Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: dzXPjWtg2ZecJlPuYGIXwm+Rc82hWOO1S26UA9TxBN8=
Subject key identifier: 3F:D0:58:AD:D1:20:81:9E:B7:44:4F:33:7A:96:2E:B5:69:14:CB:3A
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01A05667B3FEA9E23B47B638441F2F50E502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0B3F
Signing time: Mon 31 Aug 2026 06:00:31 +0000
Manifest this update: Mon 31 Aug 2026 06:00:31 +0000
Manifest next update: Tue 01 Sep 2026 06:00:31 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LPUMGL0DH5PcG1AojfBAEkKYHe4.roa (hash: N5ZeUyAle6r7IlHtw9k67XdUKJ/pt6NdHoxYhDtnO8Y=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: R0+k9la+wZIFJ3ymPHfPr4dH+o5z4fCfgQlOoTrFomU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:67:b3:fe:a9:e2:3b:47:b6:38:44:1f:2f:50:e5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Aug 31 06:00:31 2026 GMT
Not After : Sep 1 06:00:31 2026 GMT
Subject: CN=3fd058add120819eb7444f337a962eb56914cb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:0c:59:2b:da:94:7f:49:8e:83:20:66:80:
dc:f1:4d:eb:7f:81:4e:64:ac:35:df:be:67:ba:2a:
9e:65:51:b0:28:f6:12:ae:d2:6e:bd:7c:49:2c:d3:
e1:cd:28:e8:17:fa:88:d4:90:a4:a8:ab:59:a2:22:
d2:f9:e9:99:51:16:34:6d:bd:67:49:bd:25:dc:e9:
75:82:ce:1a:4e:1e:e3:77:df:09:2b:6c:2c:9e:63:
ce:da:81:8f:4b:c7:b5:b8:0d:c8:a2:61:7a:48:99:
8a:d5:4d:3a:66:d0:98:5c:ef:68:03:1a:86:c4:1a:
ac:5e:df:1c:1e:ad:3d:0e:bd:a3:6a:74:e7:b9:ee:
b1:e4:66:af:75:45:b2:bb:fe:d0:c1:32:4f:23:0b:
e7:07:cf:cd:ef:14:41:a0:c7:94:2c:6c:74:00:64:
ae:ca:ba:d9:87:0e:20:72:87:de:f2:96:c8:7e:cb:
09:aa:ad:b7:2c:09:a1:53:09:d6:1c:02:fe:cf:4d:
96:59:2c:ad:16:2a:50:f7:0b:4c:90:7d:a0:d7:b9:
7c:2c:5f:3c:11:25:40:78:65:12:46:8e:b1:45:80:
fd:4a:be:78:bd:37:6a:f9:c6:51:29:1a:ae:07:17:
30:87:c8:97:f6:fe:7b:a3:ff:15:ea:97:3f:50:1b:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:58:AD:D1:20:81:9E:B7:44:4F:33:7A:96:2E:B5:69:14:CB:3A
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cb:2b:60:29:d6:92:07:94:09:be:3b:f8:39:2f:86:86:03:
8b:97:4f:a7:4d:7a:41:76:38:1b:d9:3e:98:a9:a2:04:36:80:
ce:cf:5c:89:cd:fb:40:7a:84:20:07:35:54:09:3b:62:d9:aa:
a4:9d:65:e8:84:bb:75:42:07:76:7e:70:d6:09:bd:12:ab:79:
53:75:e5:bc:ed:48:8f:8a:86:8c:e4:f2:f7:25:df:46:90:99:
6d:20:bc:88:d8:af:93:1b:c8:ca:03:af:72:41:fa:d9:69:d2:
86:6e:d9:aa:fe:56:80:68:9f:f0:cc:34:98:f3:65:2e:b5:de:
e3:72:01:eb:f4:a8:99:60:2b:46:eb:79:f4:00:16:97:1a:a7:
4f:c7:b7:10:39:36:61:90:bc:ee:92:08:eb:07:6e:51:56:29:
d2:b8:b5:9c:6f:d1:eb:aa:93:e0:04:ef:0f:d8:07:7f:97:45:
2b:34:41:9e:e1:99:16:6d:79:3d:64:cb:d3:9e:e6:2d:38:37:
c1:94:a7:4a:16:24:b3:70:70:6c:91:da:4f:45:d4:29:90:2b:
fd:36:be:ad:5a:e5:df:b9:92:fc:5a:e0:88:69:12:da:eb:56:
25:96:2b:3a:a5:f6:b6:9b:5f:b3:db:49:37:f2:76:1a:5b:39:
84:5b:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:25:25 2026 by rpki-client