Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: +bcnu72guQTvCy9e+wDrXT0PFnfvpHXF+5RRC1ezgGI=
Subject key identifier: EE:F0:AA:58:DB:02:89:C5:FB:43:F0:72:52:25:C3:89:E8:96:A5:F3
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019F91DA83333E446D194965929902516D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 0693
Signing time: Fri 24 Jul 2026 02:00:44 +0000
Manifest this update: Fri 24 Jul 2026 02:00:44 +0000
Manifest next update: Sat 25 Jul 2026 02:00:44 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: U112bBrWGBvrjuboysn3aA0qnTCQt/GD1VAfTRj621I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:83:33:3e:44:6d:19:49:65:92:99:02:51:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Jul 24 02:00:44 2026 GMT
Not After : Jul 25 02:00:44 2026 GMT
Subject: CN=eef0aa58db0289c5fb43f0725225c389e896a5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:3c:2d:db:3a:c3:a9:7f:11:da:4b:5d:70:
f6:72:22:96:ab:5d:b8:bd:26:67:d1:08:29:16:d8:
33:71:ee:81:2e:97:91:6e:ed:73:f0:39:0e:90:22:
f8:93:52:6c:98:4a:2f:eb:c9:3c:21:9b:b5:34:6f:
03:85:ea:39:2a:66:3d:09:99:c5:02:57:4b:bc:9c:
4e:95:a3:d8:79:fb:09:c3:a1:72:e8:c1:1d:a7:16:
06:f1:e8:8f:a3:52:2b:1b:fb:e6:83:98:e6:24:68:
18:25:41:28:85:ec:b5:e9:92:f8:40:7a:c8:da:e0:
c2:ee:75:b9:d9:e0:76:89:ee:04:29:67:ad:b6:b6:
90:f2:df:4d:6b:d9:74:8d:a3:f9:1e:6e:bb:be:dd:
50:a6:ab:dc:d1:2a:03:d8:29:09:8b:ec:0f:3a:54:
ea:87:7a:f5:9a:80:37:f9:1d:ad:1d:80:46:c2:30:
17:01:65:25:96:01:9c:48:12:d5:c2:aa:9e:3d:08:
55:d4:d2:ab:c7:d7:2a:38:23:11:ec:ec:7a:f8:7e:
4a:da:c3:23:d4:5e:a9:55:8e:d9:58:ae:ba:e6:a7:
f3:46:b8:90:a9:f8:65:0e:07:5d:72:df:87:3a:11:
de:db:e4:bc:cd:28:23:b3:e0:cd:c9:3e:e9:14:11:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:AA:58:DB:02:89:C5:FB:43:F0:72:52:25:C3:89:E8:96:A5:F3
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c5:5f:99:dc:9c:44:e3:1d:ca:a6:3d:62:1f:e6:85:6a:6b:
73:76:36:a4:8c:fb:54:e1:08:09:85:dc:c5:be:66:78:9c:44:
63:9e:0f:46:ab:14:a1:d6:72:36:49:4c:ab:df:3d:01:d2:81:
59:6f:7a:78:f9:6e:e2:f6:ea:c5:f5:de:5b:55:fe:6f:b1:ac:
30:82:4d:ff:1b:bc:30:3f:d5:31:37:75:ff:b2:01:a3:df:0c:
09:5d:d4:d8:55:36:f2:8f:de:26:35:b8:1c:d2:86:5d:3d:ef:
45:9d:55:5f:cd:e5:cc:d0:ff:d6:9f:08:55:de:5a:26:78:27:
8c:90:26:3d:32:2e:c0:58:2b:24:e9:0e:08:70:d5:1a:5d:d2:
06:98:51:59:76:bc:a2:62:bb:c7:b7:59:60:e7:e2:f6:3e:3b:
a6:a4:34:48:a5:69:48:3b:51:8d:93:da:4a:7f:9a:8d:0d:15:
b4:f8:19:95:b6:d1:5a:ef:6f:f2:73:ff:4e:66:c5:01:e0:fd:
4a:33:d8:6e:1f:6b:80:a8:d0:bd:42:19:9d:8f:43:44:50:30:
8d:83:c2:ec:68:22:21:df:df:b5:92:c5:07:dc:ba:33:c0:28:
e0:c9:2e:49:3d:61:b4:81:31:df:9d:ff:41:5a:9b:43:72:89:
42:f5:19:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2oMzPkRtGUllkpkCUW2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjNlNDIzYmQxZTk3MzZhNWY1ZDc4NGVjOTI5OWQ1MDgy
NzI3ZGMwHhcNMjYwNzI0MDIwMDQ0WhcNMjYwNzI1MDIwMDQ0WjAzMTEwLwYDVQQD
EyhlZWYwYWE1OGRiMDI4OWM1ZmI0M2YwNzI1MjI1YzM4OWU4OTZhNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44A8Lds6w6l/EdpLXXD2ciKWq124
vSZn0QgpFtgzce6BLpeRbu1z8DkOkCL4k1JsmEov68k8IZu1NG8Dheo5KmY9CZnF
AldLvJxOlaPYefsJw6Fy6MEdpxYG8eiPo1IrG/vmg5jmJGgYJUEohey16ZL4QHrI
2uDC7nW52eB2ie4EKWettraQ8t9Na9l0jaP5Hm67vt1Qpqvc0SoD2CkJi+wPOlTq
h3r1moA3+R2tHYBGwjAXAWUllgGcSBLVwqqePQhV1NKrx9cqOCMR7Ox6+H5K2sMj
1F6pVY7ZWK665qfzRriQqfhlDgddct+HOhHe2+S8zSgjs+DNyT7pFBHq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7wqljbAonF+0PwclIlw4nolqXzMB8GA1UdIwQY
MBaAFArz5CO9Hpc2pfXXhOySmdUIJyfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEt
ZmUxZTkyYzM2YWRiLzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEtZmUxZTkyYzM2YWRi
LzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMVfmdyc
ROMdyqY9Yh/mhWprc3Y2pIz7VOEICYXcxb5meJxEY54PRqsUodZyNklMq989AdKB
WW96ePlu4vbqxfXeW1X+b7GsMIJN/xu8MD/VMTd1/7IBo98MCV3U2FU28o/eJjW4
HNKGXT3vRZ1VX83lzND/1p8IVd5aJngnjJAmPTIuwFgrJOkOCHDVGl3SBphRWXa8
omK7x7dZYOfi9j47pqQ0SKVpSDtRjZPaSn+ajQ0VtPgZlbbRWu9v8nP/TmbFAeD9
SjPYbh9rgKjQvUIZnY9DRFAwjYPC7GgiId/ftZLFB9y6M8Ao4MkuST1htIEx353/
QVqbQ3KJQvUZcA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:39 2026 by rpki-client