Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: M0dO8Xp50FQMzsuXX6zepQ2R5+fS/qn2Ob9hb74eQ70=
Subject key identifier: 58:94:9B:05:17:D6:45:56:97:72:06:09:CB:3A:41:F7:B6:7C:15:91
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019E1E34F3E01068388CF94CBFE2EDF3770F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0BF5
Signing time: Tue 12 May 2026 22:00:47 +0000
Manifest this update: Tue 12 May 2026 22:00:47 +0000
Manifest next update: Wed 13 May 2026 22:00:47 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: k85QOEQ1hRBMzrEkv7LAzunf4PoM+po9j6iKuVy4fRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f3:e0:10:68:38:8c:f9:4c:bf:e2:ed:f3:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: May 12 22:00:47 2026 GMT
Not After : May 13 22:00:47 2026 GMT
Subject: CN=58949b0517d6455697720609cb3a41f7b67c1591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5e:cb:22:e0:db:2a:16:67:2c:13:5d:9c:5d:
7c:da:93:0a:e7:f2:bf:18:d1:4a:7c:ef:b2:13:84:
0e:f9:0d:e8:75:0e:09:e9:35:0a:60:a1:4b:5b:b3:
6b:a2:10:e3:62:24:b4:0b:21:55:b0:56:7e:c0:aa:
10:9e:09:0a:84:6a:09:0e:27:bf:af:ec:b2:1e:d0:
68:cb:88:12:0d:7d:54:9f:34:0e:21:5b:88:ab:cf:
57:31:3d:73:f6:89:83:4b:46:58:fe:de:6b:3d:35:
93:04:8d:2a:d5:81:c9:79:bb:a1:64:ca:29:4e:2f:
1f:2a:f5:4c:06:23:8c:b6:da:ea:6c:39:3b:2f:b4:
95:fd:e4:dc:18:bf:e8:d2:6d:63:1e:1a:1d:d5:82:
7e:2c:cb:e3:f0:ad:72:15:a5:3c:e4:87:54:41:95:
fb:e2:06:60:bb:86:82:0b:36:98:fd:37:77:56:64:
f7:87:88:13:54:29:22:95:11:f1:7a:e9:d2:c3:bf:
84:a4:cc:c3:e0:29:e5:f5:6a:45:5c:0c:35:b9:03:
0c:f9:40:da:09:fd:75:b9:99:72:c9:8c:f3:0f:8d:
d3:30:e9:4f:1d:8e:e7:f3:6f:26:6e:31:45:e0:07:
3b:7c:ee:0b:2d:21:8f:c5:0a:67:9f:73:9e:98:10:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:9B:05:17:D6:45:56:97:72:06:09:CB:3A:41:F7:B6:7C:15:91
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:76:aa:e5:89:cb:03:ea:9a:45:cc:21:69:07:6a:4d:e5:58:
f4:61:01:33:2f:d8:72:44:a5:1e:19:89:6a:7d:9b:fe:74:97:
64:03:4f:c5:46:aa:8b:88:fb:0e:37:de:2e:60:b6:c8:cd:f3:
d7:44:a4:fb:4a:6d:fa:a4:a9:03:00:07:62:bc:8b:59:90:09:
c1:0a:d1:d6:f7:97:c0:ba:e0:3f:d0:df:2a:60:dc:51:aa:3d:
89:0a:5e:3f:7f:75:0b:4a:5d:4f:c2:c2:2f:82:1e:cf:5e:80:
eb:1e:d6:a5:d5:12:86:be:ae:32:61:f6:1f:e4:77:8e:96:42:
b6:37:a1:8b:70:74:5a:9b:6a:51:83:c1:0f:82:68:2d:25:ac:
f9:f3:6c:50:43:0a:6c:26:5a:68:5b:bf:c9:97:28:8a:58:e2:
c9:e3:e0:dd:ee:ed:2a:77:d3:04:79:02:d0:44:63:02:61:49:
f2:0b:5a:55:e4:36:d4:a4:c9:05:6e:05:50:4e:9c:d3:08:0a:
98:0c:6c:c7:b1:bf:b5:5d:60:39:72:47:24:50:15:fe:cb:3b:
b0:d4:03:0c:15:cf:1e:ef:fc:77:a1:7e:25:78:1b:0c:7a:6c:
19:a6:62:27:21:78:ee:87:32:7f:6d:73:9d:32:3f:f6:d0:c5:
a5:c1:70:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:34 2026 by rpki-client