Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: ZQ1GMiCk/PxvFUhdZDKC6mF1MzM0J5NvX4Oq8/UI9iQ=
Subject key identifier: 5A:F6:5E:5A:4D:EC:C0:E7:73:84:B9:4B:03:8F:57:1C:7A:F2:D5:92
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019F90FF7091EF071683925B4AEAD517AD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0CB5
Signing time: Thu 23 Jul 2026 22:01:27 +0000
Manifest this update: Thu 23 Jul 2026 22:01:27 +0000
Manifest next update: Fri 24 Jul 2026 22:01:27 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: bBRGOjCiigTcFJbbdBU4M0CKJ6ojA6JpaNBO1ZZun6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:70:91:ef:07:16:83:92:5b:4a:ea:d5:17:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Jul 23 22:01:27 2026 GMT
Not After : Jul 24 22:01:27 2026 GMT
Subject: CN=5af65e5a4decc0e77384b94b038f571c7af2d592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:58:0b:35:b9:3b:c7:98:37:3b:c2:d7:29:
8a:6d:db:df:a5:71:07:a4:76:a5:20:9f:93:81:ed:
4e:06:34:c4:12:61:05:96:6d:6b:df:60:8e:bf:10:
cd:b9:e5:bb:21:6b:ca:55:e6:b7:a2:de:ac:f3:47:
f9:c8:41:3f:5d:58:fa:37:7f:e6:73:b5:91:13:55:
3c:ef:7e:cc:82:7e:87:87:ab:6b:27:4a:4e:45:04:
cd:6f:92:33:7c:de:21:33:00:49:2c:28:75:a3:b1:
01:3e:74:9a:63:7d:40:c0:b6:27:06:7a:4e:81:53:
e0:41:a6:96:24:69:8e:23:85:15:e0:47:1f:cf:96:
96:3c:74:08:7b:f8:f6:3d:12:6a:a7:8d:0a:40:14:
e9:ce:96:7e:ef:f5:2b:45:47:35:e1:9f:9c:72:6e:
a8:60:71:c8:df:71:6a:c4:b3:dc:64:bb:ea:d2:a0:
22:a2:73:03:33:00:7f:54:af:37:8d:3e:17:b6:92:
3e:5c:d5:84:6e:fd:04:16:57:e5:fc:f4:f8:2b:42:
35:38:12:f4:a4:3e:2e:79:92:72:5b:8d:8e:15:ec:
dd:0f:d0:5b:75:4f:bf:dd:37:ba:fa:ee:e5:5a:82:
76:f5:c2:e8:75:ec:72:93:87:07:2d:b4:76:eb:9e:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:5E:5A:4D:EC:C0:E7:73:84:B9:4B:03:8F:57:1C:7A:F2:D5:92
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:be:5d:e1:c5:af:9f:6f:7c:32:75:c1:b1:90:33:b0:9a:
bd:40:5c:88:95:ec:e7:b5:a2:41:52:be:b6:ca:c7:6a:fe:9d:
4e:74:0f:99:13:6e:04:88:2f:84:ff:c1:1a:da:82:d8:6d:4f:
07:27:75:1d:13:ef:c6:7d:96:d4:24:25:93:19:50:f6:97:d6:
74:21:c4:64:f0:e5:0c:4b:f1:82:20:ee:c6:28:a1:88:da:a9:
1b:4f:e2:41:e3:29:ed:25:5c:60:c4:9b:a0:27:4e:90:a4:fd:
db:e2:9d:3f:bf:32:02:9f:ac:4b:c2:0a:16:db:49:1a:8b:77:
79:72:7e:37:56:b5:01:95:e2:96:a4:30:b0:22:15:f9:68:8e:
18:15:59:81:1f:ce:55:e2:1d:4f:08:e6:d9:f2:c3:d4:76:69:
6c:87:c2:81:e4:b5:09:0a:56:5c:72:48:61:5b:e3:70:f6:b1:
f6:e5:dd:77:d2:e8:9a:e5:c1:2c:80:c4:df:6e:f6:32:f1:59:
d5:6f:c4:99:d1:bf:7e:95:a0:42:d6:48:5a:c2:20:4d:ab:2d:
82:7c:95:8d:14:ca:2d:f3:08:09:13:cc:32:05:48:a0:c1:88:
13:d4:10:bd:b6:63:36:93:17:5f:71:b4:fc:a6:93:9a:63:a5:
12:38:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:18 2026 by rpki-client