Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: qz1RgRJGciiJy8fk8Y5dixW/9w/w1hZy85T5o5kKVuM=
Subject key identifier: D2:CC:CA:9B:D3:05:C8:DA:26:06:04:0A:CC:7F:BE:D8:F0:18:0E:BF
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019D26CD5F6CCE5A9E2366DB1A44483E798B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 21:01:26 +0000
Manifest this update: Wed 25 Mar 2026 21:01:26 +0000
Manifest next update: Thu 26 Mar 2026 21:01:26 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: ECy0E53fZ+uh5tOi2BithqK5RawQZaleO162s4r46HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5f:6c:ce:5a:9e:23:66:db:1a:44:48:3e:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Mar 25 21:01:26 2026 GMT
Not After : Mar 26 21:01:26 2026 GMT
Subject: CN=d2ccca9bd305c8da2606040acc7fbed8f0180ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:0c:ac:78:8d:b1:0b:fa:b4:a7:56:9c:e4:
dc:06:81:9c:2a:8f:1c:67:57:e5:22:b1:d3:66:77:
f7:d6:db:5e:3d:2c:a6:b8:d1:69:e0:9c:c4:15:4f:
ad:20:7d:2b:5e:7d:73:76:42:fc:1d:75:85:11:00:
6f:1f:5b:f4:68:53:f7:13:08:ff:fc:59:de:e4:51:
39:a6:3f:4f:08:ae:da:35:3b:1b:e8:1e:a3:e9:36:
a1:0f:10:e8:cf:52:8a:d5:0a:29:55:c5:09:2b:ad:
70:b3:9b:b5:0c:46:57:36:5e:5b:dd:e3:bb:b0:32:
a5:b7:e8:07:a5:f4:c8:16:f3:e9:68:32:f3:12:07:
9e:d5:b6:66:40:58:63:72:5b:cf:9b:aa:e7:e2:ea:
e5:78:85:3d:0c:ec:8e:5a:a0:8d:84:ff:7e:23:14:
0a:05:92:30:f1:c2:a9:f7:c0:2c:db:0f:a2:8a:0a:
8c:77:2b:c1:fb:3b:ca:b3:7f:4c:68:a8:22:f2:c3:
ce:a3:17:09:38:1d:5a:8a:1a:90:2e:85:03:a5:78:
dd:03:f2:6b:2a:61:81:2f:f3:b6:22:c1:72:ef:9c:
82:1a:a4:57:f1:ab:af:6a:96:32:08:e3:7e:b3:f9:
6e:43:82:b2:01:36:4b:59:05:e2:93:69:87:d3:17:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:CA:9B:D3:05:C8:DA:26:06:04:0A:CC:7F:BE:D8:F0:18:0E:BF
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:a0:21:de:48:ca:05:22:07:19:d5:54:85:01:a6:69:35:
fb:c8:a6:3d:33:9c:a7:6e:0f:9d:15:96:ad:d2:96:98:89:e4:
d2:bd:17:8e:80:11:07:b7:aa:6f:ca:41:68:5f:09:65:7e:e6:
88:5a:88:e2:12:81:95:c4:6f:96:a6:7c:54:1b:c8:76:93:1d:
51:59:a0:12:4d:32:71:b6:9a:9c:b5:9e:c1:50:35:6b:d8:26:
dc:5f:69:5d:6f:b8:41:a1:b5:99:f3:80:1d:f6:4f:b6:02:06:
2f:d4:dd:42:24:f6:c4:cf:5c:6c:b8:7a:cb:df:b8:d7:6b:21:
6c:99:a3:d4:00:05:55:af:91:a8:e5:a5:a5:9e:01:84:45:59:
92:ca:b9:68:d7:39:c7:2c:99:b0:e9:43:8c:80:dc:d4:ec:b3:
fd:9e:1e:60:4e:49:78:47:b8:12:4e:97:55:1f:50:6c:2e:01:
a6:37:01:f7:d0:ee:ce:1a:97:7b:ad:73:fa:91:7f:a1:61:3f:
6f:0a:46:8b:4b:d0:49:f7:13:b9:24:e3:5f:5e:d9:d0:1f:74:
64:df:b4:1b:2c:87:5e:82:39:d3:94:a4:0b:f7:82:a3:f0:70:
23:71:33:1f:67:db:d4:95:1a:53:15:40:bb:91:10:43:ae:9e:
af:e6:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:55 2026 by rpki-client