Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: H9kkEufZT9yJUIbVXrEFT7IHM6mtWICUta4cOBvV8eM=
Subject key identifier: 1B:4E:00:4D:99:C7:A1:19:03:23:E4:83:AF:28:83:18:02:8B:F0:C9
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 01A040BC9281CCFD18DF81BD99037A189453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 0475
Signing time: Thu 27 Aug 2026 01:01:35 +0000
Manifest this update: Thu 27 Aug 2026 01:01:35 +0000
Manifest next update: Fri 28 Aug 2026 01:01:35 +0000
Files and hashes: 1: 4p2i3_lV2Xm21VM3RkLxfJEz5kE.roa (hash: NW8zzFhQ2+ZAvR18p5GH/sVm8t6bYcOGdrKnOofJKBM=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: jgDUN7kz5DnqkmGfplGG7FVe6uvSXWoh+sagaKEQ9pQ=)
3: rrMzogUtnNYohdiYHBUx1xdS4QY.roa (hash: gXfiVkS6pTRRTpVE1kuG1Q8iGKyEXJ5GRFNZwq4pmAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:92:81:cc:fd:18:df:81:bd:99:03:7a:18:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Aug 27 01:01:35 2026 GMT
Not After : Aug 28 01:01:35 2026 GMT
Subject: CN=1b4e004d99c7a1190323e483af288318028bf0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:dc:aa:d4:da:cb:31:df:4a:cf:99:46:83:
68:b8:ef:66:70:cb:c0:2e:33:63:9c:03:01:4c:ea:
46:07:01:26:d2:e7:3b:3b:7c:56:55:41:ff:86:17:
21:37:59:5f:7c:ab:a4:6c:fa:36:a1:3e:6d:f7:4c:
52:0b:c7:68:f1:f0:9e:01:88:a4:42:98:5e:6b:02:
c4:e0:40:6c:e0:37:3a:64:df:e2:64:9e:53:63:8c:
d6:4e:c2:d9:e5:7a:c8:21:96:1f:c9:fd:fc:f5:f0:
b8:44:e4:c1:37:72:a1:f4:84:ac:96:58:eb:b0:6b:
63:22:4a:4e:59:d5:bd:d5:5a:4d:26:bc:36:58:b1:
9e:b6:a1:df:c9:ea:9e:e9:bd:44:dd:03:ed:fd:c7:
b2:9e:50:e0:c6:ec:fe:d4:df:20:90:70:1e:d3:f0:
f0:d1:dc:e4:50:1a:1c:38:98:62:98:7b:85:9f:77:
8f:9a:c7:c1:78:49:5b:20:56:0c:4c:5b:7e:9a:f0:
a7:88:14:53:02:4f:6e:f9:96:0f:e6:f8:e3:8b:ff:
90:b4:1b:2f:3c:a7:d4:b5:2e:75:8e:db:ff:4b:f8:
82:d5:5a:41:a5:2f:dc:33:e6:ba:63:eb:f1:a2:d0:
9d:c6:b9:23:c9:ea:01:ce:f0:60:f9:ee:11:1b:dd:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:00:4D:99:C7:A1:19:03:23:E4:83:AF:28:83:18:02:8B:F0:C9
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:bf:2c:84:f6:cc:ca:68:71:23:dd:30:bb:16:79:fc:08:
30:d3:e9:77:fc:23:b9:4e:f0:f2:20:1c:0f:10:b9:44:64:34:
65:38:bb:b1:a7:6d:b3:ec:27:6c:d8:ac:bb:f2:74:1f:32:00:
6f:b7:83:69:81:16:28:f6:1b:89:39:90:d2:4e:f1:5b:ac:ad:
8b:e4:cd:d8:d0:53:26:ef:50:1a:09:7c:1d:f2:eb:7d:8e:de:
be:12:a2:f6:a3:61:2c:b2:16:ac:73:a2:4a:6d:da:a8:e9:d1:
84:46:4d:c7:12:6d:87:9d:9e:7b:30:cb:f9:ea:5d:f4:9e:6d:
a7:5e:08:a8:f0:53:de:77:39:5c:39:78:3c:0a:78:4b:09:68:
18:d8:49:7a:7f:7e:23:c6:1a:3b:6f:42:21:52:48:b7:4b:4e:
dc:69:c1:d4:65:7f:83:6e:aa:a1:9a:59:9b:03:2c:42:b3:95:
dc:0e:d4:c8:b0:e2:4f:13:24:80:6b:6d:14:fa:39:96:5c:00:
37:c8:12:6f:1d:e2:aa:ac:ca:94:d5:c4:3a:6f:d0:c0:24:e7:
33:0e:bd:b5:e3:77:1d:86:4f:09:7c:4b:c5:0d:ca:9d:8d:2a:
af:77:bb:5c:a3:cd:b5:e8:f7:8b:6e:87:cb:c9:7f:43:dd:7e:
64:8e:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:55 2026 by rpki-client