Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: VW5WRQRLDqNnfogH3YoEjaP0zq2ez9mwJHO32UO1AWI=
Subject key identifier: F9:FC:45:EF:44:E3:CD:2A:3A:20:F1:49:CC:9A:B8:B7:A4:C7:F4:2A
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01A0D538C9D2A63665AA0C6C5EF3EC0938DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 21:01:03 +0000
Manifest this update: Thu 24 Sep 2026 21:01:03 +0000
Manifest next update: Fri 25 Sep 2026 21:01:03 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: 2LfFJulkSlM5HGGGsdVMr/9jMRH8sAb3bgBgtMj0IiY=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:c9:d2:a6:36:65:aa:0c:6c:5e:f3:ec:09:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Sep 24 21:01:03 2026 GMT
Not After : Sep 25 21:01:03 2026 GMT
Subject: CN=f9fc45ef44e3cd2a3a20f149cc9ab8b7a4c7f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:94:b6:d5:53:86:e3:88:dd:31:49:0a:b5:
59:6e:d2:52:c0:ae:e7:e3:85:7c:56:4e:ed:8e:9f:
0c:7c:f3:33:0e:11:7c:c7:d9:1d:6d:36:73:c1:cf:
e9:a7:51:4a:5d:c2:69:fc:14:f4:8b:49:10:ee:b2:
6f:a7:08:3e:51:32:db:1b:d4:56:45:ea:5a:21:77:
74:ea:75:ca:18:28:69:16:77:61:1e:84:33:f9:1b:
f1:e9:38:23:c1:e3:9b:f0:01:2e:b4:f0:c0:32:96:
f0:ac:53:04:1a:a0:18:55:22:76:7f:f4:13:24:9f:
f7:de:77:15:39:01:bf:4b:9a:0b:ef:0f:74:68:09:
60:2b:8a:9f:f9:d3:9b:47:68:52:42:64:c3:e0:62:
ce:0c:33:52:08:1c:42:1c:f9:de:db:5e:32:29:d6:
d7:78:44:61:ae:84:e8:de:6f:40:9e:ac:35:a1:7f:
76:78:39:f6:9c:0e:ba:3c:a0:4e:a8:07:16:f3:a0:
83:5e:d3:92:4a:70:50:00:79:5a:b2:45:26:94:fd:
ca:47:7b:f2:aa:f5:8c:d8:45:60:08:67:ee:a7:52:
a9:bf:fd:60:06:ab:4a:a9:92:2d:27:bc:7f:e2:e3:
17:b2:83:73:7c:55:01:86:85:d1:9f:71:c9:20:32:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FC:45:EF:44:E3:CD:2A:3A:20:F1:49:CC:9A:B8:B7:A4:C7:F4:2A
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:00:70:dd:4b:4c:71:1f:b6:0c:52:63:36:2a:81:4a:e8:
05:b2:7d:47:6c:a5:76:7b:12:8d:72:5d:24:9e:f2:19:46:a0:
ad:44:95:9f:6b:17:d2:c9:86:bd:a5:ad:9a:16:42:80:f0:1c:
f9:68:13:16:45:7f:2d:c7:49:59:95:9a:03:68:0c:cf:bd:10:
65:4d:fe:8a:ce:03:d5:7d:51:bf:33:5d:f2:4b:6d:f4:1e:52:
da:be:57:e3:fd:fe:db:08:fe:a0:71:63:0a:f4:c9:51:9e:65:
71:84:30:fc:ba:70:3c:0b:43:72:74:08:a4:8d:a9:7c:af:8a:
dc:b9:31:f5:b8:c9:03:df:68:1e:16:27:53:14:5f:87:1c:33:
21:f5:47:5d:a9:21:39:2c:70:8f:8f:9e:3a:a0:33:b8:b4:7f:
e5:10:d9:7e:ee:4e:71:78:cb:7f:22:d3:3f:dd:48:a5:08:d0:
18:61:b5:73:1f:4d:bf:82:0a:73:f1:bb:86:00:32:32:0e:f5:
7c:21:1a:cb:29:09:9e:76:36:65:79:db:57:96:2d:df:fd:73:
91:14:e9:91:ed:d7:5b:cb:44:50:83:a1:2f:8d:00:68:85:58:
1f:39:12:48:b9:06:3e:f9:e1:ea:94:ac:f7:58:40:f2:01:a3:
a1:3d:cf:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOMnSpjZlqgxsXvPsCTjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0
OTI0ZWEwHhcNMjYwOTI0MjEwMTAzWhcNMjYwOTI1MjEwMTAzWjAzMTEwLwYDVQQD
EyhmOWZjNDVlZjQ0ZTNjZDJhM2EyMGYxNDljYzlhYjhiN2E0YzdmNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh6UttVThuOI3TFJCrVZbtJSwK7n
44V8Vk7tjp8MfPMzDhF8x9kdbTZzwc/pp1FKXcJp/BT0i0kQ7rJvpwg+UTLbG9RW
RepaIXd06nXKGChpFndhHoQz+Rvx6TgjweOb8AEutPDAMpbwrFMEGqAYVSJ2f/QT
JJ/33ncVOQG/S5oL7w90aAlgK4qf+dObR2hSQmTD4GLODDNSCBxCHPne214yKdbX
eERhroTo3m9Anqw1oX92eDn2nA66PKBOqAcW86CDXtOSSnBQAHlaskUmlP3KR3vy
qvWM2EVgCGfup1Kpv/1gBqtKqZItJ7x/4uMXsoNzfFUBhoXRn3HJIDLlfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn8Re9E480qOiDxScyauLekx/QqMB8GA1UdIwQY
MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt
YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl
LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyYAcN1L
THEftgxSYzYqgUroBbJ9R2yldnsSjXJdJJ7yGUagrUSVn2sX0smGvaWtmhZCgPAc
+WgTFkV/LcdJWZWaA2gMz70QZU3+is4D1X1RvzNd8ktt9B5S2r5X4/3+2wj+oHFj
CvTJUZ5lcYQw/LpwPAtDcnQIpI2pfK+K3Lkx9bjJA99oHhYnUxRfhxwzIfVHXakh
OSxwj4+eOqAzuLR/5RDZfu5OcXjLfyLTP91IpQjQGGG1cx9Nv4IKc/G7hgAyMg71
fCEayykJnnY2ZXnbV5Yt3/1zkRTpke3XW8tEUIOhL40AaIVYHzkSSLkGPvnh6pSs
91hA8gGjoT3Pig==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:52 2026 by rpki-client