Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: 51u5WjgmLllL8pCm1dnv2IRttntmznTVIVWQmvXAb2c=
Subject key identifier: 7C:AB:61:50:FF:F5:C8:72:B5:7A:BC:69:71:30:B9:5C:04:98:60:C3
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019D39413260186219E2376553F2549CAAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: nUt99w+pvqZxcOXlyDekKOo3xAto+Dm7ViVB+fxKXj0=)
2: vGVZSv8sGgM5BoLDh6fVjRk2w7w.roa (hash: RIvCgh4jwN9bhn2BuDsBle0NLGA7WV0r/x8kr5b3org=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:32:60:18:62:19:e2:37:65:53:f2:54:9c:aa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=7cab6150fff5c872b57abc697130b95c049860c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:41:f9:84:7c:88:dd:3d:be:1e:c4:a5:34:
46:18:e6:38:d4:e8:20:69:2d:24:65:ca:6d:c2:d9:
86:1f:81:b7:93:89:06:ec:02:fb:7f:7e:e2:76:e3:
46:de:3e:a8:14:ac:4a:48:e6:46:9b:12:9b:27:49:
c7:97:42:60:65:d8:db:f0:ea:5a:e1:26:58:9e:c1:
07:0f:4b:42:bf:e8:24:af:b1:b4:2f:9a:4e:85:40:
6e:52:23:3b:e3:04:a4:1d:62:9d:0c:f1:c4:7c:f3:
4d:27:b2:76:0d:52:56:23:0f:03:4c:d7:65:22:34:
b7:20:22:55:68:e2:30:17:5a:db:62:f7:70:d4:54:
dd:8c:9f:b0:ca:d1:6b:7e:ba:6a:60:72:37:c3:f0:
74:55:84:ac:32:a2:72:c8:bd:0c:fe:88:f3:c4:5a:
04:54:78:09:50:05:3c:78:02:f2:a6:1c:f2:a2:08:
49:b4:c9:17:8a:04:8a:20:fd:cd:05:fe:d8:74:de:
4e:f0:2f:8c:34:ef:77:45:7b:9d:84:44:c9:68:67:
8d:f0:95:c7:b4:ff:b0:ce:14:be:2d:86:49:65:3d:
40:f8:8f:7d:52:48:06:b4:73:c2:51:ed:c0:2d:fa:
87:b4:35:be:d8:e6:76:e6:92:4e:72:19:cd:35:5e:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:61:50:FF:F5:C8:72:B5:7A:BC:69:71:30:B9:5C:04:98:60:C3
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6f:9e:28:e9:e6:69:67:a2:bf:5b:c7:04:d6:6d:9b:89:55:
ec:86:e2:46:05:4a:48:a6:4c:ab:cb:80:01:1c:a3:28:98:3c:
66:00:a9:43:ef:bb:15:ab:18:da:83:c6:64:a0:d8:0d:80:19:
5b:16:c6:56:e6:fc:61:eb:8f:a2:7f:97:2e:bb:b6:f2:aa:4d:
46:eb:b8:13:7a:a5:37:ed:a6:18:32:ad:80:8a:21:8a:6f:ed:
fd:fa:ee:96:3a:bc:c3:06:ee:72:54:02:9d:3a:09:e6:3d:27:
ac:bf:89:56:92:67:35:36:02:83:ee:5c:21:22:82:7d:28:ea:
59:4b:ae:68:be:61:15:e1:b4:af:63:9f:dc:44:c8:e1:8c:70:
11:f5:e5:50:40:90:90:ef:6d:03:c9:09:63:0e:7d:cd:6c:db:
f3:54:c6:c4:38:c1:cc:11:85:15:86:60:d6:37:e9:a9:a5:f7:
02:00:b4:61:70:85:7f:02:2d:b7:2d:3d:4e:bd:c6:35:84:10:
1d:b1:b5:b8:4c:94:d1:57:04:9b:6f:46:46:c0:df:19:69:49:
4f:2c:6a:ac:3a:a6:45:21:97:8b:cb:7f:21:cd:6d:b4:39:15:
48:a0:16:d2:cc:00:73:e7:9b:ad:1a:f7:a5:32:d2:63:d4:0c:
8f:8e:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:28 2026 by rpki-client