Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: g4WvldOrmdGSOaL5NFjbnrUq9PpV/kSFurmLRMKcrok=
Subject key identifier: 9C:D8:09:03:61:D2:0C:C6:53:9D:D1:F7:A8:42:14:A9:F3:27:18:BF
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01A003CBD632C344EDF4B5204EFC5431118F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 05:01:25 +0000
Manifest this update: Sat 15 Aug 2026 05:01:25 +0000
Manifest next update: Sun 16 Aug 2026 05:01:25 +0000
Files and hashes: 1: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: hwos4/A3TgX5QRrFpOpAV1nHCh5RlAWSfrOLsEnJFIg=)
2: vGVZSv8sGgM5BoLDh6fVjRk2w7w.roa (hash: RIvCgh4jwN9bhn2BuDsBle0NLGA7WV0r/x8kr5b3org=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cb:d6:32:c3:44:ed:f4:b5:20:4e:fc:54:31:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Aug 15 05:01:25 2026 GMT
Not After : Aug 16 05:01:25 2026 GMT
Subject: CN=9cd8090361d20cc6539dd1f7a84214a9f32718bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:8b:83:67:cb:fe:d0:a9:7b:3e:9a:7f:29:
dd:69:1c:bc:2e:bd:4a:cd:57:4e:b9:78:14:e3:f6:
71:cc:79:4b:08:d1:02:cf:72:df:e8:5d:9a:62:e2:
52:82:8a:0f:44:d7:5d:e0:51:06:16:69:a4:3e:7f:
db:b8:df:86:db:24:7e:39:38:a5:54:a5:ca:82:ec:
b8:3c:89:3c:4a:c8:60:7c:b1:a6:72:6f:6e:51:d9:
06:ab:f9:3d:64:6f:9f:37:51:ee:c9:b3:c8:07:5b:
df:73:3d:f9:d0:38:b6:5f:31:5c:be:96:42:62:3f:
dd:5f:9d:6b:15:07:76:d2:14:c9:c1:30:3c:70:e1:
86:b1:86:bd:cf:e1:92:6f:04:43:06:68:f0:9f:f8:
6d:e6:c4:00:a8:c7:7a:75:5a:8f:5b:cc:af:60:24:
5a:15:0c:6e:1d:0e:26:54:15:a3:a8:91:55:90:9a:
1f:aa:78:4c:7d:61:b4:a2:8d:cb:f1:f7:a7:7c:8f:
75:c9:44:97:13:7c:bc:ee:a0:90:40:d0:7a:bc:5e:
5e:90:49:1c:ff:6a:53:22:31:f4:c1:15:85:cc:a6:
49:4d:d7:e7:5c:81:cf:92:34:47:a3:c2:c9:ad:41:
59:67:36:23:6c:bb:66:a4:48:50:67:4c:ce:1c:b8:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:09:03:61:D2:0C:C6:53:9D:D1:F7:A8:42:14:A9:F3:27:18:BF
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:9f:de:ba:da:8a:b3:13:0e:34:96:95:4a:54:58:89:32:
92:02:a2:44:b5:29:04:ab:90:3c:df:5e:c3:fe:f9:f0:03:9b:
ab:92:16:0f:f5:6f:59:3e:2d:c9:81:02:cb:fc:aa:66:f3:8b:
ba:48:8e:ec:5b:92:7d:71:d2:f0:ab:91:b5:ac:82:36:26:7c:
e0:aa:e7:95:b3:43:81:57:d1:b7:52:ee:6e:27:f6:93:eb:9d:
0a:06:bd:a8:83:a4:a2:ca:0a:29:6f:97:54:a5:32:60:37:01:
fe:f4:f5:60:92:50:34:75:ad:98:4b:55:12:87:97:a5:64:db:
48:cb:50:8b:1f:8d:61:c1:aa:0c:47:99:6f:75:02:d9:9c:4c:
19:9e:4c:01:0f:9a:eb:01:80:5c:05:64:af:22:a3:6a:fe:c1:
1b:ef:42:dd:e8:43:6e:46:3f:16:ca:af:a1:e9:bc:ed:45:f7:
32:2a:20:7b:a1:5c:1f:23:0f:a8:b2:92:77:18:6d:4b:5b:98:
84:80:0c:a6:c4:15:21:63:05:da:f9:85:6b:3a:6a:c0:94:4a:
89:ab:2f:6c:f4:7d:d9:ec:77:9f:d6:85:2d:1b:b4:76:31:47:
ab:25:61:d3:29:01:65:86:f8:e2:97:c7:60:75:a2:61:61:6e:
53:a1:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:23 2026 by rpki-client