Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: 3k14iwn/+O1CU3KW1jE+WQAoF4DoeVd8v0gnsbPEILI=
Subject key identifier: F8:E0:88:3B:60:27:A6:C9:2F:CE:DE:B4:21:7F:97:E8:77:74:A4:0A
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019F11532CCC88E3FD780FAE67E377C3427E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1916
Signing time: Mon 29 Jun 2026 03:01:31 +0000
Manifest this update: Mon 29 Jun 2026 03:01:31 +0000
Manifest next update: Tue 30 Jun 2026 03:01:31 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: MZ4mspdfjQHwlEuh9bWknGK8qQ7eYbFBDYfuK2//ibU=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:2c:cc:88:e3:fd:78:0f:ae:67:e3:77:c3:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Jun 29 03:01:31 2026 GMT
Not After : Jun 30 03:01:31 2026 GMT
Subject: CN=f8e0883b6027a6c92fcedeb4217f97e87774a40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:46:64:39:59:56:da:92:a9:1d:8d:7c:23:
d2:8b:18:2b:49:59:9d:08:fb:64:05:ee:ce:47:c1:
21:ce:e6:02:b8:9f:64:46:4e:2d:b5:cc:4a:e3:ef:
79:c4:f2:5f:f7:d7:d3:7b:8f:28:d7:e1:0d:8d:d0:
cc:de:e3:f7:1d:f3:ab:72:04:09:ce:d3:dd:d8:97:
f5:1c:11:ae:ab:0c:76:dc:df:d2:e1:c4:57:f1:2f:
ab:5e:36:f5:44:10:ce:6d:af:f5:9a:db:8c:0f:dc:
36:88:1c:5f:fb:42:29:79:bd:68:e3:83:b7:96:3e:
18:37:b9:88:4b:0b:b8:4b:60:b6:68:7a:af:cf:d3:
83:02:7a:0e:3f:5a:45:0a:52:43:da:67:3a:e1:37:
4d:a1:01:fa:9d:72:04:70:d5:49:3c:13:e4:85:e0:
1b:9b:0d:96:d6:63:82:db:e6:c3:89:92:34:02:33:
c2:c3:8f:d7:90:b5:51:df:3e:3d:8f:6d:86:e9:bb:
dd:a3:52:ab:64:93:97:45:8e:91:0a:b3:26:9d:37:
3e:1d:c5:5f:50:38:6e:62:ab:dd:cf:f9:be:ff:32:
fe:24:ca:2a:47:84:5e:22:09:c3:a0:8a:2d:80:96:
6d:f6:99:56:18:c4:b9:40:62:50:44:e2:2d:36:25:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E0:88:3B:60:27:A6:C9:2F:CE:DE:B4:21:7F:97:E8:77:74:A4:0A
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:f9:99:8f:52:3a:90:3c:a8:11:aa:3e:55:fc:c9:0e:98:
5a:63:eb:a8:52:58:2b:40:41:a7:76:77:f7:0c:37:eb:bd:80:
ce:ed:e5:7a:45:83:43:a9:d1:55:5e:57:38:82:61:62:48:21:
95:6d:a4:ad:4d:3e:45:d6:55:78:bf:35:a7:ae:98:3c:48:dc:
70:fc:d2:1b:8b:b0:17:b7:34:21:a9:4f:21:87:3c:5d:b1:ab:
15:ea:82:b8:82:5e:53:09:b5:a3:83:5d:9e:67:81:a4:99:a9:
8e:57:bd:81:54:da:61:3a:e4:34:9d:80:28:b9:97:6a:ba:03:
ae:dc:e0:d3:19:7b:37:08:30:78:f1:c4:de:24:22:b5:95:f6:
d6:42:f7:e3:da:f6:c3:90:09:d2:d0:5d:bb:f3:f9:45:b9:d6:
90:8e:1e:79:50:38:ec:f0:d2:a2:43:41:30:03:33:0e:41:ac:
c8:14:1c:e0:93:64:9f:5b:c6:40:94:0b:00:19:a0:73:bd:7c:
68:d2:17:2d:e3:04:db:fe:b5:0b:b5:ed:ef:2f:73:d6:ed:58:
20:5b:a0:cb:4a:0d:5f:81:d1:31:66:52:b6:41:90:97:26:d4:
13:f4:da:60:7b:b3:ba:8d:91:73:3f:94:bf:56:f7:07:52:40:
67:90:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:14 2026 by rpki-client