Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: 9tjCvMEOwGcwXMCDY1kPnlfj9D6TdsDeSqf3QeN65S4=
Subject key identifier: 08:36:24:9B:6E:AA:B5:80:2D:C2:CD:B7:FC:CA:ED:45:31:C1:37:FE
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019CB437523025E76823A7A032BC42EE5072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 095C
Signing time: Tue 03 Mar 2026 15:00:50 +0000
Manifest this update: Tue 03 Mar 2026 15:00:50 +0000
Manifest next update: Wed 04 Mar 2026 15:00:50 +0000
Files and hashes: 1: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: qkameM41QlLIAOj9J03YmHGW9K+o+dDOwBAYOq//goA=)
3: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
4: yz9etzU3WAij-xTcB349cOYhteM.roa (hash: MWnxlRDoogvVu7rgyi8dvl0hLzqj48ZRfL2MzhVICvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 14:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:37:52:30:25:e7:68:23:a7:a0:32:bc:42:ee:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Mar 3 15:00:50 2026 GMT
Not After : Mar 4 15:00:50 2026 GMT
Subject: CN=0836249b6eaab5802dc2cdb7fccaed4531c137fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:d6:f2:6a:90:0e:1b:88:0d:16:db:46:c7:
6c:27:30:9d:b1:69:2f:eb:4c:dd:21:9d:0a:1e:49:
bc:8f:c1:7c:98:24:42:57:d4:1a:8d:70:31:4e:d2:
0e:75:bf:0f:16:b8:79:c5:6e:46:4e:ae:8f:5e:1b:
d6:d5:59:ed:0e:77:7b:62:7c:10:17:09:30:42:a9:
48:32:c5:54:e3:6f:30:76:67:d4:ec:94:c9:1b:29:
f6:67:bb:34:e5:a3:93:33:94:be:ae:1f:32:8a:0b:
55:13:8a:b2:5e:d8:aa:09:02:ad:85:93:83:bf:2c:
8c:35:ed:54:da:2d:13:94:83:75:9f:95:57:a2:25:
4d:4b:0f:e0:03:2b:de:3f:55:af:a3:e5:53:b8:61:
03:d1:3d:22:f8:4c:61:7a:11:81:01:f4:ad:96:07:
c4:de:00:d7:c0:71:ea:3a:ac:10:f0:7b:96:40:11:
df:4d:ac:36:ee:8e:62:3c:ae:4e:35:36:e5:b5:ad:
b7:38:0a:91:3d:a1:c1:1d:8f:34:27:e9:49:53:a0:
41:0a:ea:b2:4d:87:43:ec:2f:05:a3:bb:12:bd:4d:
0b:61:48:c8:b3:8c:3b:5e:b5:8c:47:46:2a:7f:e4:
96:0b:9d:a1:0a:73:f9:19:c5:d8:58:0c:01:19:2f:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:36:24:9B:6E:AA:B5:80:2D:C2:CD:B7:FC:CA:ED:45:31:C1:37:FE
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:b5:e8:4d:92:bb:89:bc:03:ab:97:a1:ed:18:88:21:32:
79:e3:5f:20:f5:17:d3:4e:ae:2b:99:de:be:a2:11:ed:81:17:
3c:3a:af:c3:29:ae:f2:0e:e0:b9:ee:47:a0:3f:bd:3b:bc:32:
9c:7c:21:bd:4c:21:f8:b1:5c:71:e6:38:9e:64:f3:79:cf:c3:
70:6e:d9:f1:7c:d3:b3:a3:ba:1e:2a:f8:70:d2:3b:a9:63:8f:
3b:a6:c6:9d:b9:08:ac:f0:26:60:b8:09:df:5a:80:73:b8:28:
8e:78:47:1b:25:82:40:b5:4a:c1:94:1c:cf:43:27:f4:d4:50:
9b:6c:07:ee:f8:e7:82:f9:6d:a3:03:d6:4f:4d:cd:24:4e:8d:
66:cf:5b:9d:64:75:36:fd:0c:39:b9:0a:ca:5c:d2:35:44:64:
60:74:9a:79:3e:4c:41:3f:32:e6:a2:dc:d6:c5:cb:2b:ed:8d:
4a:60:d8:e8:e4:ca:a8:bb:d1:ce:c9:83:47:8b:13:cb:2c:41:
41:a3:e0:26:be:07:71:a7:2a:dc:ec:b8:2e:13:8a:ce:3c:e6:
ca:b4:6d:65:24:bb:3d:bd:dc:17:34:6c:c2:90:0f:77:b8:ac:
f6:ab:5e:c0:59:b2:6f:10:4e:de:88:9a:e4:59:12:5a:6f:13:
0f:33:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:58:40 2026 by rpki-client