Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: BSKNHI+8dXIFXYxXqAXL7oekU5nVrvqGBaTzdne4CVc=
Subject key identifier: 29:56:6D:A4:10:46:3B:A2:46:96:74:E2:11:F5:1B:9F:66:BA:44:15
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019CE5236AC84B6A633CC0C5BBD01B2815E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0F44
Signing time: Fri 13 Mar 2026 03:00:29 +0000
Manifest this update: Fri 13 Mar 2026 03:00:29 +0000
Manifest next update: Sat 14 Mar 2026 03:00:29 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: /yNF7jffyJOMeU9hU5JX7Yx9z9Op5fnTM3xifMfWOoM=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:6a:c8:4b:6a:63:3c:c0:c5:bb:d0:1b:28:15:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Mar 13 03:00:29 2026 GMT
Not After : Mar 14 03:00:29 2026 GMT
Subject: CN=29566da410463ba2469674e211f51b9f66ba4415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:01:85:7d:8c:24:de:ec:fc:80:65:eb:1f:
62:fa:5e:e3:57:62:a9:ca:b9:54:1b:a0:89:a4:a7:
33:87:4d:06:49:6f:af:d3:46:82:92:6f:14:ed:a5:
fa:88:c2:ff:b5:d1:ca:96:11:31:c1:71:b2:b3:43:
07:73:db:39:ff:bd:b4:7e:f1:35:6f:e5:b5:d0:06:
d9:d6:fa:bb:21:3a:b3:fe:ca:88:3b:ed:23:9f:eb:
28:d3:45:cd:12:df:3e:94:90:71:a4:ca:19:d9:98:
ff:25:5c:58:1b:6b:72:91:a0:9a:1a:a9:35:c7:9a:
b1:2c:a5:5e:9e:3f:4d:e2:4f:1b:f5:5c:67:96:3a:
f7:e6:a0:7c:05:e7:55:25:93:ad:fa:83:be:ce:74:
ed:06:79:14:df:5e:12:4a:b3:41:b3:24:0c:e9:91:
3d:48:0e:d7:8b:5b:03:d6:18:76:3e:4c:9c:ee:f2:
0d:b1:4b:32:bb:90:f3:41:47:55:20:05:e8:1f:04:
39:92:9f:34:f8:ad:a4:e7:09:48:94:0d:33:5c:ab:
70:d6:0a:f8:33:49:1c:9c:45:df:25:19:a2:9e:cf:
3c:c3:21:4e:3e:e2:39:04:68:f6:04:f2:71:38:9d:
95:12:ad:cd:84:25:d8:21:b8:ef:5f:d4:5d:da:c5:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:6D:A4:10:46:3B:A2:46:96:74:E2:11:F5:1B:9F:66:BA:44:15
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:85:86:69:fc:d7:30:d6:18:4e:3c:9b:f0:b1:d3:11:6e:
b1:3e:d5:67:d5:74:c3:89:3b:72:df:3b:fc:f0:2a:27:0f:75:
a8:77:a5:02:67:4a:2e:87:b7:bc:a1:da:5d:77:21:92:d9:8b:
f2:21:62:1a:e2:30:ed:04:ad:1f:47:ef:8b:1e:3a:5c:c9:84:
fd:e6:12:3a:cb:7a:e8:27:ff:f5:7a:56:a2:f4:ff:27:24:ae:
8c:e1:94:b1:c6:57:bd:0d:ea:e7:8d:78:26:67:a7:62:08:f9:
95:3a:ef:c2:b1:c8:46:dd:2f:dd:16:79:15:99:07:be:16:c6:
48:9a:e2:17:0c:19:8e:09:43:af:84:f5:47:ac:3e:65:e6:af:
28:d0:8d:80:51:3d:de:7c:79:e6:23:7a:91:b9:5e:1c:80:be:
ba:ba:26:9b:50:aa:ec:29:17:dd:61:3a:96:e5:da:9a:7e:9d:
be:b3:f8:5d:53:83:0a:2b:af:67:78:41:05:d1:ae:55:1e:c2:
84:be:30:f0:a1:6f:8f:39:c2:b2:bd:f5:9d:66:9c:30:be:cd:
a8:40:8d:1c:4b:7e:18:a1:b2:c2:68:0b:20:91:8e:89:fb:bf:
b1:b8:dc:39:be:c5:b2:d9:97:b4:1c:4d:05:92:28:61:2f:80:
0a:38:a7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:52 2026 by rpki-client