Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: pDF/iBoie+63QBBncD7IzmE9tVIso8zd4xDmelURrt0=
Subject key identifier: B6:A2:28:BC:37:A4:EB:FF:6A:62:70:D8:09:DD:F1:6B:38:A2:79:1A
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019D9DE38ADCDF733F0BDD56CEDE93DADDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 09D6
Signing time: Sat 18 Apr 2026 00:00:28 +0000
Manifest this update: Sat 18 Apr 2026 00:00:28 +0000
Manifest next update: Sun 19 Apr 2026 00:00:28 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: L4p0KqsTd8+zWXNI8rQscj1xdA72kSOgRYSsF+nEgWU=)
4: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:8a:dc:df:73:3f:0b:dd:56:ce:de:93:da:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Apr 18 00:00:28 2026 GMT
Not After : Apr 19 00:00:28 2026 GMT
Subject: CN=b6a228bc37a4ebff6a6270d809ddf16b38a2791a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:9a:de:fe:41:f8:5a:a5:8d:66:28:73:c3:
1c:cf:29:1b:25:35:43:62:67:c7:6f:1a:fe:9a:f2:
39:b4:57:ec:68:5f:7b:80:b9:2c:6e:49:f5:0c:7f:
6a:df:2f:84:53:51:c8:7b:93:a0:c2:51:fd:6f:2d:
e7:33:fb:18:ed:78:46:3f:78:be:f9:5f:ec:fe:69:
22:92:80:23:2b:e9:26:7e:61:36:7d:1e:77:7e:4e:
7e:a2:66:58:b3:b7:28:81:36:fb:09:f6:7d:e5:ac:
2c:0c:47:82:a9:6f:de:d7:6a:b7:01:de:4e:f3:58:
ed:8f:c8:e2:2f:4c:30:71:70:1a:2d:d0:b5:f4:dd:
e0:94:2f:f9:72:2e:6d:2c:d5:d8:48:c6:18:1b:67:
39:8a:53:fe:08:91:f1:0a:75:b3:5c:1d:66:84:01:
16:7d:e6:2e:8d:1b:44:ac:75:ec:88:c7:56:32:71:
a5:06:5a:fe:a0:5e:b5:07:53:32:c7:d0:3f:df:28:
35:84:f3:94:99:05:1a:3e:73:ce:fc:21:3c:13:11:
ae:29:e0:3d:d6:6d:1e:83:66:25:cf:8a:fe:10:53:
46:23:7f:1f:38:d5:22:8c:72:ca:95:c8:ce:9b:f3:
7d:51:b9:f5:ca:df:65:22:0b:60:81:71:da:5e:ce:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:28:BC:37:A4:EB:FF:6A:62:70:D8:09:DD:F1:6B:38:A2:79:1A
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4d:55:10:62:c0:09:df:86:00:cf:db:73:55:ff:cc:1b:e5:
e9:96:52:49:4a:27:da:fa:d2:14:20:6e:77:92:13:69:a8:35:
fe:44:84:9e:9b:e9:ec:ce:f6:79:e3:81:eb:05:57:92:ec:2f:
1e:6f:89:ec:d6:81:df:33:a9:2f:60:3e:43:1b:12:69:fc:06:
26:3e:a4:08:f1:f7:30:5c:b6:2a:8d:de:86:ad:d8:ef:2a:91:
1b:ba:4d:ac:c3:9e:65:1c:07:80:cd:9c:e1:e5:b0:a1:6b:69:
16:25:3f:58:84:70:37:2b:4a:65:7b:97:a8:35:bb:31:ac:ce:
c8:81:7a:32:f9:1e:e0:59:0c:ee:1c:6d:40:4f:18:8a:fe:08:
98:17:45:d0:23:09:1a:29:7e:78:23:55:b9:ed:77:6e:80:de:
9e:e7:d8:17:e7:9c:3c:52:8f:cf:2e:2b:e8:62:78:17:4b:91:
ce:43:b2:12:9d:65:14:9f:a7:c2:2d:59:7c:fb:8e:55:eb:0c:
d3:3c:ed:c3:92:96:e0:c3:a8:3b:65:0f:f0:31:a9:ba:4d:95:
72:81:99:03:12:18:92:d8:af:eb:7b:bd:3f:21:2a:e6:c1:49:
21:9b:19:54:fb:db:81:1d:4b:d0:d2:0b:8b:0b:7b:3b:72:eb:
46:77:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:56 2026 by rpki-client