Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 1GxzLPGqvvepGYatxx0Zj4UtyavMfrHJinxMmqxc6sU=
Subject key identifier: 3E:93:6A:56:3E:FA:3D:A3:A2:D7:9D:1E:FE:FE:91:3A:D1:70:87:C3
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 01A001013103074FFCA49841323A1F078C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0CEF
Signing time: Fri 14 Aug 2026 16:00:50 +0000
Manifest this update: Fri 14 Aug 2026 16:00:50 +0000
Manifest next update: Sat 15 Aug 2026 16:00:50 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: QYwzX6L+abt0DH7L7rT+ouFkOWu5by0YEyyHWxaeCwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:31:03:07:4f:fc:a4:98:41:32:3a:1f:07:8c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Aug 14 16:00:50 2026 GMT
Not After : Aug 15 16:00:50 2026 GMT
Subject: CN=3e936a563efa3da3a2d79d1efefe913ad17087c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:b7:a2:5b:a1:ae:e3:d2:9e:2b:66:85:0e:
44:5d:a5:05:5f:cc:f2:30:eb:70:35:8d:4a:fb:e3:
91:90:28:32:a0:88:ef:56:f9:c4:86:fa:06:a9:ed:
8b:ae:8e:b4:cf:a0:b9:b8:14:d8:92:31:d5:62:d7:
e2:a2:4b:a2:c3:5f:e8:13:4b:a7:eb:7e:00:5a:9a:
04:99:70:99:f4:ce:46:3f:e3:7e:47:21:8e:2a:74:
a9:e8:fc:0d:26:7c:ef:a1:67:82:41:22:23:11:b5:
7a:e8:25:4a:67:82:3b:b1:10:20:80:77:c6:0f:df:
c4:98:e0:b8:e6:00:09:71:56:11:eb:5e:5c:aa:e6:
f6:b0:58:ac:26:fe:df:49:c4:72:78:0e:35:c5:c9:
8e:f0:e5:c0:b6:ac:9f:ad:9b:39:29:37:7e:23:f4:
a6:e6:c1:fc:8c:db:d9:12:07:2e:bb:62:e8:af:34:
e1:b0:91:a0:2a:4c:6a:24:aa:86:c3:dd:2b:78:d3:
b8:69:5b:c0:79:b9:4b:44:24:ad:e9:a1:6c:2f:19:
4d:20:97:69:54:9b:07:49:d8:17:19:c9:22:f4:3c:
4e:1a:1d:63:85:5f:47:60:15:06:0f:0f:26:49:6e:
4b:d6:6d:c8:d8:a8:d5:f2:d6:db:96:cf:cd:de:a9:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:93:6A:56:3E:FA:3D:A3:A2:D7:9D:1E:FE:FE:91:3A:D1:70:87:C3
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4b:da:11:ba:c9:16:cb:dd:2e:47:73:f9:49:c8:ea:19:48:
83:69:65:02:24:5b:6d:09:a2:11:94:69:6d:9c:64:93:af:eb:
b0:23:dc:2a:7a:b5:db:db:23:1f:c3:3d:39:e4:43:6d:82:bd:
d3:8c:0c:7d:4c:af:e7:a1:59:5a:23:07:ae:d4:36:f0:97:d3:
21:89:30:c8:6e:d6:91:de:65:d2:b3:6d:b1:87:60:6b:5c:72:
59:48:71:14:b9:d8:e0:d9:2a:01:79:65:b4:d8:99:c6:c5:12:
22:47:55:f9:dc:30:2c:3e:7d:63:1d:66:e4:5f:83:39:a9:b7:
0a:da:a1:76:4b:b6:ca:92:79:b7:bf:66:ac:50:6a:12:a9:56:
d3:31:f9:98:5c:40:40:04:b8:06:d0:7b:87:24:87:98:ec:b2:
d0:42:c7:f4:43:29:1c:8e:25:be:7a:77:1c:51:35:8e:88:d8:
b5:ea:91:51:c4:7c:4c:b0:62:58:08:bf:a6:af:47:b3:42:9a:
15:2d:82:ad:f7:44:78:a5:0a:83:9c:06:3b:8e:27:c0:d9:4a:
90:37:06:94:0a:a7:ff:a5:16:bf:75:22:12:32:3b:2a:90:f9:
19:99:f6:fd:e5:72:92:1e:48:c1:25:9d:8c:fc:d8:e8:ea:80:
1b:0c:29:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABATEDB0/8pJhBMjofB4yaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjE2NjM5YmE0ODdlZjk2M2M1NmNjYjMyNmYyNTA4ZDFh
ODNlZmQwHhcNMjYwODE0MTYwMDUwWhcNMjYwODE1MTYwMDUwWjAzMTEwLwYDVQQD
EygzZTkzNmE1NjNlZmEzZGEzYTJkNzlkMWVmZWZlOTEzYWQxNzA4N2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGS3oluhruPSnitmhQ5EXaUFX8zy
MOtwNY1K++ORkCgyoIjvVvnEhvoGqe2Lro60z6C5uBTYkjHVYtfiokuiw1/oE0un
634AWpoEmXCZ9M5GP+N+RyGOKnSp6PwNJnzvoWeCQSIjEbV66CVKZ4I7sRAggHfG
D9/EmOC45gAJcVYR615cqub2sFisJv7fScRyeA41xcmO8OXAtqyfrZs5KTd+I/Sm
5sH8jNvZEgcuu2LorzThsJGgKkxqJKqGw90reNO4aVvAeblLRCSt6aFsLxlNIJdp
VJsHSdgXGcki9DxOGh1jhV9HYBUGDw8mSW5L1m3I2KjV8tbbls/N3qmUlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6TalY++j2jotedHv7+kTrRcIfDMB8GA1UdIwQY
MBaAFArxZjm6SH75Y8VsyzJvJQjRqD79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1Mjkt
M2M2Mzc2NTE1MDdkLzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1MjktM2M2Mzc2NTE1MDdk
LzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEvaEbrJ
FsvdLkdz+UnI6hlIg2llAiRbbQmiEZRpbZxkk6/rsCPcKnq129sjH8M9OeRDbYK9
04wMfUyv56FZWiMHrtQ28JfTIYkwyG7Wkd5l0rNtsYdga1xyWUhxFLnY4NkqAXll
tNiZxsUSIkdV+dwwLD59Yx1m5F+DOam3Ctqhdku2ypJ5t79mrFBqEqlW0zH5mFxA
QAS4BtB7hySHmOyy0ELH9EMpHI4lvnp3HFE1jojYteqRUcR8TLBiWAi/pq9Hs0Ka
FS2CrfdEeKUKg5wGO44nwNlKkDcGlAqn/6UWv3UiEjI7KpD5GZn2/eVykh5IwSWd
jPzY6OqAGwwpvQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:25 2026 by rpki-client