Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: rq133X/vVrJIew5eMV2ep68h3CanRy45t37p/cBj4pM=
Subject key identifier: 74:7D:5F:14:F6:E1:CC:D3:B6:A4:AB:99:5C:C2:7F:EF:E6:EE:5B:EB
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019CE334F2562012054FFC0D9797C9896CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 17F5
Signing time: Thu 12 Mar 2026 18:00:23 +0000
Manifest this update: Thu 12 Mar 2026 18:00:23 +0000
Manifest next update: Fri 13 Mar 2026 18:00:23 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: 9SsopEBqhjnu/FD88rW0eE6pwff+gLtl21G6GyOL1Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:f2:56:20:12:05:4f:fc:0d:97:97:c9:89:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Mar 12 18:00:23 2026 GMT
Not After : Mar 13 18:00:23 2026 GMT
Subject: CN=747d5f14f6e1ccd3b6a4ab995cc27fefe6ee5beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:4a:40:d8:66:17:ed:80:3d:ba:8f:13:c9:
94:d3:ba:6d:cc:f8:6b:bd:75:50:e9:36:8b:87:61:
4b:ae:b4:8d:60:7c:0a:fd:07:53:e5:3e:0e:7e:3c:
5f:a1:8a:b4:f5:b3:91:93:21:67:e4:e7:5c:d2:5d:
70:ca:ab:3a:50:12:80:fb:5e:b9:f8:20:62:08:4c:
90:32:66:6f:48:1b:41:1b:a6:66:6e:a1:a9:67:e6:
b0:a8:21:fc:57:bd:e5:26:ee:b8:c5:7f:1f:98:a7:
5f:08:f9:66:b2:5e:1f:6f:5d:be:2b:f8:dd:d8:4e:
90:9c:85:dd:8d:86:a4:2d:97:99:bf:f9:e6:33:88:
1d:42:9f:44:89:4a:8b:31:9a:61:25:db:dd:88:b6:
d5:ba:2a:84:bc:6c:cc:b9:b6:eb:51:fb:6f:f5:1f:
ec:a0:82:e9:98:40:55:75:52:10:b3:fb:78:33:d5:
ad:9b:8b:dd:7c:36:c6:a5:7b:60:bc:27:33:8c:17:
c7:57:d7:28:29:cb:42:db:fb:c5:04:4a:95:af:87:
ca:22:fe:ec:fe:32:03:a0:d4:1a:17:65:d1:1b:21:
37:1f:0f:e2:4a:71:84:24:c6:58:3f:5c:00:66:7c:
96:65:ee:2d:c6:75:21:3c:13:8d:8b:69:49:f0:d2:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:5F:14:F6:E1:CC:D3:B6:A4:AB:99:5C:C2:7F:EF:E6:EE:5B:EB
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2b:bd:d0:01:45:e8:e1:0f:1d:32:09:8b:e9:ff:2f:d5:f9:
5a:66:a5:7c:58:d3:a5:9d:14:44:1e:81:04:7d:04:bc:17:19:
af:07:9b:57:16:66:68:57:57:2a:49:00:7a:c0:e8:3d:76:55:
5c:b7:a6:8c:49:33:44:2c:67:6c:de:65:28:fe:d4:4c:47:c1:
2e:46:61:1b:16:96:6c:13:3c:90:8a:71:2c:50:1c:5f:26:90:
d9:54:60:36:8c:4f:bc:72:6d:77:35:99:70:59:55:94:f2:53:
75:50:35:2e:6f:1b:21:d3:1e:85:bd:ee:67:65:ed:cc:5b:a2:
df:62:68:01:8e:82:c7:fc:f2:35:de:87:e6:3e:6d:41:c3:dc:
bb:52:61:e0:f1:4b:cf:1d:27:b2:e2:29:cf:e5:9e:75:ff:a1:
ee:f2:39:e1:f9:fd:0b:c3:89:b7:ae:61:a0:e1:d4:17:70:58:
24:26:c1:9d:00:1d:47:6a:e6:8f:37:a7:57:f5:55:61:e6:43:
7c:02:4d:5b:a1:c8:5b:84:66:c3:86:8a:6c:5b:65:ba:0f:11:
c8:2b:c4:56:11:97:b5:ef:c1:1f:9c:6b:4c:80:71:b6:74:15:
cf:d9:f9:09:f7:39:84:a8:95:7d:70:00:a7:f7:da:c0:ce:ec:
6a:9a:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:40:44 2026 by rpki-client