Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: IKYD7kJkQAuaAZ1F80thFTWL/3HFyK2LQXnVkwLmGZ4=
Subject key identifier: 8D:CC:18:5F:28:F8:33:A4:73:A4:10:11:54:F8:56:60:7B:B3:89:13
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019E1D2299067CC3A81AC92DF5422E2A24A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 05D2
Signing time: Tue 12 May 2026 17:01:07 +0000
Manifest this update: Tue 12 May 2026 17:01:07 +0000
Manifest next update: Wed 13 May 2026 17:01:07 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: xkgfVROqhiEx6u2rq9UE67PLjPsma6UEx/SvwU1lU3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:99:06:7c:c3:a8:1a:c9:2d:f5:42:2e:2a:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: May 12 17:01:07 2026 GMT
Not After : May 13 17:01:07 2026 GMT
Subject: CN=8dcc185f28f833a473a4101154f856607bb38913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:f4:30:de:af:e1:9c:b2:1b:c0:b1:ce:74:
28:2d:c9:0a:f2:4d:04:e4:f7:de:47:c9:e8:17:a0:
55:20:f0:67:7c:e7:1c:9a:52:40:00:25:9a:c2:17:
6a:11:4d:9d:f9:a4:6a:91:00:89:be:41:3e:0e:b2:
36:f0:cd:ca:84:3e:fd:11:48:35:eb:79:38:1d:83:
44:0c:c4:a5:eb:28:fc:c0:c6:ae:89:74:f0:07:f1:
bf:d4:12:13:71:9c:96:5a:bf:5c:ee:50:e8:c1:3b:
ab:ca:eb:20:e7:73:30:6c:1c:c3:99:27:1c:81:b0:
53:18:02:5e:ac:fc:86:5b:c1:ed:d2:d0:56:a8:8f:
04:e4:a2:e4:2b:23:d4:32:36:8f:28:03:8f:51:c3:
5e:56:fb:f3:0a:68:a5:0b:36:15:aa:b2:06:fc:c1:
13:ac:79:c3:42:26:bc:d0:39:f4:de:df:85:f8:09:
43:83:90:a8:5d:3d:51:64:d3:96:fd:d1:93:22:a6:
21:71:cc:8d:55:72:06:c4:90:5d:bd:a5:fd:7f:19:
35:28:7e:9f:ec:06:2f:85:fd:6c:97:8b:be:9a:26:
03:15:ff:8e:80:72:a9:cd:cb:3a:e6:ee:9d:f6:8c:
a6:6a:2e:06:84:c2:a5:8c:20:9a:bc:83:5b:21:4f:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:18:5F:28:F8:33:A4:73:A4:10:11:54:F8:56:60:7B:B3:89:13
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:d1:96:da:a9:7e:02:b6:dd:fd:26:78:d5:aa:1a:7c:bc:
fd:2f:bb:cc:8c:cd:85:d1:b7:55:42:72:1d:d6:70:39:ed:bd:
55:f3:9a:7f:b0:1a:1e:36:a1:84:2a:8f:d4:ee:e3:0e:74:8c:
8b:e3:e5:09:f4:50:2c:a1:e8:45:75:f3:70:e5:09:b6:e0:f8:
98:91:f0:7c:19:91:c3:57:52:8c:ce:22:bc:85:3d:a7:d3:fb:
40:9a:38:55:82:b8:41:a3:77:c6:29:2f:df:ea:b5:57:e5:82:
35:83:92:a3:c6:7f:70:a7:08:56:c5:6f:1a:2f:86:d8:2d:36:
74:51:c2:47:92:22:7b:93:93:c7:55:1a:e5:94:e7:78:93:b8:
ec:ae:a7:ef:4f:c4:4a:61:74:dd:34:1b:cf:e3:f1:e1:71:69:
67:87:5c:f8:96:e0:1c:71:42:95:0c:41:56:7a:d3:e7:6b:85:
36:bf:7f:e1:2e:3f:f4:f6:85:da:1b:f6:90:8e:71:07:77:fd:
50:63:fd:35:19:e8:7b:70:e3:84:28:6d:d7:07:0d:6c:b9:44:
78:de:7e:e3:74:e1:e6:8d:bb:d6:37:12:11:bd:af:69:10:a4:
dc:d9:fd:40:2a:71:1a:9d:14:9f:94:69:be:57:a6:4a:69:cf:
12:2b:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:55 2026 by rpki-client