Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: UMHKVZ4B6a7minBXcUuh5N1NEnG2isCq55GObn8+rSg=
Subject key identifier: 1A:A1:B1:75:BD:41:B5:50:0E:16:DF:46:69:0F:1B:45:1A:B7:19:7C
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 019D38666907DCBACD2E428B483D2FA75B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: mmSttZDihW9KzQBi8P6PFLGF/PnZWs1J9mkAUiWtT1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:69:07:dc:ba:cd:2e:42:8b:48:3d:2f:a7:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=1aa1b175bd41b5500e16df46690f1b451ab7197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:84:a7:37:79:ef:6e:bd:69:85:f6:4f:77:
e4:a0:8c:16:9d:d1:64:ca:ce:94:92:52:02:7c:06:
1c:a3:07:4f:ce:93:ca:bd:d5:42:a1:d0:dc:20:a5:
2d:04:de:e0:bf:fb:f7:f0:7f:ac:b1:97:df:38:3c:
5b:c5:cc:de:d7:73:a2:b1:ea:ed:37:70:d5:f6:17:
bf:73:52:00:05:2a:b3:40:dd:87:39:5b:73:02:f2:
9f:93:f6:44:07:ac:3f:9a:9a:91:60:dc:24:43:37:
a0:91:a6:3a:40:cc:d8:41:67:eb:a3:c7:6e:0a:9f:
d3:22:b3:9c:58:67:08:b4:8c:21:40:a3:f6:c6:5c:
76:a2:69:d6:33:4d:2f:3f:7d:25:a8:8a:73:ab:67:
69:a9:d9:26:3b:de:91:8d:6e:b6:19:87:40:06:8e:
4b:a2:0b:c2:b6:77:0e:6a:38:d9:bf:78:d5:e0:88:
2a:26:c7:97:b9:18:d9:c7:3a:0f:db:d6:f8:17:8b:
66:88:44:01:48:00:4e:80:57:ad:2a:28:76:a3:ed:
16:18:7c:db:d9:11:68:c7:68:17:f2:0a:69:b1:d3:
28:0d:d8:a5:2b:fd:38:2c:ef:a7:fa:8e:dd:fe:32:
dc:ab:03:8a:9d:08:a3:a6:de:b4:c2:63:e5:bc:3a:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:B1:75:BD:41:B5:50:0E:16:DF:46:69:0F:1B:45:1A:B7:19:7C
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:10:23:ad:03:0f:8d:3d:f7:31:65:fd:be:80:20:22:f8:
ff:5e:51:a6:13:69:b2:96:12:ac:60:7b:bd:ba:bd:79:1f:93:
71:e7:b9:4c:f4:54:8b:81:ed:a1:c9:85:a4:06:20:90:3d:e8:
07:bc:1a:fb:7f:23:fc:7e:c1:65:95:07:00:0d:d5:8f:e7:7a:
f0:82:aa:3a:d9:07:84:fc:92:82:a9:4d:e5:dc:17:2c:78:47:
5e:18:5d:8d:99:56:1a:20:b8:fe:f4:cf:d2:45:9c:d8:8a:27:
e7:3c:76:a1:a5:6f:54:d1:e0:bd:cf:18:7b:82:cc:4c:6d:2b:
fd:35:01:21:12:8b:de:ac:95:d4:d0:f4:fb:69:10:e1:4f:d2:
14:06:ed:3d:61:d8:7c:55:d1:ad:3b:7c:4d:78:05:8e:9a:32:
1e:81:4b:57:08:1c:d7:7a:16:76:b9:e1:50:6d:b5:88:3e:ee:
9f:de:d1:a4:d9:f5:30:c3:a6:6c:f5:e9:cc:7b:51:d0:73:1a:
c2:5e:4c:46:e0:f9:04:9b:c0:5a:ea:c5:5f:37:b0:3b:46:84:
c7:79:48:8f:d0:0d:c3:89:f1:92:0e:6c:4a:84:61:e1:bf:a4:
b7:7f:c7:73:25:a7:ba:b3:14:51:88:fc:14:28:c9:41:d7:40:
5e:0e:22:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmkH3LrNLkKLSD0vp1sQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWQ5ZDE4MmM2M2FlZDgzOTdmYmUzNzJlMzYwMGY0M2Ri
ZWViNmEwHhcNMjYwMzI5MDcwMjA4WhcNMjYwMzMwMDcwMjA4WjAzMTEwLwYDVQQD
EygxYWExYjE3NWJkNDFiNTUwMGUxNmRmNDY2OTBmMWI0NTFhYjcxOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSEpzd57269aYX2T3fkoIwWndFk
ys6UklICfAYcowdPzpPKvdVCodDcIKUtBN7gv/v38H+ssZffODxbxcze13Oisert
N3DV9he/c1IABSqzQN2HOVtzAvKfk/ZEB6w/mpqRYNwkQzegkaY6QMzYQWfro8du
Cp/TIrOcWGcItIwhQKP2xlx2omnWM00vP30lqIpzq2dpqdkmO96RjW62GYdABo5L
ogvCtncOajjZv3jV4IgqJseXuRjZxzoP29b4F4tmiEQBSABOgFetKih2o+0WGHzb
2RFox2gX8gppsdMoDdilK/04LO+n+o7d/jLcqwOKnQijpt60wmPlvDquawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqhsXW9QbVQDhbfRmkPG0Uatxl8MB8GA1UdIwQY
MBaAFHFdnRgsY67YOX++Ny42APQ9vutqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgt
ZTQzM2NmYzcyNDc3LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgtZTQzM2NmYzcyNDc3
LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFYQI60D
D4099zFl/b6AICL4/15RphNpspYSrGB7vbq9eR+Tcee5TPRUi4HtocmFpAYgkD3o
B7wa+38j/H7BZZUHAA3Vj+d68IKqOtkHhPySgqlN5dwXLHhHXhhdjZlWGiC4/vTP
0kWc2Ion5zx2oaVvVNHgvc8Ye4LMTG0r/TUBIRKL3qyV1ND0+2kQ4U/SFAbtPWHY
fFXRrTt8TXgFjpoyHoFLVwgc13oWdrnhUG21iD7un97RpNn1MMOmbPXpzHtR0HMa
wl5MRuD5BJvAWurFXzewO0aEx3lIj9ANw4nxkg5sSoRh4b+kt3/HcyWnurMUUYj8
FCjJQddAXg4iiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:15 2026 by rpki-client