Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: Efxbfdsy6iKKO5tjwyrDBLWgC1ZuJ2tAVyR8ZGqn+yY=
Subject key identifier: 0F:CE:17:77:37:A5:F8:15:4F:AF:79:60:90:D8:7C:91:31:8B:ED:9A
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019D386622ED5BCC010A00646925EAFF266E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0B7E
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: kWIj4rNqfVJ3GKi7p5ViOzTCWGmfqInCGka8sBK4y98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:22:ed:5b:cc:01:0a:00:64:69:25:ea:ff:26:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=0fce177737a5f8154faf796090d87c91318bed9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:f4:ac:a3:2b:88:c7:d1:a2:0b:30:36:15:
89:0e:17:3b:01:b1:a8:81:4a:c2:14:57:2e:e0:c7:
89:7f:61:0e:e7:a7:ef:fa:43:24:f6:96:ce:ed:48:
43:b5:5f:f1:71:5c:e3:c8:47:ac:28:2a:65:7f:65:
43:14:f9:f1:68:45:ad:5f:1c:1d:25:21:09:8a:96:
c6:a3:66:c7:6f:51:ce:2b:82:32:71:97:8b:9c:b6:
2d:a2:bb:a0:fd:a9:7d:ae:4e:2e:75:4f:e7:78:43:
00:a5:b3:26:32:dc:0a:b6:ef:f8:f7:a0:c7:65:b1:
fb:20:8d:d0:5f:1c:34:c4:34:fb:81:9e:e9:ca:62:
15:b9:64:59:35:5b:12:9f:a2:3f:3c:74:7c:6f:55:
c0:ee:2d:17:c9:41:cf:4f:ad:4a:f6:7e:43:6c:1e:
13:33:71:b5:99:06:ee:45:f2:cb:0d:98:41:d5:03:
c8:7f:c1:00:7d:92:9e:ce:56:9f:fe:37:e8:fc:49:
0e:ea:25:30:61:a0:10:98:3d:bb:01:bd:f8:cb:a1:
de:47:34:69:30:c5:f5:d7:ad:0b:6f:03:db:f6:cd:
a3:72:5f:f8:a1:04:a7:b8:1f:ab:ba:34:5d:67:94:
8d:67:de:34:cd:63:f5:da:bf:6a:27:67:fd:4e:30:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:17:77:37:A5:F8:15:4F:AF:79:60:90:D8:7C:91:31:8B:ED:9A
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:30:56:e8:84:49:f6:53:99:50:9d:d2:b1:52:85:ff:59:3a:
42:43:5c:77:2c:96:da:00:75:d6:11:f6:15:02:1e:8e:22:af:
a3:65:ef:bb:fb:a8:6d:1d:a5:78:a4:a0:75:b8:29:01:fe:90:
14:1e:4f:09:2d:98:12:43:15:66:3f:9a:ef:ec:35:04:0a:d4:
d7:57:38:fc:e9:f7:53:83:5f:34:13:d4:e5:85:20:ae:0c:b3:
81:7c:8b:9a:3a:a7:3b:b2:b3:08:47:39:0e:fe:92:38:d7:82:
ea:83:48:9d:e3:58:72:90:2d:b2:75:69:01:78:cf:f6:1f:70:
4d:c2:ac:4c:10:bd:eb:90:23:6e:d3:98:cb:26:eb:bd:db:d0:
70:63:d9:57:f8:c5:21:64:31:0c:d3:c2:81:b6:9d:32:d4:e1:
b5:59:67:cc:02:d2:84:7a:c3:92:26:be:a9:9d:ba:e4:a4:61:
30:e6:44:17:49:c4:e0:b2:61:c3:ec:07:9d:66:30:95:81:e7:
56:37:ac:dc:45:66:63:e5:b7:b3:9b:94:ee:6d:11:8d:27:7d:
8b:c2:e6:77:ab:0d:41:4f:33:34:90:43:75:d7:e5:9e:e7:fc:
20:b5:2d:48:7d:c3:db:a7:e7:83:3c:f4:b6:47:c1:c2:7e:b0:
63:d3:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:59 2026 by rpki-client