Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: +aayTqDXmo5nOXILAhzlreEQ185Rks8Z8MjRNcM113M=
Subject key identifier: 28:13:9E:BE:5D:B8:66:BF:2F:59:77:AB:16:83:1E:57:F7:5A:BA:BE
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019D3865E82DEF1DDCF9D710BF092A088911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 02E3
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 4p2i3_lV2Xm21VM3RkLxfJEz5kE.roa (hash: NW8zzFhQ2+ZAvR18p5GH/sVm8t6bYcOGdrKnOofJKBM=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: P0ZH/tevaDkSEVfs+F+KtYijdPICxK69MAE6VJc+WYI=)
3: rrMzogUtnNYohdiYHBUx1xdS4QY.roa (hash: gXfiVkS6pTRRTpVE1kuG1Q8iGKyEXJ5GRFNZwq4pmAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:2d:ef:1d:dc:f9:d7:10:bf:09:2a:08:89:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=28139ebe5db866bf2f5977ab16831e57f75ababe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:1e:d4:11:f3:45:86:d8:84:96:55:bf:72:
f7:b6:8a:2b:4d:70:9c:a1:dc:38:00:8d:9b:8f:ac:
87:7e:2d:06:d8:8c:f0:99:12:38:20:0a:83:e8:fc:
01:db:28:92:0b:33:2b:68:b3:89:e6:a2:eb:5c:0f:
53:0c:67:1a:e4:a0:fb:d5:d9:cd:c4:60:1a:26:fc:
9b:53:1a:b4:b3:3c:fe:5d:57:d7:bc:0d:bf:e4:e7:
9e:ea:e4:29:1b:c2:02:cb:cf:4a:e1:04:b5:68:41:
3b:3a:8c:73:41:a9:ae:ef:5a:a4:8d:db:88:ec:d6:
b9:41:29:a2:3d:1f:0d:74:e8:0e:69:fc:cb:81:7f:
01:54:71:6b:68:a3:da:9a:2d:90:2e:2b:97:d3:52:
c5:6f:ee:3b:6f:9e:ab:2c:b7:9c:ca:df:6b:61:73:
6b:3a:b4:f4:0c:c4:0a:39:fc:ee:08:7a:06:74:0a:
ec:7c:e9:69:ec:11:91:f0:84:51:b0:40:56:ff:7c:
85:47:05:99:40:bb:48:e2:3c:f6:27:a4:52:e6:7d:
9f:69:09:ae:62:1c:86:be:c7:61:ad:20:cd:e1:68:
69:1d:62:12:d2:c1:51:d6:3f:06:8f:7b:b7:90:a9:
54:a0:98:ae:41:5b:94:6d:65:5d:43:63:0e:13:d2:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:9E:BE:5D:B8:66:BF:2F:59:77:AB:16:83:1E:57:F7:5A:BA:BE
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d4:7e:dd:65:6c:a7:60:cf:49:9e:9d:33:82:35:91:e6:17:
6b:f2:73:c8:44:20:e0:67:d9:3a:55:bb:cc:15:8e:e1:8d:2d:
79:78:7c:a5:b0:ce:87:34:01:f3:10:7d:eb:46:81:ac:05:77:
67:d2:46:3b:a6:84:f4:1f:a0:4b:36:86:49:49:82:4d:a5:46:
c2:9c:62:32:74:8e:ff:93:74:40:72:a1:03:2a:99:55:f2:fe:
38:06:1c:de:55:19:58:bb:84:61:e0:ba:9b:43:11:02:ba:34:
58:f9:eb:f0:cb:d2:1a:ab:79:83:b0:f2:87:38:ba:4e:4a:d1:
76:92:71:11:13:36:57:4c:65:58:1a:36:91:40:a9:66:4d:e4:
40:ca:3b:31:30:6b:94:b4:b0:dc:16:df:0c:8e:40:08:8e:72:
93:c5:5b:ac:22:2e:2e:07:40:60:c0:92:d6:af:28:d8:88:1a:
7f:7d:fb:5f:77:f5:66:5b:ae:7a:d0:f7:57:2d:79:45:27:76:
55:29:51:54:82:2a:60:df:12:41:cb:bb:3a:e7:a0:b8:00:3c:
e5:78:39:5a:3d:bd:44:50:1f:0d:31:79:4c:fc:9a:9d:0b:31:
5f:df:c7:03:37:69:ab:eb:75:2f:c5:46:c5:f9:ad:77:26:a3:
e0:a2:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:33 2026 by rpki-client