Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: IxREyrxevCAZvgy5KfcBHmU/t7Bo2d2XuPaXHxMjaDg=
Subject key identifier: E4:A4:B7:73:FD:08:9E:4C:7D:08:BB:1F:B0:ED:3A:0E:8D:C1:98:A7
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01A147CDE43C376F85E8C70AF4543DB4AB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0BBC
Signing time: Sat 17 Oct 2026 03:00:37 +0000
Manifest this update: Sat 17 Oct 2026 03:00:37 +0000
Manifest next update: Sun 18 Oct 2026 03:00:37 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LPUMGL0DH5PcG1AojfBAEkKYHe4.roa (hash: N5ZeUyAle6r7IlHtw9k67XdUKJ/pt6NdHoxYhDtnO8Y=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: gjkyExgdBsKSreivfqs4N2tbYvX58a8HKzirgGq/8Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:cd:e4:3c:37:6f:85:e8:c7:0a:f4:54:3d:b4:ab:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Oct 17 03:00:37 2026 GMT
Not After : Oct 18 03:00:37 2026 GMT
Subject: CN=e4a4b773fd089e4c7d08bb1fb0ed3a0e8dc198a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:13:7f:e5:f6:96:1d:a9:00:95:0e:98:fd:
ed:94:a4:4c:ed:2f:2e:d0:59:40:cb:9e:9d:88:93:
3d:08:5a:0c:46:d0:e7:25:3c:d1:83:0d:f0:8c:9e:
ec:1c:9c:b2:d0:d1:18:b1:66:96:33:ee:32:18:dc:
d9:f9:1e:01:14:44:7f:83:b4:17:50:72:3f:f3:35:
29:d8:5a:db:52:61:53:81:f0:3e:e4:32:e2:22:fd:
09:fa:37:60:0b:bd:52:08:0e:f2:f3:83:1d:e3:77:
c7:60:58:ff:93:2c:32:7d:bf:4b:ee:e1:88:aa:93:
2b:2b:b1:83:6f:63:30:40:f7:6a:87:86:5d:3a:0a:
3f:e5:46:db:f7:7e:2b:e1:dc:cb:92:2b:14:b2:07:
d8:23:f9:78:4f:40:4d:19:ed:bf:c7:e5:01:2e:52:
10:c9:b7:dd:b6:b9:56:f7:aa:44:df:93:63:25:50:
e6:dc:7c:a6:49:b9:9d:a5:31:a9:f3:48:96:70:a2:
ee:2c:6a:b4:ea:4a:1b:b1:f3:c4:c0:a4:0d:24:68:
39:6f:be:ce:c3:17:32:7c:3e:3c:4c:d3:f8:1d:3e:
84:0f:66:b1:da:93:63:16:4d:23:d4:66:f0:31:8e:
30:a9:1c:fb:82:94:a6:3a:4f:8f:47:67:44:5f:56:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:B7:73:FD:08:9E:4C:7D:08:BB:1F:B0:ED:3A:0E:8D:C1:98:A7
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:d4:e3:2d:68:81:79:a5:98:7d:27:07:57:b3:29:12:39:
02:41:18:92:a7:0d:b0:b6:12:02:21:ef:c0:9c:87:65:8a:3f:
1f:0f:06:22:a4:11:f6:80:db:2d:a8:cd:d6:d1:f3:7e:28:43:
2e:b0:61:a9:c6:a2:a8:ad:2e:51:32:db:25:e8:0d:81:26:3c:
0b:2f:cf:a8:a3:08:93:5d:bf:1a:5b:05:00:14:00:27:01:20:
91:07:93:69:dd:c3:00:3b:4e:9c:86:15:76:12:eb:f7:1e:d3:
98:3e:bb:d8:8f:40:16:a4:54:b6:2b:35:ad:af:c8:26:82:48:
dd:3f:16:27:13:0a:07:91:ec:f7:ae:64:8e:39:a3:00:52:59:
ec:e2:65:9d:71:01:5f:16:a0:fd:ad:49:25:13:c0:ef:31:b4:
e1:3a:e8:5b:8b:92:38:e7:68:1c:1e:fe:6f:34:e5:eb:20:7f:
7d:95:47:54:fe:0f:8c:34:82:83:4e:d3:3f:c8:22:9c:3c:a1:
7f:fd:ad:c0:25:26:21:16:0b:33:5b:59:68:c3:63:b1:81:0e:
c6:c0:4f:e8:09:a3:6e:63:09:8a:78:d6:47:ea:8a:d8:d1:c0:
8f:dd:ce:df:3b:86:cb:73:9a:c9:94:05:e5:5b:6f:df:e8:a3:
3d:ac:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:01:29 2026 by rpki-client