Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
File: cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft (raw, json)
Hash identifier: a/51VD8h1MxpVwRMed5j1LKsOfwzLQM/t8Y6PtNTQkk=
Subject key identifier: 7C:CC:6E:32:E0:D3:65:06:50:B5:31:C7:FD:49:A6:67:F0:D9:3E:2B
Authority key identifier: 72:F6:71:BF:E6:48:C8:BD:9C:40:49:81:39:A7:65:FB:72:06:9A:82
Certificate issuer: /CN=72f671bfe648c8bd9c40498139a765fb72069a82
Certificate serial: 01A1DFF0AFB7A27CEA58533D355F868F58F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
Manifest number: 0135
Signing time: Sun 15 Nov 2026 16:00:54 +0000
Manifest this update: Sun 15 Nov 2026 16:00:54 +0000
Manifest next update: Mon 16 Nov 2026 16:00:54 +0000
Files and hashes: 1: cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl (hash: QgBvfa5XCmOVfgVpPjL13mSRwk/pC/GwPcwVI6lTXbw=)
2: exxpw5cx3XOG7qb0UXxN_-8TTi0.roa (hash: HBHB+elJSDeSFqlZLJRXOXB3AMZZ+OnUUwKQ8K/55F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:af:b7:a2:7c:ea:58:53:3d:35:5f:86:8f:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f671bfe648c8bd9c40498139a765fb72069a82
Validity
Not Before: Nov 15 16:00:54 2026 GMT
Not After : Nov 16 16:00:54 2026 GMT
Subject: CN=7ccc6e32e0d3650650b531c7fd49a667f0d93e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:77:d0:a4:79:c8:c9:e3:2b:43:02:a4:a5:
e5:62:09:59:0d:b0:8e:e7:d0:85:c0:5f:8a:b0:93:
b6:a2:76:e6:60:0b:28:a1:c1:1d:75:9e:47:62:b1:
a2:21:4a:b4:d2:66:34:62:9f:86:dc:77:87:16:95:
94:49:12:00:bf:ee:36:b9:d3:b0:0a:31:79:f6:e9:
5a:2c:2b:1c:2e:df:46:38:4d:8e:8b:45:2b:6b:73:
f1:82:dd:2f:7c:7a:c0:6a:7b:9d:10:6e:ec:05:0b:
79:b8:9f:5a:34:84:06:43:88:8f:b4:25:31:e8:21:
51:42:99:61:19:30:1e:f0:aa:77:5f:7c:68:1a:b3:
5d:19:7e:27:ae:a1:6a:69:74:4b:cd:3d:58:d4:52:
98:e6:fd:21:d2:08:2e:2a:6e:12:c4:38:43:f5:3c:
d5:9d:52:30:ec:3f:b4:f0:cf:f6:de:1e:c5:10:83:
5b:33:a9:33:24:48:62:4c:c4:e1:e5:cf:21:f9:e0:
b9:77:f2:23:79:84:83:4c:d7:40:49:a5:7e:05:91:
22:8e:99:d9:57:c0:c4:6a:85:3d:fe:35:26:ee:a0:
bb:ad:e9:b5:0e:71:58:7b:30:7c:23:b1:0d:b9:e0:
cc:df:cd:f1:14:9a:bd:24:ca:98:38:fc:0b:58:c9:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:6E:32:E0:D3:65:06:50:B5:31:C7:FD:49:A6:67:F0:D9:3E:2B
X509v3 Authority Key Identifier:
keyid:72:F6:71:BF:E6:48:C8:BD:9C:40:49:81:39:A7:65:FB:72:06:9A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:df:22:39:1b:8a:7b:28:32:7f:09:7e:b6:c4:c2:62:9f:
a0:4c:81:af:c1:41:f2:5e:88:b8:ac:15:a7:7e:b7:b9:12:9a:
3a:14:46:3b:bc:27:9e:03:ef:1e:ed:81:c2:3c:0f:7d:96:5a:
62:12:d4:7b:32:bf:8f:4b:be:22:52:94:91:ea:38:45:bd:ad:
88:1c:07:5a:8c:c0:e5:50:01:18:af:32:a2:66:d7:03:ab:ba:
4b:fe:03:ed:0b:54:cd:ee:5f:96:2d:b1:b2:9b:e2:a3:2c:b8:
9a:c9:e2:6e:ff:0a:1c:22:3b:df:61:0b:30:29:5e:1f:12:36:
3b:a6:bb:66:d3:cf:ad:78:cd:bd:3b:aa:d9:1f:35:8e:25:0a:
bb:7d:3d:e8:ad:49:35:67:0b:6a:ea:ed:7e:89:98:90:a9:38:
aa:dc:69:ce:e8:7b:2b:f2:66:c1:19:f8:78:a8:4a:a5:e2:d8:
81:f6:22:12:42:ee:f4:77:d0:b2:bf:86:5c:bc:1c:bb:1c:00:
ed:e7:02:94:d2:63:da:39:2e:35:3f:bb:9c:ec:3d:59:2b:b0:
f6:e6:52:d1:ee:e2:d3:3a:11:6e:88:3c:7a:e3:27:4e:ce:5e:
4c:05:78:d9:16:28:51:b3:3e:e7:cf:09:c2:bd:0b:c9:18:07:
23:75:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:50:32 2026 by rpki-client