Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: xWlrLmWoloqDYDc5cBFesMtWolIeQO+xaheK/W/9/HA=
Subject key identifier: 37:FB:32:22:87:65:A4:03:74:AF:87:3E:48:DC:08:69:C3:44:04:42
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019F90C766A6247D7E85DDC8A3F149CACBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 21:00:14 +0000
Manifest this update: Thu 23 Jul 2026 21:00:14 +0000
Manifest next update: Fri 24 Jul 2026 21:00:14 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: 9KpvV4eD2eyfYYKwq4N8U8mP8qyPyKBB5aO/g3pprmk=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:66:a6:24:7d:7e:85:dd:c8:a3:f1:49:ca:cb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Jul 23 21:00:14 2026 GMT
Not After : Jul 24 21:00:14 2026 GMT
Subject: CN=37fb32228765a40374af873e48dc0869c3440442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:52:d4:b4:fe:20:c8:36:ba:ea:5f:97:4c:
9b:a6:47:b7:8d:89:5e:1d:ff:bd:00:34:11:62:15:
d1:61:c4:05:06:d4:7f:79:d6:3f:69:d0:08:d1:b8:
bc:82:a9:62:1f:62:82:99:ec:64:51:8a:82:b9:58:
90:32:1b:a7:60:7f:12:02:3f:22:f1:a7:69:55:3a:
4d:4d:b5:3c:b0:b8:65:c3:be:01:ad:96:64:f9:89:
0b:0f:fb:ac:89:fa:13:62:89:82:92:98:33:b8:ba:
87:0a:a1:4a:22:54:18:b5:ca:d1:6c:99:b5:9e:04:
da:bd:ad:41:d8:17:b7:45:af:7f:62:32:9c:24:c2:
75:2b:58:39:84:95:9d:ee:c9:e1:1c:bf:23:99:df:
f4:31:0c:2b:50:64:c4:90:d9:2b:84:b9:40:71:1e:
fe:25:ef:99:c6:de:7b:ce:a1:18:fe:f8:11:2c:a6:
52:83:2e:eb:b7:f5:b7:50:e4:80:52:01:f4:39:fc:
d8:60:93:23:de:a6:4f:68:96:2d:36:b1:28:01:9e:
bc:43:7a:2c:a2:97:f3:e6:df:03:0d:1b:8a:b5:62:
22:0a:c1:f0:f1:4b:7c:ef:8b:d7:e5:ac:3d:a1:90:
24:00:c8:36:da:25:50:d1:54:86:68:c2:37:b9:15:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FB:32:22:87:65:A4:03:74:AF:87:3E:48:DC:08:69:C3:44:04:42
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:60:91:0a:21:05:b7:64:78:50:bf:5f:45:9a:62:bf:14:30:
9c:0a:5e:8e:d8:d6:2c:6e:e7:cf:c4:15:6b:31:8c:5d:9c:d4:
1c:78:89:e4:94:35:b6:9f:50:8b:c4:1a:0e:c4:ce:79:b9:1f:
d9:4a:2e:01:52:50:0b:e5:d6:6a:3c:f3:a5:eb:83:6a:d6:01:
7a:38:30:76:33:f0:be:70:2d:d6:02:4b:ba:76:e0:0b:80:d0:
f3:ee:4d:b5:93:e6:4b:a6:8d:71:eb:f8:c6:91:c7:11:a3:3e:
c0:a3:94:fc:30:a0:0f:e2:7c:97:85:b6:6d:27:df:ed:9c:81:
a2:6f:57:cd:d3:cb:e2:ff:23:4d:fb:d0:c8:a6:7d:ff:49:1f:
44:09:7c:e6:f9:61:aa:38:e2:c5:df:04:ba:ec:b4:df:1e:95:
75:2d:d9:eb:1d:21:12:49:7f:f9:33:d5:c8:4f:3a:4b:95:7f:
df:e5:6f:fe:37:7c:3c:42:10:09:4e:14:04:e1:ba:ff:0d:fb:
07:97:ab:da:e8:3d:8c:b9:4a:0b:b1:6e:79:72:b2:df:b5:e8:
65:44:8e:9d:25:c1:1b:a5:77:74:94:8b:72:cc:a2:a5:68:56:
ca:8a:95:90:09:46:2b:7d:43:b1:14:36:00:2f:0c:4b:28:13:
0b:f1:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:37 2026 by rpki-client