Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: X3U2qIPA+TyfsB4UCTkfsfq3lEH+SUHYCF9MJia8yVg=
Subject key identifier: 2F:94:73:7B:42:9E:25:53:14:37:66:82:16:A9:2F:C5:18:61:51:C5
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 019D37899DB732BC2DB5E9C012E707898E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 1762
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: Xr4E/Lo8R3p6Lm88NDcinPJe3EQoJ7jhWUVudKG2A3Y=)
2: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (hash: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9d:b7:32:bc:2d:b5:e9:c0:12:e7:07:89:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=2f94737b429e25531437668216a92fc5186151c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:4d:47:42:4f:a8:8a:42:f1:64:3a:2c:6e:
74:a3:bc:93:03:eb:fb:a1:03:f5:4d:bf:1e:24:76:
0d:fd:ea:81:fc:b0:1b:fb:d7:7c:96:fc:ed:32:2a:
55:0a:2a:40:d2:1b:13:22:26:d2:87:15:e2:2f:89:
11:b3:b6:d4:b7:4d:32:d1:d7:2b:88:9c:59:f7:4c:
a7:57:5c:f4:30:20:1f:31:cc:52:3c:06:64:84:ef:
40:aa:2c:57:2a:a1:1e:49:af:f2:24:d9:1d:0e:ff:
33:d6:67:d7:be:e5:cd:60:6d:9b:2b:34:ec:71:4d:
79:31:5d:07:a3:91:02:01:37:47:61:fa:46:b1:39:
58:10:64:ff:36:b5:aa:2c:e7:6b:4e:8e:d8:8c:f9:
48:67:21:21:11:75:58:9f:23:8c:47:73:36:40:b5:
e2:3a:2b:cc:e2:ad:e9:b1:43:88:91:28:b3:28:c5:
52:47:94:e9:9a:92:1b:1f:ec:24:06:09:86:a6:b4:
bc:b1:0c:0b:61:5b:f6:5e:e1:dd:d2:46:22:54:1e:
d9:09:5c:4a:5a:ea:e8:39:b0:c8:6b:51:1e:c7:c8:
1d:63:11:72:3a:7f:31:19:bb:a0:97:5d:67:d6:ac:
7b:8b:32:dc:12:b4:bf:ad:f7:16:74:65:ca:5f:2e:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:73:7B:42:9E:25:53:14:37:66:82:16:A9:2F:C5:18:61:51:C5
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:f2:ff:95:df:be:bf:72:6a:97:02:9e:ac:17:a6:cf:89:
67:53:40:17:63:da:be:55:af:99:68:0d:06:d8:f9:aa:b4:be:
f3:37:1e:da:bd:5c:d1:8f:df:b3:88:0a:6d:69:97:6d:24:19:
cb:34:91:93:20:a1:ec:6c:85:be:8b:44:5c:53:1e:23:8a:3b:
68:78:73:c9:4d:71:d7:b8:e4:ab:4c:db:37:ff:dd:b2:5d:0c:
42:3f:c6:59:40:62:05:51:8c:02:6b:52:d1:29:81:bf:4e:f0:
96:f7:1e:f5:22:cd:d8:2b:6a:79:ff:04:73:05:fe:80:f9:2a:
75:ce:80:d1:6b:a1:8f:27:13:8f:a1:bf:84:9c:59:75:b4:8c:
7f:3b:82:84:0f:44:5e:10:e3:03:3b:ff:87:74:49:2f:a6:34:
87:82:5b:96:a6:98:d6:ea:9e:da:0c:e9:38:f0:85:d8:b0:70:
25:f2:b7:1d:a6:5b:3b:a3:96:22:61:67:a5:2e:d3:61:cc:c7:
4a:fb:3e:4e:86:85:48:20:99:f6:d8:ea:4a:91:8a:12:57:9b:
68:c7:f7:5d:04:dc:41:50:5c:17:d3:1a:0d:c8:ea:27:22:80:
90:17:22:57:ce:fd:d2:63:c0:7f:ef:3c:2e:28:71:83:7d:4b:
40:2c:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client