Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: lxtcTViYIIoS+CSGK38rqB751G4OvNFusKPb6mvSkT4=
Subject key identifier: 32:4A:23:2F:D5:D1:35:AA:12:88:61:72:8B:85:32:90:0D:E3:2A:DC
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 01A0D383C68EF0A4B52050801D9A84EA0F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0D5C
Signing time: Thu 24 Sep 2026 13:03:43 +0000
Manifest this update: Thu 24 Sep 2026 13:03:43 +0000
Manifest next update: Fri 25 Sep 2026 13:03:43 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: MnA3eT+D2zMEKo5HDI+hRXNNs8JJfUuSVuurxbhlkKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:c6:8e:f0:a4:b5:20:50:80:1d:9a:84:ea:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Sep 24 13:03:43 2026 GMT
Not After : Sep 25 13:03:43 2026 GMT
Subject: CN=324a232fd5d135aa128861728b8532900de32adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:06:4a:d9:70:6b:80:cd:71:32:33:7d:af:
d0:e2:4a:79:21:21:c8:21:81:d2:76:80:1c:d6:48:
f2:00:c0:5e:d6:eb:5f:87:5b:09:51:98:b4:ee:a1:
56:32:b4:22:a2:d6:70:b7:27:47:57:2a:65:1c:a1:
5f:d1:0b:de:af:fb:b8:7f:63:fc:4e:47:3d:e4:34:
4a:88:33:2a:fc:23:30:3f:6e:68:08:5b:88:1e:3e:
44:3f:a4:c4:c6:8d:fa:d3:ae:0a:93:74:f8:e1:42:
ba:ba:c2:57:37:f5:cf:8f:40:34:11:20:ec:0c:ec:
28:ce:b2:af:00:ac:a2:3e:a2:54:2d:fc:c3:89:bd:
5a:6e:1a:31:f5:4d:e0:9a:dc:11:b3:a6:5d:50:4d:
84:4b:e2:d9:e8:af:c7:d3:a5:b0:e1:89:65:98:df:
cd:4f:ad:d8:c1:bf:12:90:ca:2c:55:89:53:4d:f8:
88:16:67:2a:a4:fe:66:bc:1e:20:72:ad:43:7e:67:
bd:ce:31:4e:89:08:32:9b:3f:16:2d:29:a6:d9:19:
7d:c7:af:7e:32:5d:6b:9a:f3:df:00:3e:3b:6d:20:
13:0a:15:88:24:de:7e:ee:a7:11:14:de:83:ef:ee:
a3:95:59:60:65:b2:ae:06:e0:6d:f5:60:72:34:50:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:23:2F:D5:D1:35:AA:12:88:61:72:8B:85:32:90:0D:E3:2A:DC
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9b:84:85:c0:03:92:77:65:a8:43:87:91:2d:54:15:62:b7:
f4:72:ae:4a:e8:e4:60:69:eb:00:0b:72:d3:e4:e5:c2:58:7d:
43:6b:ef:0a:77:59:ce:8e:12:72:ad:42:40:83:b9:5b:d4:a0:
96:51:18:83:e0:b1:03:20:ae:70:3d:5b:3e:b2:48:eb:1f:20:
55:91:e4:ba:dc:e7:e3:82:34:c2:ed:12:74:c9:99:14:60:d6:
26:ca:76:4a:0f:5c:64:eb:aa:2f:c2:d6:05:74:aa:f4:cc:eb:
ed:24:50:bc:3c:69:49:64:77:f9:35:bb:4c:a7:58:d8:a9:64:
f2:07:28:54:a3:58:05:6b:da:8d:a3:14:e1:77:c6:5f:f8:07:
10:57:f7:a1:ac:bd:30:3d:f3:ba:a8:95:ef:a9:2b:f1:bd:16:
de:51:4e:ea:4e:af:fe:36:9f:bd:3f:32:b9:b3:6a:3f:25:7b:
8c:4d:ad:ed:30:8d:a5:a1:c4:c7:af:7c:37:7a:8d:e0:e3:5d:
22:e0:40:5c:0c:29:b2:f6:3c:7d:a3:d0:d7:84:de:7c:9d:9d:
7f:72:b5:e6:11:5c:8b:bd:3a:7c:4c:38:27:71:b1:85:f2:24:
cc:ee:e9:36:ab:3f:9d:c7:1b:3e:60:27:a6:cf:b1:67:07:bc:
13:85:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:39:39 2026 by rpki-client