Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
File: CVD6zJX7pJXse2VCcTl9VVmJWvs.mft (raw, json)
Hash identifier: SMRX+7FQibQ5NZ3BzwV9hMNhg+xJX6FstxBme5QllNc=
Subject key identifier: 36:4A:68:C6:DD:5C:10:71:32:00:76:6B:89:4F:01:20:06:F0:E5:F1
Authority key identifier: 09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
Certificate issuer: /CN=0950facc95fba495ec7b654271397d5559895afb
Certificate serial: 01A04017928A21533D4C8E44FBB721A44BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
Manifest number: 70
Signing time: Wed 26 Aug 2026 22:01:21 +0000
Manifest this update: Wed 26 Aug 2026 22:01:21 +0000
Manifest next update: Thu 27 Aug 2026 22:01:21 +0000
Files and hashes: 1: CVD6zJX7pJXse2VCcTl9VVmJWvs.crl (hash: MAIcGh85KNSVLdiU2O6uMecN5wqlLDj20LAmj1P0Ew0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:92:8a:21:53:3d:4c:8e:44:fb:b7:21:a4:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950facc95fba495ec7b654271397d5559895afb
Validity
Not Before: Aug 26 22:01:21 2026 GMT
Not After : Aug 27 22:01:21 2026 GMT
Subject: CN=364a68c6dd5c10713200766b894f012006f0e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:ab:49:54:4c:99:28:fd:83:12:9f:07:76:
d6:c6:28:b0:e0:20:df:08:04:0b:26:dd:aa:34:93:
86:22:f3:b4:98:dd:75:b2:fe:d5:dc:fa:ff:24:6a:
f1:bd:e3:4c:53:a4:31:6d:af:54:2e:9e:ea:4b:6d:
63:da:92:07:78:c4:03:30:35:e0:b9:4f:f9:67:d7:
a2:f6:d9:c5:37:a2:bc:5d:19:96:b0:b0:dc:73:0b:
c5:bc:66:ef:b1:ac:9b:4e:56:c3:27:16:c3:e2:bd:
95:25:0a:e2:b1:1d:65:f8:86:42:ec:39:c8:d8:bf:
9b:80:db:ea:30:4d:d6:1b:21:be:41:15:a5:de:9e:
2a:16:61:48:00:4c:8a:8f:37:20:dd:20:4b:4f:07:
05:21:c2:ee:76:3c:1e:2b:6d:ee:e9:4a:d8:08:d2:
0a:f5:a8:6c:de:df:9b:d9:1a:35:04:0d:47:d2:e2:
a7:ab:8b:0c:fa:df:06:03:81:6a:4b:08:4d:3c:53:
f3:c0:d1:f2:bc:e1:c7:cd:28:db:5b:29:47:2a:ac:
ce:1f:49:12:b1:d1:17:df:f8:4c:3a:91:e7:6f:ee:
4a:26:41:4f:8d:2b:04:e0:03:36:b1:a0:ea:de:12:
ec:e7:15:20:fb:70:aa:8a:6b:5f:21:80:e8:97:ad:
61:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:68:C6:DD:5C:10:71:32:00:76:6B:89:4F:01:20:06:F0:E5:F1
X509v3 Authority Key Identifier:
keyid:09:50:FA:CC:95:FB:A4:95:EC:7B:65:42:71:39:7D:55:59:89:5A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVD6zJX7pJXse2VCcTl9VVmJWvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1b2031-04db-4676-9edc-3e192057343f/1/CVD6zJX7pJXse2VCcTl9VVmJWvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:16:1d:8a:69:60:8a:cb:d4:30:bb:f4:5d:7b:1d:f7:e7:
39:c7:e1:1b:e8:38:94:ba:18:57:a1:38:11:b2:88:52:62:57:
be:d0:e5:a9:65:6a:02:e2:19:5d:5a:44:43:1e:e9:a6:7b:a7:
2a:b3:27:00:d2:c5:aa:f7:3c:a2:2e:61:2c:8f:96:c2:38:79:
1f:ea:c0:78:92:8b:b4:8d:95:e0:be:7a:1b:07:2e:06:1f:ed:
63:fd:ce:18:62:78:09:45:76:31:f8:43:98:55:59:73:11:e7:
36:6e:9b:34:fa:84:02:72:73:38:20:b8:27:25:1c:99:17:21:
a7:53:4b:2b:cc:50:94:94:a3:b0:6c:b6:0f:e0:c4:11:d6:cb:
93:99:4f:4d:08:2f:c4:40:ef:fa:e8:a0:1a:f0:5a:a0:24:75:
06:30:8e:d0:60:3f:f7:ca:69:6a:58:be:4b:b0:f4:fb:3b:3c:
5c:4e:b8:39:f3:40:81:f4:53:2f:3d:9c:4e:46:98:2f:9d:a2:
2d:5e:0c:c9:59:51:ac:df:44:0d:69:f3:33:78:dd:b4:09:19:
d1:24:e6:47:17:cd:0a:da:44:98:3b:35:90:9f:0d:59:85:66:
8f:70:9c:97:92:89:fc:81:d1:a9:67:34:04:37:2a:0c:ca:3c:
66:f1:39:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF5KKIVM9TI5E+7chpEv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTBmYWNjOTVmYmE0OTVlYzdiNjU0MjcxMzk3ZDU1NTk4
OTVhZmIwHhcNMjYwODI2MjIwMTIxWhcNMjYwODI3MjIwMTIxWjAzMTEwLwYDVQQD
EygzNjRhNjhjNmRkNWMxMDcxMzIwMDc2NmI4OTRmMDEyMDA2ZjBlNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HWrSVRMmSj9gxKfB3bWxiiw4CDf
CAQLJt2qNJOGIvO0mN11sv7V3Pr/JGrxveNMU6Qxba9ULp7qS21j2pIHeMQDMDXg
uU/5Z9ei9tnFN6K8XRmWsLDccwvFvGbvsaybTlbDJxbD4r2VJQrisR1l+IZC7DnI
2L+bgNvqME3WGyG+QRWl3p4qFmFIAEyKjzcg3SBLTwcFIcLudjweK23u6UrYCNIK
9ahs3t+b2Ro1BA1H0uKnq4sM+t8GA4FqSwhNPFPzwNHyvOHHzSjbWylHKqzOH0kS
sdEX3/hMOpHnb+5KJkFPjSsE4AM2saDq3hLs5xUg+3CqimtfIYDol61hrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZKaMbdXBBxMgB2a4lPASAG8OXxMB8GA1UdIwQY
MBaAFAlQ+syV+6SV7HtlQnE5fVVZiVr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZENnpKWDdwSlhzZTJWQ2NUbDlWVm1KV3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYjIwMzEtMDRkYi00Njc2LTllZGMt
M2UxOTIwNTczNDNmLzEvQ1ZENnpKWDdwSlhzZTJWQ2NUbDlWVm1KV3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8xYjIwMzEtMDRkYi00Njc2LTllZGMtM2UxOTIwNTczNDNm
LzEvQ1ZENnpKWDdwSlhzZTJWQ2NUbDlWVm1KV3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBYWHYpp
YIrL1DC79F17HffnOcfhG+g4lLoYV6E4EbKIUmJXvtDlqWVqAuIZXVpEQx7ppnun
KrMnANLFqvc8oi5hLI+Wwjh5H+rAeJKLtI2V4L56GwcuBh/tY/3OGGJ4CUV2MfhD
mFVZcxHnNm6bNPqEAnJzOCC4JyUcmRchp1NLK8xQlJSjsGy2D+DEEdbLk5lPTQgv
xEDv+uigGvBaoCR1BjCO0GA/98ppali+S7D0+zs8XE64OfNAgfRTLz2cTkaYL52i
LV4MyVlRrN9EDWnzM3jdtAkZ0STmRxfNCtpEmDs1kJ8NWYVmj3Ccl5KJ/IHRqWc0
BDcqDMo8ZvE5JA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:46:59 2026 by rpki-client