Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: vrkMzZ3DJH5NDeulNDiDMEZzRmImegme/bFlL/BK8lo=
Subject key identifier: CE:6E:26:55:18:2B:BF:06:56:5B:98:6D:D4:57:1E:3B:F4:37:75:F2
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019DCED0C0630A3691021F45B587462E1C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0FBD
Signing time: Mon 27 Apr 2026 12:01:20 +0000
Manifest this update: Mon 27 Apr 2026 12:01:20 +0000
Manifest next update: Tue 28 Apr 2026 12:01:20 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: ZJDwJ1rAeNzh9+iPY6aUsTBxgEq5ZRRxo/LeAcd5aw0=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c0:63:0a:36:91:02:1f:45:b5:87:46:2e:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Apr 27 12:01:20 2026 GMT
Not After : Apr 28 12:01:20 2026 GMT
Subject: CN=ce6e2655182bbf06565b986dd4571e3bf43775f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:f4:d1:ad:52:74:ae:fe:cc:3a:56:38:0d:
d0:12:4a:b6:c6:61:19:5f:de:f4:22:eb:b1:b9:91:
66:0f:7d:d7:b3:05:91:e1:1e:4a:6f:93:8b:64:33:
ac:69:df:cc:d7:55:17:fd:2b:27:71:ba:56:c6:cf:
a0:39:09:12:f7:72:5b:d5:fe:90:6e:f3:e0:54:da:
e6:0e:9a:39:3a:df:14:29:e4:fd:ae:3c:80:bb:fc:
0a:52:4b:fd:b1:c5:ed:22:06:a7:81:78:f4:66:d4:
d9:38:0b:b9:9e:5d:75:75:78:90:ad:a2:19:43:b8:
d1:b1:c5:22:75:05:e0:68:ed:82:9e:08:a6:9d:0e:
e6:6f:38:9a:c7:03:da:cb:50:1a:5d:b4:78:65:f2:
0d:2c:48:06:36:84:51:77:76:2e:5b:1e:5d:c5:23:
7a:30:a3:05:95:49:01:66:31:45:75:00:c1:23:42:
c2:fd:ee:ea:9b:33:62:d6:d3:eb:34:8f:c6:f1:60:
d9:5c:fc:c9:15:15:c0:4c:4e:5d:44:58:90:5f:cd:
2d:a9:2e:ac:ff:15:f4:e3:6b:26:3d:b2:31:7c:63:
3b:57:9d:80:bf:98:21:ee:6e:90:62:e3:22:67:cc:
70:ea:9b:b4:d6:b2:66:58:d9:31:34:5d:8e:df:f9:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:26:55:18:2B:BF:06:56:5B:98:6D:D4:57:1E:3B:F4:37:75:F2
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cd:ab:db:83:e7:b8:c3:f5:21:06:a9:7c:44:e4:c0:45:eb:
7d:64:f8:c6:3e:6e:e1:08:22:b1:37:d7:5a:52:c6:73:43:c0:
14:97:88:36:b6:f5:e0:67:9f:fa:5a:39:59:e6:4d:d3:38:69:
99:91:98:b7:c8:cd:25:31:f6:84:64:13:b8:7c:2b:50:a2:51:
1c:7e:95:58:5a:91:91:ce:94:e9:b5:31:31:bb:4a:35:c2:75:
79:15:1d:7e:cb:c7:94:85:7a:18:b9:51:55:88:19:bc:5c:ae:
0b:8b:15:eb:ec:e0:93:22:4d:f8:8d:de:d2:6b:00:9b:7d:0e:
3d:75:ee:18:1c:5e:ed:e8:bd:87:68:e8:63:63:dc:e0:61:e9:
df:6d:77:9c:10:fa:65:bc:97:1c:f4:ed:df:ef:7a:75:8c:bf:
fc:64:4c:72:4b:d2:11:39:c7:ea:ee:b9:4a:66:e0:3d:74:82:
a8:4b:07:4a:03:43:bd:9f:f6:be:99:f8:18:10:90:e3:79:ba:
a4:79:9b:88:1d:d6:3d:26:c7:70:84:27:04:60:cb:72:81:bf:
e0:21:cc:08:b2:04:48:7f:a0:41:2b:9a:20:70:af:8b:f8:a7:
41:93:94:62:d8:f8:be:06:32:e6:09:3f:7a:f8:a2:71:5b:76:
43:48:9c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0MBjCjaRAh9FtYdGLhxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk
YTA0NmIwHhcNMjYwNDI3MTIwMTIwWhcNMjYwNDI4MTIwMTIwWjAzMTEwLwYDVQQD
EyhjZTZlMjY1NTE4MmJiZjA2NTY1Yjk4NmRkNDU3MWUzYmY0Mzc3NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwL00a1SdK7+zDpWOA3QEkq2xmEZ
X970IuuxuZFmD33XswWR4R5Kb5OLZDOsad/M11UX/SsncbpWxs+gOQkS93Jb1f6Q
bvPgVNrmDpo5Ot8UKeT9rjyAu/wKUkv9scXtIgangXj0ZtTZOAu5nl11dXiQraIZ
Q7jRscUidQXgaO2CngimnQ7mbziaxwPay1AaXbR4ZfINLEgGNoRRd3YuWx5dxSN6
MKMFlUkBZjFFdQDBI0LC/e7qmzNi1tPrNI/G8WDZXPzJFRXATE5dRFiQX80tqS6s
/xX042smPbIxfGM7V52Av5gh7m6QYuMiZ8xw6pu01rJmWNkxNF2O3/lBZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5uJlUYK78GVluYbdRXHjv0N3XyMB8GA1UdIwQY
MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt
ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm
LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc2r24Pn
uMP1IQapfETkwEXrfWT4xj5u4QgisTfXWlLGc0PAFJeINrb14Gef+lo5WeZN0zhp
mZGYt8jNJTH2hGQTuHwrUKJRHH6VWFqRkc6U6bUxMbtKNcJ1eRUdfsvHlIV6GLlR
VYgZvFyuC4sV6+zgkyJN+I3e0msAm30OPXXuGBxe7ei9h2joY2Pc4GHp3213nBD6
ZbyXHPTt3+96dYy//GRMckvSETnH6u65SmbgPXSCqEsHSgNDvZ/2vpn4GBCQ43m6
pHmbiB3WPSbHcIQnBGDLcoG/4CHMCLIESH+gQSuaIHCvi/inQZOUYtj4vgYy5gk/
eviicVt2Q0icLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:08 2026 by rpki-client