Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: OvAKAPftKCTbHtiCSL8vTboOWiqy8NkEOElY9uwNgV4=
Subject key identifier: 86:7A:8B:76:C3:64:69:00:E4:A3:B2:74:CF:BF:9B:95:40:24:3B:3C
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 01A0B651E3FDF041050207563BD6D65216A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 113E
Signing time: Fri 18 Sep 2026 21:00:15 +0000
Manifest this update: Fri 18 Sep 2026 21:00:15 +0000
Manifest next update: Sat 19 Sep 2026 21:00:15 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: rXpH4sem1YrLPj2SfYAvHyravO1lonxeB9A9z40BnU4=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:51:e3:fd:f0:41:05:02:07:56:3b:d6:d6:52:16:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Sep 18 21:00:15 2026 GMT
Not After : Sep 19 21:00:15 2026 GMT
Subject: CN=867a8b76c3646900e4a3b274cfbf9b9540243b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:92:2d:dd:a9:1d:e5:3d:d5:6a:e8:df:23:
a6:6d:7f:25:bb:15:7e:1e:f0:80:14:75:38:04:27:
04:85:0f:a9:7c:77:a4:ba:b0:ad:ef:58:2e:22:fc:
44:e4:10:c9:a2:de:33:ff:96:8c:60:95:00:a9:ef:
d8:da:13:59:c6:c7:5c:27:9b:ea:7a:37:9e:b4:53:
75:de:0b:99:66:8d:26:13:b8:ba:49:72:9a:37:f5:
c9:0f:30:97:5e:bd:e9:59:77:de:48:c3:bf:9e:50:
6c:75:38:89:71:1b:2a:8e:42:b6:75:e5:67:be:f2:
95:ba:dc:2d:7f:6c:4a:3b:8a:d3:4d:63:76:72:32:
74:51:33:f7:ba:2f:7a:04:03:9d:f3:5c:8f:fe:ab:
d0:85:b6:99:12:65:89:3f:32:d4:80:23:f2:97:fe:
83:2e:70:6b:7f:a4:17:93:5b:a4:c0:1c:6c:55:c2:
3d:b4:f6:32:43:1b:5b:7a:3b:1c:c4:7c:62:0f:38:
a7:b7:c1:f8:27:9b:cb:84:b6:01:2f:01:b4:fb:97:
b1:92:ee:67:8d:48:08:84:77:83:bb:7a:ef:e0:81:
e9:a4:2c:16:54:0d:4d:b4:9c:06:b0:ac:32:a3:6b:
f0:ae:52:76:0d:0f:70:c5:e2:e4:78:49:aa:f2:ba:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7A:8B:76:C3:64:69:00:E4:A3:B2:74:CF:BF:9B:95:40:24:3B:3C
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c6:34:7c:21:05:20:b8:dc:04:11:36:75:24:74:3c:3e:d5:
ee:b6:35:e8:de:e2:cc:2d:e7:4d:11:74:72:49:1d:f0:5d:b9:
79:4d:7d:28:4b:df:c5:98:ed:e8:cd:f3:5b:90:0b:2f:c7:d7:
b2:f5:c5:6c:bf:ad:30:90:31:4e:6e:74:3d:47:2c:84:f4:ac:
e7:b3:80:3f:5f:6c:45:dc:9c:ea:3b:51:e1:24:59:08:04:96:
76:d9:3a:38:bb:f0:f2:fa:ef:ea:f4:c4:70:0b:71:a9:f1:0e:
41:e9:62:ee:45:f3:22:d2:de:97:6c:92:a2:70:c7:d0:f5:d8:
8a:97:c6:21:bf:69:6a:46:ca:e7:bb:9e:6e:d8:36:d8:e2:5b:
7d:fa:9b:51:8f:51:e4:53:69:8a:eb:8c:9d:7f:3f:d2:dd:a8:
3f:b8:39:87:26:78:9a:a2:d0:d2:56:54:56:e0:cc:f3:be:18:
10:1a:b3:d2:e5:35:a2:8d:ad:21:8c:0a:73:6b:8b:76:ea:c3:
b0:96:ee:13:3f:84:50:98:58:da:63:69:a1:85:14:5a:58:f4:
5a:0e:26:29:7c:bf:a5:02:2a:5c:ea:1e:50:ee:9c:f7:f2:42:
44:c1:de:dc:b5:81:e2:d4:73:bf:bb:a9:18:e2:a3:d9:62:6b:
8f:bb:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:57:44 2026 by rpki-client