Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: neXrpPzTkHlqRQlxACy2/0mHXYMETps3VkJbjUhO2GY=
Subject key identifier: AC:B3:20:B4:A7:64:D9:01:FF:EE:CC:64:BD:EB:6A:4A:EC:89:0F:D0
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019D363FE537B46769C6BA600E71E8CFDF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1820
Signing time: Sat 28 Mar 2026 21:00:50 +0000
Manifest this update: Sat 28 Mar 2026 21:00:50 +0000
Manifest next update: Sun 29 Mar 2026 21:00:50 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: 7SpVn5xuLdiCzH9DH7nEa7plgtw/gqO8O/vrroJoFe4=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:3f:e5:37:b4:67:69:c6:ba:60:0e:71:e8:cf:df:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Mar 28 21:00:50 2026 GMT
Not After : Mar 29 21:00:50 2026 GMT
Subject: CN=acb320b4a764d901ffeecc64bdeb6a4aec890fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:0c:bf:a6:26:8c:b4:79:64:46:0f:4a:a3:
28:92:af:cf:0b:d0:5f:d0:22:11:33:01:ee:b4:5a:
66:42:4e:11:06:29:38:74:40:17:f4:10:ad:e5:97:
1a:8c:dc:ef:58:16:73:1b:7c:4b:3f:b0:29:22:08:
59:48:eb:e7:d4:34:68:4f:9b:dc:2f:8f:c0:ee:7d:
28:2c:03:2e:1b:2b:da:88:d2:a9:d7:a7:95:c7:6b:
23:cd:38:eb:ce:f4:e7:97:83:0f:0b:b0:48:d0:0d:
4f:5d:39:ed:e2:7d:86:a2:ec:36:f9:6a:8c:c9:88:
b9:c7:d9:c8:8d:fb:99:da:b3:b8:85:0f:fa:34:d9:
26:1f:54:f4:5a:80:53:9b:07:11:f8:01:bc:fc:e0:
fe:30:75:50:c4:6d:be:56:2e:3a:e0:87:21:eb:2c:
f9:21:32:75:a3:47:25:2e:f0:dc:39:a7:3b:5f:99:
d5:7a:da:81:01:04:ea:37:ae:d5:29:56:b1:0c:83:
c1:02:56:97:b1:d2:6c:c9:a0:83:b9:05:e8:36:35:
74:81:27:74:6b:7e:48:bc:d3:9e:e6:7f:bb:63:1a:
c7:5a:02:f1:28:42:a2:06:1f:d9:bf:e6:04:03:ba:
c9:3b:61:0f:36:5a:f9:33:65:a0:cc:e6:8c:db:cb:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B3:20:B4:A7:64:D9:01:FF:EE:CC:64:BD:EB:6A:4A:EC:89:0F:D0
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:cd:fd:7e:c7:1a:0f:2a:38:07:7f:a7:fd:47:96:2e:87:
6a:e1:9e:f4:8e:11:8c:b4:ac:77:65:d2:bb:03:dc:87:d1:95:
2e:78:6e:f8:73:8d:61:99:71:a1:61:83:a2:35:9d:a4:40:e6:
9a:db:aa:01:a6:46:a1:96:14:ba:18:a8:05:1c:88:b7:09:bb:
b2:5e:64:21:32:bf:36:9e:e2:99:7a:d7:e8:e0:fe:92:6d:48:
2b:61:8d:ba:82:6b:b2:09:14:09:b1:2a:4b:cc:24:5e:35:7c:
77:7e:ec:42:e5:ac:11:5b:4f:c5:94:62:90:da:d8:e3:a4:e3:
2d:46:61:a6:79:fa:7e:99:37:15:19:d2:88:fd:5b:e3:c9:aa:
27:ef:c1:28:93:d1:ac:06:04:99:dc:72:38:b6:77:6c:93:44:
91:89:d3:30:e0:2e:61:6e:ef:98:fc:b0:62:23:8a:1f:1a:0d:
2b:40:b0:7c:6d:ec:a8:4b:f8:de:70:1f:11:c2:2d:83:b3:8e:
f3:5e:0a:e5:95:e9:ac:02:63:ee:f0:28:54:81:2c:96:65:98:
cf:c8:b5:be:1b:a7:40:e3:49:1e:26:e2:05:af:77:85:21:41:
de:44:53:6b:db:87:60:d7:44:19:f2:f6:89:17:43:29:a1:f6:
cb:8e:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:15:27 2026 by rpki-client