Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: 0nHRJNmO8pQYinn8FKXe3q4UK4pAcizgllhTHbCtP/I=
Subject key identifier: BA:F9:7C:4F:52:46:4D:2B:6D:37:15:CC:00:82:A6:B8:F8:35:B8:B2
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019CC4BD2D8E8C98BED3BA85A8FA8C011D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1858
Signing time: Fri 06 Mar 2026 20:00:58 +0000
Manifest this update: Fri 06 Mar 2026 20:00:58 +0000
Manifest next update: Sat 07 Mar 2026 20:00:58 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: DQJr27dQYwjgedjiMr6OQVJEVc3PhUJsgGHBI5dcj3I=)
2: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=)
3: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:bd:2d:8e:8c:98:be:d3:ba:85:a8:fa:8c:01:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Mar 6 20:00:58 2026 GMT
Not After : Mar 7 20:00:58 2026 GMT
Subject: CN=baf97c4f52464d2b6d3715cc0082a6b8f835b8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:b5:20:1f:3f:79:2d:bc:7e:ae:6b:70:fb:
9f:02:04:e2:1a:8b:8f:8b:7d:75:9b:a5:5c:48:95:
df:5a:ed:a5:f9:b2:83:95:56:7a:ff:a2:e7:6b:77:
1d:76:2c:5b:4e:45:b0:f6:5c:9d:42:3a:57:db:13:
41:1a:8f:2a:bc:43:34:3f:bb:a4:5d:19:50:9c:4c:
c3:c8:4e:2d:70:30:c3:ae:7a:76:04:4f:0a:63:ca:
e9:7b:8b:9d:c8:68:49:19:d1:c8:11:f8:fd:6b:24:
00:16:ab:46:f9:91:5c:fd:c6:a8:1b:56:2e:ac:0a:
3d:f4:09:cc:70:1b:cf:38:de:60:7f:50:1d:7d:aa:
b3:a9:28:18:6f:12:60:a1:73:71:ba:b7:d7:c0:bd:
4d:42:34:d8:8b:05:f3:1f:78:4c:5f:0e:3f:1e:9f:
95:38:fa:8d:5b:39:3c:ff:86:1d:d3:84:07:7f:9d:
67:dc:44:e3:49:95:7b:a1:74:7f:94:ad:93:49:72:
eb:f4:9f:ee:cd:58:bd:f8:a1:3a:0c:62:fc:bb:e6:
60:ab:6f:92:2b:36:38:23:b7:b0:46:d9:cf:62:7d:
58:db:18:34:43:d5:69:e6:4f:fc:7e:8d:bb:ee:9e:
9f:88:eb:30:30:96:25:79:18:87:50:af:36:d8:4c:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:7C:4F:52:46:4D:2B:6D:37:15:CC:00:82:A6:B8:F8:35:B8:B2
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:c9:b3:b0:ca:44:2b:13:28:8e:a3:46:69:bb:b3:01:e4:
62:76:9c:b9:47:c7:16:4e:99:77:5f:50:d4:3f:d1:1d:77:32:
c6:a1:26:39:65:2a:c7:ec:ab:61:82:5a:aa:3d:1e:95:91:62:
fc:25:b4:28:10:fd:20:3b:eb:a8:60:3c:46:f8:c6:7c:52:67:
74:08:1e:5f:6d:60:28:58:a7:e9:1d:64:d8:17:7a:37:1f:25:
bb:95:ae:53:b0:40:37:60:ce:31:1a:6e:05:bd:21:67:d8:38:
c2:dc:11:73:2c:34:b0:cc:fd:7d:f1:b1:33:94:37:8a:1e:0d:
71:25:8d:a9:ac:cd:76:84:40:b4:7a:40:63:55:21:e7:d1:56:
f9:a6:c2:b1:11:3b:64:19:79:51:66:e0:9f:f6:48:98:7b:dc:
94:9d:64:ae:24:8a:a3:05:05:7e:85:d6:d8:dd:e6:e8:80:06:
55:de:01:27:13:8d:64:17:e2:8b:8c:56:19:6d:ea:46:ca:87:
7c:8a:8e:cf:38:2a:ee:2a:87:e6:13:e7:94:65:e1:93:60:34:
b4:ea:66:02:30:32:96:76:72:fa:f3:16:91:ae:b0:7c:10:a8:
f7:ce:c0:1f:9e:cb:1e:68:a0:2d:16:3b:42:80:54:17:64:01:
bd:f0:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 22:50:18 2026 by rpki-client