Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: 6xqdNGvypxt71XEhzy0at3gbxnFfzB9xzeRdcnIlZbk=
Subject key identifier: D9:02:75:36:05:D8:F9:7A:3E:91:79:F5:DB:54:52:70:4C:D6:48:36
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01A1DDCBD2C74F25EB2B3AB68FA32337BEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 06:01:24 +0000
Manifest this update: Sun 15 Nov 2026 06:01:24 +0000
Manifest next update: Mon 16 Nov 2026 06:01:24 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: T6vSmR58u5y3ZvkfQAb7qi6+DWadSOlEcU47fYzEMSs=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d2:c7:4f:25:eb:2b:3a:b6:8f:a3:23:37:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Nov 15 06:01:24 2026 GMT
Not After : Nov 16 06:01:24 2026 GMT
Subject: CN=d902753605d8f97a3e9179f5db5452704cd64836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:b3:bd:c0:8c:cd:9f:c2:8a:50:31:f6:2e:
19:b7:5c:ed:d2:82:1d:d4:5b:c9:91:eb:41:55:33:
3d:35:d4:54:45:22:f2:be:b2:f5:d7:9a:d8:13:e4:
7a:9a:fb:54:9a:2a:70:98:a9:52:18:97:b1:64:91:
c8:46:33:e8:c6:34:db:6a:27:9e:11:a9:b6:b4:14:
10:fb:1a:e5:3f:41:7d:aa:0d:31:75:bd:e7:af:81:
9c:b1:f8:dc:31:ff:57:e7:eb:92:5c:98:fe:01:1c:
9a:9c:60:70:95:7d:7c:f9:7b:ca:ad:88:fd:e6:ce:
86:31:4a:9e:cc:d1:8f:c9:20:06:0b:bd:72:41:ba:
31:39:3e:86:5c:82:db:19:af:18:1d:b2:d7:d3:54:
9f:f4:29:63:ef:ef:21:f4:31:ff:3c:c5:62:c7:6b:
3f:39:5b:0d:0e:10:7f:e5:94:1c:76:df:bb:2e:e0:
d0:8b:af:a1:25:4b:7d:d9:44:3c:40:bb:9f:3c:a0:
39:c4:fe:6b:6f:49:d7:c9:21:84:24:9c:ac:b0:8e:
87:2b:90:36:b6:86:fa:6a:16:5f:a0:5e:0d:d5:1a:
be:0e:a7:5d:41:a1:f4:3d:fe:96:4c:fd:6d:71:64:
19:0d:56:37:e5:f3:91:56:f4:e9:80:a6:3c:48:e5:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:75:36:05:D8:F9:7A:3E:91:79:F5:DB:54:52:70:4C:D6:48:36
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3a:d6:db:76:e1:bc:ce:52:7d:1e:95:1a:41:4a:58:3f:ed:
3b:fd:19:7b:5f:f6:f7:d5:d1:57:88:5f:7f:93:e0:04:5f:38:
fb:83:75:31:3d:17:0d:23:bf:f3:d0:6f:b5:1d:ec:b7:0b:1c:
ed:5c:12:48:00:3a:ce:19:83:8d:85:99:96:29:2d:42:32:b5:
9c:11:c4:5d:3f:de:53:06:24:b0:b9:a4:59:d4:72:3e:8b:82:
9d:ef:69:bb:fe:39:2f:8d:c6:9c:6c:8c:e6:b6:c2:aa:ad:9d:
ce:36:81:d2:8c:82:6a:aa:e7:39:42:2c:f2:01:9d:78:b8:84:
38:73:00:bb:3c:9f:d7:48:6b:14:ea:e2:07:ff:51:34:ed:ef:
e3:bc:f5:60:71:93:b3:66:30:e5:09:c5:5f:8f:ad:0d:bb:40:
f4:7b:75:b9:fd:9a:98:d7:3c:b3:cc:ec:b4:cd:46:c7:34:d7:
53:4c:90:21:0d:be:e4:51:28:5c:80:3b:e5:2e:61:b7:01:ce:
b4:ec:83:dd:27:cd:61:82:e6:02:70:52:a1:b6:bc:67:1c:58:
b3:6c:31:e0:67:20:7f:2c:eb:94:25:28:04:87:bd:da:5c:cd:
ba:65:be:d5:ee:fd:05:60:55:de:26:2b:8d:13:a5:d7:96:70:
e8:75:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:26 2026 by rpki-client