Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: OcXoMYR9+4pIxv88aPtxVmblvUHl456wvu95vwCLXyg=
Subject key identifier: 16:AA:A4:1B:8E:63:0A:1D:AB:76:D4:40:C1:A3:B5:BB:66:1C:EE:82
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019D28BB23A3CC523701419FEC04033B69DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: f3/Km+xZVpPO1KqDF3RYMa8EXiutjGqrfepZDMe4hKY=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:23:a3:cc:52:37:01:41:9f:ec:04:03:3b:69:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=16aaa41b8e630a1dab76d440c1a3b5bb661cee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:45:fd:c6:fb:f7:3d:26:82:6c:f0:80:dd:
50:57:3a:20:cb:c8:d1:30:c0:af:13:c7:c6:41:5b:
b7:7d:f4:de:fc:43:ef:86:86:ae:5b:00:35:ab:2f:
79:51:49:66:80:f2:d4:49:36:71:f3:f8:a3:02:05:
87:81:9f:b6:07:6f:12:b5:8a:b2:aa:1c:c5:cc:4f:
c6:20:2a:72:ca:38:c1:f9:d9:f6:43:4f:de:a0:f8:
18:a4:3b:c5:70:ae:a1:ed:68:1d:c0:b4:27:d1:e1:
10:ed:32:09:86:20:96:f6:74:57:57:aa:73:90:c0:
53:c3:31:ca:9a:7e:98:a5:9b:dc:1b:b6:a7:44:7b:
45:62:30:ff:44:02:23:91:3d:05:51:85:32:f9:e8:
d7:ff:24:0a:05:67:9b:8c:bc:d7:c4:07:c7:f1:0c:
2b:16:83:a1:54:aa:f1:06:0c:dc:c4:4a:b0:40:cc:
1f:d6:b9:99:45:81:e9:be:aa:c4:17:d6:67:28:69:
a4:5b:37:f0:5c:90:20:48:85:70:6e:8f:de:04:04:
c9:77:1c:51:e8:89:90:6b:0e:1e:9d:8a:b3:e4:33:
9a:3b:06:30:80:bb:a2:a6:8e:3d:7b:e3:6b:3e:4c:
2f:b6:39:3d:a4:dc:7c:40:77:14:a1:8b:b7:e6:43:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AA:A4:1B:8E:63:0A:1D:AB:76:D4:40:C1:A3:B5:BB:66:1C:EE:82
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:32:b0:e0:f4:2b:fb:df:66:6d:b9:bc:c2:a4:24:f0:e7:aa:
8a:dc:6c:9a:e2:bb:cf:89:71:5d:0c:c5:6b:92:66:04:96:80:
c7:6b:e9:be:50:b2:a2:d5:75:dc:79:cc:10:5a:5d:69:b8:bd:
0d:3b:73:01:79:7b:b9:af:85:39:9d:b2:ab:39:5c:3f:8d:74:
ac:4c:2f:c2:aa:56:ea:91:ad:a6:02:4b:4e:71:16:e8:e2:bb:
51:8e:ca:fc:c8:62:e4:9a:57:e4:5c:df:94:60:ed:a5:f9:4c:
47:e5:26:db:22:98:37:a3:d2:bd:79:6b:06:ce:8a:c3:80:67:
b4:21:bc:3f:66:81:e9:a6:f7:b3:a0:b8:bd:45:a8:21:df:c9:
27:3c:59:32:0e:8e:c7:3d:f3:c8:bc:9f:4f:20:ce:b9:a4:42:
14:25:ed:6b:db:20:2a:ba:aa:3c:a1:de:6e:19:be:62:cf:84:
c7:b6:9b:14:cb:f3:32:05:3b:f2:a2:93:bc:fc:87:41:e2:5d:
9a:bc:e2:2c:95:b4:f0:b3:bb:fd:a4:ca:60:ef:c8:9d:ec:8d:
90:a4:aa:9b:f6:3d:7c:98:0e:10:3b:62:97:b3:96:eb:64:33:
03:12:5c:1a:30:52:c1:1e:34:72:a0:b2:fb:3c:d9:68:fc:03:
73:5f:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:40 2026 by rpki-client