSEMC9y+s=)
2: vGVZSv8sGgM5BoLDh6fVjRk2w7w.roa (hash: RIvCgh4jwN9bhn2BuDsBle0NLGA7WV0r/x8kr5b3org=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7c:98:b3:24:84:b5:12:95:74:2a:6f:55:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=b485094d3ca08a4b109c48a285259b87a635f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:26:ad:b1:8e:55:33:b2:93:9a:af:fc:a2:
0a:4f:e4:ac:d7:54:91:1d:ef:3d:eb:9a:32:eb:c8:
f7:ba:59:4d:8e:3c:c5:ca:bc:7d:59:7b:5f:07:3e:
87:0b:a1:34:f9:08:f2:44:25:c6:38:dc:44:93:11:
f3:c9:d9:5f:ca:e9:8b:51:22:30:45:81:a3:fc:03:
22:58:d5:15:44:6d:74:4e:ec:e0:c3:b0:a7:50:c2:
c1:59:55:8e:b3:33:85:b9:be:b8:68:0c:1e:93:0a:
0d:58:a5:11:9f:63:9a:b7:fa:83:5f:5c:de:df:21:
a6:13:b2:c3:20:2b:6d:9e:e5:36:48:56:3f:8f:4f:
46:3d:f6:03:c0:f6:93:dc:bb:f0:19:d1:b0:ab:07:
59:99:98:43:4f:9e:5a:b8:88:de:50:60:f8:c3:3b:
5a:87:d7:9a:7b:ab:65:43:fc:6a:0b:a5:2d:b6:46:
29:54:12:74:26:3b:7d:bf:9e:f5:24:0d:73:98:1c:
18:2f:52:cd:8d:08:0e:ea:ea:cd:eb:4d:dc:b1:16:
18:88:e9:58:7e:7b:ea:cc:67:07:1c:50:43:ec:fd:
71:a3:99:4c:87:5a:a1:b1:2a:c2:75:f8:70:9b:e8:
55:b7:84:cf:45:95:17:0e:28:e3:a2:a7:39:0f:4b:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:09:4D:3C:A0:8A:4B:10:9C:48:A2:85:25:9B:87:A6:35:F7:E3
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:48:3c:d5:35:36:f0:ba:b7:78:8f:3f:85:e4:f5:19:2a:
9f:b6:1b:23:11:fc:08:29:ea:82:3e:1d:16:f5:14:f1:86:83:
fc:a4:97:6c:64:1c:7a:5a:48:db:f0:df:0d:64:9f:1f:9e:dc:
11:03:a5:fa:f8:e0:db:d1:57:6d:ad:74:b1:7b:28:f2:46:24:
76:36:65:2d:08:e8:60:08:81:93:34:a0:c1:5b:4d:d7:ab:09:
f6:b4:42:c4:bc:c9:61:97:b2:89:9d:57:0e:ac:a6:e8:4b:ab:
ab:0a:63:a5:09:82:8c:f1:b0:d3:02:a3:64:db:d0:ce:c8:58:
4c:1d:87:80:77:e6:5a:9e:66:3f:28:d5:a5:d2:ae:54:1e:38:
f4:cf:75:e1:00:5d:4e:17:ae:58:17:21:21:d7:39:f7:57:d5:
9f:a9:63:f8:c5:4b:c0:b9:1a:cc:71:17:76:71:51:08:f3:03:
df:be:f8:ce:b0:f0:f0:40:fc:4f:87:19:7d:77:cd:3a:2d:51:
9d:2c:80:27:8c:c3:87:3a:8f:42:d6:dd:af:80:56:42:cd:93:
e3:dd:a4:7a:06:55:dc:ed:cb:51:16:c3:9e:4b:87:96:a4:d2:
32:5f:ae:02:ae:be:80:98:44:c5:66:1d:0d:7e:0e:ec:d9:ea:
8f:31:a0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n33yYsySEtRKVdCpvVY0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4
ZWU4ZDkwHhcNMjYwMzI2MDIwMDUwWhcNMjYwMzI3MDIwMDUwWjAzMTEwLwYDVQQD
EyhiNDg1MDk0ZDNjYTA4YTRiMTA5YzQ4YTI4NTI1OWI4N2E2MzVmN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI0mrbGOVTOyk5qv/KIKT+Ss11SR
He8965oy68j3ullNjjzFyrx9WXtfBz6HC6E0+QjyRCXGONxEkxHzydlfyumLUSIw
RYGj/AMiWNUVRG10Tuzgw7CnUMLBWVWOszOFub64aAwekwoNWKURn2Oat/qDX1ze
3yGmE7LDICttnuU2SFY/j09GPfYDwPaT3LvwGdGwqwdZmZhDT55auIjeUGD4wzta
h9eae6tlQ/xqC6UttkYpVBJ0Jjt9v571JA1zmBwYL1LNjQgO6urN603csRYYiOlY
fnvqzGcHHFBD7P1xo5lMh1qhsSrCdfhwm+hVt4TPRZUXDijjoqc5D0vbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSFCU08oIpLEJxIooUlm4emNffjMB8GA1UdIwQY
MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt
MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj
LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapdIPNU1
NvC6t3iPP4Xk9Rkqn7YbIxH8CCnqgj4dFvUU8YaD/KSXbGQcelpI2/DfDWSfH57c
EQOl+vjg29FXba10sXso8kYkdjZlLQjoYAiBkzSgwVtN16sJ9rRCxLzJYZeyiZ1X
Dqym6EurqwpjpQmCjPGw0wKjZNvQzshYTB2HgHfmWp5mPyjVpdKuVB449M914QBd
TheuWBchIdc591fVn6lj+MVLwLkazHEXdnFRCPMD3774zrDw8ED8T4cZfXfNOi1R
nSyAJ4zDhzqPQtbdr4BWQs2T492kegZV3O3LURbDnkuHlqTSMl+uAq6+gJhExWYd
DX4O7NnqjzGgIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:39 2026 by rpki-client