Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: MP+LLvxJx3xIXECb4iPG4x1rd3H2u1EHBOom/LDEkd4=
Subject key identifier: 4E:F4:72:16:2A:FC:1F:DC:23:96:DB:78:94:19:26:5F:16:4D:7F:88
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019E29945B62442137472A2CC1E746A2570B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 189E
Signing time: Fri 15 May 2026 03:00:48 +0000
Manifest this update: Fri 15 May 2026 03:00:48 +0000
Manifest next update: Sat 16 May 2026 03:00:48 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: Xvkmejwc8VkLT/c44FpLkoyhZVKj4Fa2zYL0r9V7u+g=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:5b:62:44:21:37:47:2a:2c:c1:e7:46:a2:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: May 15 03:00:48 2026 GMT
Not After : May 16 03:00:48 2026 GMT
Subject: CN=4ef472162afc1fdc2396db789419265f164d7f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:aa:28:d7:f0:47:bc:2e:21:3a:8a:57:b3:
a2:e1:2f:60:ce:71:80:aa:75:a5:c2:3b:f9:93:d2:
46:85:fb:9b:6e:85:8a:0a:62:49:e6:e8:1b:fa:1f:
5d:84:10:b4:f2:86:e4:6d:ce:48:49:80:8b:fd:c0:
9b:29:8e:b3:5d:32:44:d6:92:f5:f6:b6:d3:d6:ca:
e1:11:07:61:55:da:7a:71:b2:3f:d0:41:9f:82:a5:
7d:e5:30:20:77:c8:66:5e:e2:1a:e4:8c:19:6c:21:
a5:b0:31:25:9e:37:d0:31:3b:bd:98:9a:3d:b9:6d:
48:7f:08:20:d4:8e:01:c2:7c:4c:d5:39:d3:a0:0d:
23:05:d7:d2:22:e0:85:d5:2b:f4:4a:5e:b6:84:8e:
5c:33:7d:7e:fb:ac:5a:c4:99:ae:f5:80:4a:31:be:
50:9b:c1:46:1e:ef:bd:ea:38:b6:81:c8:5b:17:42:
6a:a8:77:67:52:78:53:bb:4f:0e:c5:73:37:5d:32:
03:2a:80:f7:29:7c:69:b0:44:62:bd:92:c8:2f:25:
fe:9e:d3:6b:19:21:9a:b4:c8:03:2e:8d:2d:77:e4:
b3:ee:fb:a9:f5:08:99:98:ab:28:f5:b6:16:ba:f3:
83:52:01:e9:73:d0:ba:a1:c6:85:b7:3b:67:04:db:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:72:16:2A:FC:1F:DC:23:96:DB:78:94:19:26:5F:16:4D:7F:88
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ca:73:57:17:94:2c:7b:31:75:42:a9:55:fc:39:1f:c1:a8:
e6:de:5d:79:77:aa:42:f7:8c:a1:09:02:09:35:24:22:10:9c:
06:6d:b6:a9:7b:c3:66:d3:06:9a:e1:2b:76:fa:0b:7c:13:0b:
4b:43:34:70:1a:f4:e1:54:88:8c:62:35:c3:c4:9c:df:3d:e0:
5c:05:c2:f5:87:b8:5c:82:73:3d:e8:b0:58:eb:33:6e:3b:97:
bc:2e:c7:f7:37:8a:65:0d:4c:8a:79:cc:c7:e8:d3:10:06:41:
1a:58:54:ac:45:b3:bb:c1:e6:01:fb:8b:5a:ab:0b:73:b2:85:
4d:d8:9f:62:0e:0b:84:ae:51:32:40:0c:63:13:12:ba:7a:2d:
ea:e2:36:49:5c:3e:75:c3:b6:d1:fb:7e:68:db:41:98:23:e6:
12:8a:1c:c4:a7:9a:6c:d8:18:fd:b7:38:34:e0:a8:fa:a0:3d:
c7:cd:cf:ff:c7:ce:a0:9b:bf:f0:92:9e:03:ae:04:6c:c4:e8:
d9:3f:23:a4:15:35:91:42:65:99:9b:29:0f:f7:29:60:ee:4c:
49:9e:18:ae:b8:ff:28:da:a4:0b:92:c4:9a:cf:3c:31:bd:ed:
b6:4b:d0:ad:15:5a:7f:ee:83:c4:96:b0:98:b4:5e:20:39:84:
18:94:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:15 2026 by rpki-client