Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 4haKri8UsXNVTX8GxhQqART81gF49eCQATmnmY4PbjI=
Subject key identifier: 68:D7:3E:40:94:3A:79:5C:18:77:2B:27:5E:06:F9:C1:C2:9B:8E:D7
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 01A13DB7C18E889BAE678676ACD49185F80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0D93
Signing time: Thu 15 Oct 2026 04:00:14 +0000
Manifest this update: Thu 15 Oct 2026 04:00:14 +0000
Manifest next update: Fri 16 Oct 2026 04:00:14 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: J6QEPWRzZSV+GB+9IEyQ2f99Kqji2uv3P0JU5o2oWlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c1:8e:88:9b:ae:67:86:76:ac:d4:91:85:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Oct 15 04:00:14 2026 GMT
Not After : Oct 16 04:00:14 2026 GMT
Subject: CN=68d73e40943a795c18772b275e06f9c1c29b8ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:47:6d:10:b0:04:0c:81:a1:13:b3:38:b7:
67:ed:22:90:c2:bd:1e:b7:5f:52:68:b4:5c:a6:0d:
4c:48:ba:76:34:fc:02:90:90:69:58:e4:c2:8d:89:
8d:af:12:7d:06:7d:da:10:17:45:f2:11:f8:2c:36:
ae:e7:8a:4c:57:07:0a:e3:6c:3b:89:5f:42:d7:fb:
19:be:c5:1f:f6:41:d5:eb:cf:22:a6:15:31:23:83:
33:cf:07:26:c8:a2:ef:94:6b:98:79:04:ab:13:22:
16:da:b8:1d:b0:71:10:0c:42:14:88:ef:ec:a9:f2:
eb:40:9f:a1:9d:71:66:51:01:f6:4c:99:dd:4c:e4:
14:68:cb:fc:4a:8a:34:68:37:73:e6:59:93:c4:59:
4e:24:3f:9d:9f:89:8e:97:26:5f:b0:44:09:76:78:
e4:83:8f:30:37:81:03:12:39:ec:85:5e:fb:b0:92:
4c:86:82:4a:57:98:3a:a6:b2:18:5f:8b:93:4e:87:
7d:3d:92:28:71:3d:49:21:8c:1d:86:88:f3:55:59:
46:11:4a:4b:93:e9:38:85:48:37:5f:d6:49:b9:af:
b1:f1:88:6c:46:b8:1f:5f:ec:9c:8e:99:1c:10:bb:
35:05:74:29:3a:b7:e5:dd:68:60:e0:27:08:b2:46:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:3E:40:94:3A:79:5C:18:77:2B:27:5E:06:F9:C1:C2:9B:8E:D7
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:62:ca:f5:8e:28:27:24:17:d9:66:be:c0:5a:b8:51:1a:c3:
f1:26:bb:f3:0f:e5:4e:2d:fd:c5:48:60:0c:48:76:a5:0c:b9:
97:d6:c9:35:f7:9b:e6:a3:ce:cf:fa:e5:13:6c:73:26:ad:e1:
15:97:95:2e:3d:d4:5a:88:59:48:32:b9:c9:05:fc:1d:1f:ef:
64:63:42:bc:fd:24:b5:65:ff:9e:df:4c:db:1f:7b:98:61:91:
00:79:e4:4e:38:8e:dd:46:f5:ef:6a:c8:30:a4:84:8b:71:7c:
d3:40:f9:55:fb:77:7e:3b:e8:0b:46:2a:37:58:68:06:73:10:
c2:01:5e:ac:38:2e:5d:cb:ff:b5:53:db:b2:fa:84:80:7e:2f:
68:f9:1f:da:7b:8f:3f:2b:ae:31:ee:77:0d:a8:c6:0c:e6:4b:
7c:57:b9:f0:d7:08:07:3a:65:80:24:d8:84:79:4e:22:5f:e1:
be:87:25:e5:81:02:55:3f:23:76:54:5d:dc:42:64:37:e9:55:
b8:f7:49:0d:fb:70:a4:b4:f9:0d:a1:41:e4:ce:e4:14:11:d3:
2c:93:24:7d:d7:9f:e9:59:5d:f2:fe:7a:ef:aa:ed:45:d4:f9:
c7:df:13:7f:22:a7:55:88:ed:81:e9:c5:99:5c:79:1b:8e:a6:
da:e4:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:13 2026 by rpki-client