Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: FvtpddFvbPSQZcoLIZy8pj5MuMAC4sL5wTLD0gj7iKs=
Subject key identifier: 21:99:85:44:FE:9D:31:CD:DC:14:7D:6D:72:84:60:D9:A2:C8:E5:3D
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01A0EA7769EB36FBE6831478F53E581FC960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1A0B
Signing time: Tue 29 Sep 2026 00:01:29 +0000
Manifest this update: Tue 29 Sep 2026 00:01:29 +0000
Manifest next update: Wed 30 Sep 2026 00:01:29 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: X4uRGLI2bMBP2Wf3yYhX0QKVOm006r3cxzAgs4BuZMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:69:eb:36:fb:e6:83:14:78:f5:3e:58:1f:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Sep 29 00:01:29 2026 GMT
Not After : Sep 30 00:01:29 2026 GMT
Subject: CN=21998544fe9d31cddc147d6d728460d9a2c8e53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:c0:31:f4:a2:c5:23:a1:00:da:df:90:d3:
85:0d:23:5a:1f:8a:0f:d2:30:f6:49:18:88:81:3f:
c7:2a:d4:34:a9:e5:bf:cc:bc:77:f2:ee:ce:a4:3f:
a8:2d:98:96:2d:97:1b:25:01:62:25:f9:6a:e5:58:
30:71:75:fe:17:ad:02:55:16:08:51:12:4b:cb:10:
33:d2:2f:47:47:dd:a9:9c:1b:1d:29:3f:70:80:a1:
66:07:f9:7a:db:dc:7f:26:4f:e6:36:93:2f:dc:41:
64:c8:66:46:4d:7f:ff:75:4e:08:de:e8:88:4c:9e:
76:fa:39:96:2a:88:f8:94:b8:84:bf:a9:4e:7f:04:
fb:cd:63:a6:2f:a2:81:35:3e:13:c1:59:a3:1e:91:
e2:76:04:4b:6c:7b:41:19:47:19:79:d6:ff:32:79:
ef:31:75:01:cf:f2:02:61:ff:af:c6:db:ec:72:6c:
40:b2:83:b3:01:c2:83:e6:75:9e:80:8f:9f:21:21:
1d:d3:ba:35:44:0e:7e:76:14:74:91:3d:a7:75:eb:
a7:2f:a1:6b:4d:a9:23:be:b7:ea:bd:05:29:f5:e4:
a8:c6:5f:a4:87:87:62:41:c5:2e:39:6f:7a:02:f3:
b3:2d:85:22:6c:b5:46:59:ac:1c:ef:21:d7:4a:fa:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:99:85:44:FE:9D:31:CD:DC:14:7D:6D:72:84:60:D9:A2:C8:E5:3D
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b9:3f:dd:dd:68:8c:0a:44:58:52:d8:24:2a:32:51:d1:49:
fa:d6:0f:ac:1c:d4:58:a8:b4:bf:6a:63:0a:9e:87:8c:03:9f:
83:4a:90:35:c6:cd:31:70:fb:2a:e8:51:f5:09:09:19:18:bc:
00:8e:31:47:7d:8e:ea:92:02:30:07:60:a5:12:bc:5e:77:36:
62:bb:b4:5e:f6:5a:50:9f:6f:87:04:cb:86:5e:13:b6:0f:89:
09:9a:ca:ea:2e:e8:20:10:a2:80:ea:3b:8b:bf:b2:c6:e6:8e:
08:14:4f:c3:f9:e0:3f:97:82:52:20:7a:2d:43:3e:81:a7:6c:
28:1d:39:07:f8:eb:b0:c9:70:30:c6:ba:3f:7e:1d:e1:7f:86:
07:4d:b3:f0:7b:32:c2:b9:6c:b4:b4:e7:a0:7f:2f:cc:f1:02:
47:e0:eb:ac:04:39:62:c9:27:95:dd:f9:ac:b3:a9:16:5b:6c:
d7:21:ce:12:3a:da:13:d1:05:15:3b:4f:a4:5d:bc:a9:76:10:
3e:cd:01:37:69:cb:53:e2:25:31:43:cb:20:ad:6a:15:16:ec:
ff:80:16:c7:ec:dd:07:08:cb:3e:6e:f7:c2:53:61:c1:a6:30:
ad:9d:c6:39:d1:14:27:dd:d6:a4:80:cf:c6:eb:d1:c6:60:a9:
af:f4:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:32:49 2026 by rpki-client