Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: +ijuF3mgfCMsWNkYqGXlWRvifBpYcXSCzQpTxARi+Rg=
Subject key identifier: A4:AA:E7:21:FE:7B:1C:B2:AE:2E:7F:B5:1D:5F:97:D9:E4:FC:3C:17
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019D26CD4C90ED76A8E4EC3C39E460FD48B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: hEqmjUh+W7ASjUWomBXOQNNDVFlaWbw5P1+A6H6vruE=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4c:90:ed:76:a8:e4:ec:3c:39:e4:60:fd:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=a4aae721fe7b1cb2ae2e7fb51d5f97d9e4fc3c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:26:e8:77:7a:20:b4:1f:91:24:49:3b:73:
80:2f:ed:b1:8b:39:7d:52:95:7a:e3:99:7b:58:30:
95:4c:76:8d:ef:0e:c6:7b:e7:b9:88:0f:0c:11:9a:
d8:9d:8e:d6:c8:a8:9c:97:77:b4:3e:b0:10:12:ce:
c8:fe:fc:9a:ff:34:05:5e:b8:70:c4:6b:7e:5b:54:
67:46:75:eb:df:53:ac:02:d7:92:eb:01:2a:09:ce:
1a:a1:fe:9c:b7:6e:9d:cc:11:b2:ce:1c:f3:30:7b:
71:d7:fb:32:d9:3a:e0:ed:36:ba:d2:af:2e:c6:63:
48:07:eb:72:f0:a9:9d:15:62:56:c3:df:83:02:2c:
97:21:7c:0b:18:48:53:f8:8d:45:33:fa:6a:ab:ce:
d4:d9:5e:d4:91:9c:f9:73:6e:f6:3b:3d:a5:05:e7:
28:54:99:55:0e:f5:3f:ca:b1:e4:aa:9f:93:33:54:
52:38:24:9a:ac:9e:a6:8f:34:54:f4:3e:2d:fe:e5:
02:cf:25:c8:7f:2a:5d:d8:4c:ff:15:7c:e8:30:d7:
d6:da:04:6b:78:ed:4f:17:20:79:fe:88:89:43:26:
48:1b:17:ad:22:9e:72:b5:02:bf:28:8e:f4:1c:53:
12:5e:53:53:76:00:4c:48:ce:78:e9:08:5e:12:1a:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AA:E7:21:FE:7B:1C:B2:AE:2E:7F:B5:1D:5F:97:D9:E4:FC:3C:17
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:71:f2:e2:dc:b9:a2:98:cd:2b:24:ee:67:c1:09:33:b9:5b:
3e:b7:85:a3:95:4e:cf:ad:29:45:ee:f3:76:06:4a:2c:98:f2:
28:73:26:49:c2:16:ff:cf:9e:d3:02:b5:02:52:6a:30:1d:f7:
45:7a:da:f0:2a:99:f4:6b:11:99:3b:0c:50:77:ae:c2:2b:f1:
80:93:2d:57:14:0f:8f:af:f6:c6:91:27:96:59:e3:e9:cf:83:
40:a7:2d:b7:be:1f:63:fe:e4:1c:4f:77:e3:ae:19:e5:50:fa:
c6:c1:a4:59:2b:e2:21:ec:f5:c0:4d:97:3b:6f:aa:c6:40:a3:
1d:7f:c8:85:6d:d0:62:28:91:c8:1b:36:26:d0:e5:98:c3:7c:
4e:58:92:80:f6:d4:ae:47:1f:5b:96:30:a4:0a:63:93:41:f3:
6f:f6:34:8d:21:f4:32:bf:98:64:19:14:33:28:30:3a:40:5d:
45:5e:ad:9d:c6:e1:be:ef:61:6e:19:9a:e8:6d:29:00:d6:cf:
32:7f:0b:49:cd:53:a0:2d:7e:f4:f0:82:8c:b6:dc:77:34:cb:
06:ed:42:7f:2a:57:9f:04:67:bc:f6:fe:78:23:3e:bb:32:4d:
2f:55:ac:01:65:f8:8a:e1:e3:60:24:c3:c2:2b:e8:f8:a6:2b:
32:93:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:35 2026 by rpki-client