Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 5xjl1OcurxR9zz/LoDoXtt128mlNDDQeZ7+pC5LZG6s=
Subject key identifier: 97:4A:0A:EB:1B:76:2B:2B:D1:80:EF:9D:71:7D:6D:0B:A0:3D:D8:DF
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019D2703B3D2A2AFC300F093CF7838F8E6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0B75
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: O0TnMD1H/Rye36CsnUTXO8He4ANG9yNJcRdPinVbSWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b3:d2:a2:af:c3:00:f0:93:cf:78:38:f8:e6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=974a0aeb1b762b2bd180ef9d717d6d0ba03dd8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:4f:fe:42:e0:ec:e4:f5:84:47:9b:40:84:
98:13:f7:a2:ad:0d:21:03:a9:f2:23:83:fd:23:5c:
18:18:0c:e9:8c:0a:87:f5:6d:31:de:f7:d0:f1:3d:
e9:78:3c:46:ea:e5:0f:a4:8c:63:8f:73:64:26:e7:
3e:3d:43:6f:87:1a:84:8e:8d:ec:48:82:1e:a2:fd:
80:cb:e2:e3:2f:ef:a3:27:e0:28:07:ec:71:30:cc:
51:d8:3a:97:65:35:bf:86:0b:26:9e:51:b1:8e:92:
f9:93:16:e4:f2:76:99:44:24:ce:bd:5a:4a:f8:0c:
5e:a4:66:83:5a:2d:31:2f:a5:31:62:e9:71:63:28:
89:c6:30:46:79:5f:e0:93:3e:cf:de:11:d4:14:2f:
a4:b4:6a:a9:40:d5:75:34:5b:a4:6d:39:65:db:99:
d1:6a:4f:34:6a:56:09:96:80:1b:6e:3a:91:6b:6c:
8e:0d:9c:ad:04:cd:1d:d7:56:5f:dc:e1:93:17:70:
eb:05:9c:07:89:91:95:73:9d:7f:ca:93:a8:83:26:
83:d3:aa:3a:e5:89:68:33:19:91:59:e8:f8:35:b7:
9e:63:b2:af:a8:db:54:da:00:14:6a:6b:fd:e2:39:
30:9d:70:70:9a:91:d9:8b:24:c4:5d:d3:55:b1:9c:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:0A:EB:1B:76:2B:2B:D1:80:EF:9D:71:7D:6D:0B:A0:3D:D8:DF
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:6c:8c:a0:2b:2f:84:d3:40:0e:cf:b5:8c:15:38:c7:b2:
cd:bc:69:92:37:db:6f:7d:a2:59:c0:b4:4a:e3:f9:42:db:e7:
39:d5:94:c0:0f:58:7e:e0:21:d6:3b:87:f2:48:8f:dc:b7:06:
c9:1c:5b:7d:48:e3:5c:80:0d:ec:85:22:b7:57:11:87:fd:7c:
64:b2:b9:0c:c7:20:e1:9d:40:17:ef:df:36:d4:89:6b:bd:7f:
15:be:93:cc:06:ce:9a:4b:6c:78:97:f5:44:fc:b3:97:e7:e9:
77:f4:a3:32:7b:2e:41:e1:65:05:7b:d7:67:42:9e:3f:96:13:
89:6b:0b:54:c8:22:ee:2c:bd:09:3d:52:a7:a2:01:19:4d:de:
52:e7:f4:04:42:43:f6:94:f0:3d:ed:87:c5:0e:39:9f:e1:fa:
f4:e5:fa:bc:47:24:b4:8b:82:99:9b:e0:49:c9:e2:fe:fe:5c:
47:4d:8e:20:4b:d6:52:1e:46:15:90:a9:8b:9b:b3:ac:e2:36:
5f:24:3e:f6:36:1b:ac:b3:71:5f:34:ed:33:1e:14:b2:83:e4:
9e:3b:8d:df:fb:a6:bc:56:28:d8:f1:b5:b8:17:74:ef:50:f1:
1e:ea:fc:11:09:de:ac:02:a6:54:f6:75:60:d9:35:61:31:0b:
05:aa:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:10 2026 by rpki-client