Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: JuHbQSHhT0h0wcCDw/sct12ax9vj3ElbEXdQLhwKwsk=
Subject key identifier: F5:5E:4D:27:C2:2E:BD:51:E2:C5:87:45:4B:73:7C:50:F9:64:1E:A7
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01A1035B11ED0E0BC85AE71DF80A5CC413A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1A8B
Signing time: Sat 03 Oct 2026 20:01:02 +0000
Manifest this update: Sat 03 Oct 2026 20:01:02 +0000
Manifest next update: Sun 04 Oct 2026 20:01:02 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: AdJRQjAR5IkNANvdFEU/bIu/exFCAI0xxLZQVS1EI08=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:11:ed:0e:0b:c8:5a:e7:1d:f8:0a:5c:c4:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Oct 3 20:01:02 2026 GMT
Not After : Oct 4 20:01:02 2026 GMT
Subject: CN=f55e4d27c22ebd51e2c587454b737c50f9641ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:8a:96:02:7a:cf:6c:36:62:4a:f5:e7:83:
e0:bc:db:aa:fe:26:cf:bd:70:ad:c4:cd:9d:a5:62:
3e:06:0e:80:15:2e:05:a2:6b:f1:f1:69:9c:67:6a:
cc:58:9e:16:27:d6:67:31:a9:85:0d:ee:a4:d7:b4:
72:25:1d:7e:23:81:92:b7:f6:3c:8d:69:4f:fd:1e:
a4:b5:63:96:09:1c:11:e3:1c:7a:6a:37:15:57:9a:
43:5a:9e:d8:97:9b:55:5d:73:63:27:06:06:73:5e:
38:6d:f2:65:ca:87:1c:34:e8:a5:3d:20:00:6c:33:
fa:65:4a:d0:ec:d1:0c:b8:21:10:7a:7d:9e:3b:1b:
3f:8e:dc:81:c6:21:d5:71:60:8e:b3:cd:7e:cf:cd:
03:1c:59:76:5f:6e:76:58:41:ea:77:f0:da:7b:5d:
61:c8:dd:68:6d:a6:d2:9b:f8:ac:8f:cb:13:83:b9:
2c:44:0c:4e:82:4c:85:35:40:c8:4a:6d:7b:80:22:
b7:8c:d7:a4:7e:68:52:97:8d:74:21:e9:a4:9f:44:
7e:05:4a:eb:ff:18:61:a8:66:3a:01:b1:96:b0:a2:
c7:b1:8a:41:9d:f8:61:6c:9d:61:1a:28:92:bd:d9:
c5:9c:d1:3b:ab:44:c1:8e:aa:07:72:93:07:29:75:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:4D:27:C2:2E:BD:51:E2:C5:87:45:4B:73:7C:50:F9:64:1E:A7
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9f:1f:d1:1c:7b:36:68:10:90:2a:1c:77:e4:b5:d7:de:98:
e5:8d:2d:42:91:52:19:75:27:a7:aa:6a:6e:39:ed:a1:9d:a3:
b5:70:d4:aa:03:e7:f8:58:c2:f7:b1:31:ac:e1:ae:23:01:e1:
7f:a2:9f:da:0f:0f:a4:40:fd:5f:a1:8d:37:85:e8:26:ed:34:
4f:22:20:e4:c0:19:81:04:74:4d:76:e0:34:d7:40:c1:78:31:
6f:16:6d:b2:2d:44:93:7c:65:63:a2:f9:c6:2d:4f:3f:e2:22:
9f:1e:10:71:f0:8a:39:ae:e0:33:53:96:25:c6:c8:00:3c:b9:
52:fc:be:87:6c:6b:56:26:16:f7:d9:87:52:b8:f1:41:20:26:
88:2f:b6:38:43:37:32:c2:e7:bd:d7:57:99:68:22:a3:4e:db:
2d:5f:71:3e:72:7d:a5:11:f8:fe:43:42:1b:c7:70:09:1f:6b:
35:8d:fb:7d:9d:22:63:61:74:8d:59:fb:ed:1c:07:e4:1a:51:
4c:f2:c0:9e:1d:82:6d:de:cd:17:9b:69:bf:4a:e9:64:fe:16:
58:3e:0d:98:a2:3d:b5:92:55:d7:10:d5:a6:77:2b:c5:90:45:
d8:36:bb:eb:9a:e2:96:9c:b0:0a:64:24:32:bb:cc:e2:35:1c:
5d:c1:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:46:38 2026 by rpki-client