Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: nM+qpwnW/s6HXCHGppJ7dusT7CIoMyQxnXuJAdb3WZg=
Subject key identifier: 5B:DC:13:ED:1E:FC:2A:96:CB:06:62:36:3E:FB:CA:2B:52:C4:DE:F3
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01A001DD10B131F24FC74A9B6FD00AFFCEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 06CD
Signing time: Fri 14 Aug 2026 20:00:59 +0000
Manifest this update: Fri 14 Aug 2026 20:00:59 +0000
Manifest next update: Sat 15 Aug 2026 20:00:59 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: R3Lktd4ig3Hle2QoIr5HTRUiTG0JvpxRwe+UjeoT15g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:10:b1:31:f2:4f:c7:4a:9b:6f:d0:0a:ff:ce:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Aug 14 20:00:59 2026 GMT
Not After : Aug 15 20:00:59 2026 GMT
Subject: CN=5bdc13ed1efc2a96cb0662363efbca2b52c4def3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:db:8a:8e:92:24:2d:25:db:2a:f6:16:ac:
47:92:21:65:1c:06:e5:0a:de:84:09:86:70:ff:92:
d2:31:17:66:a7:f7:a2:c1:ce:9c:85:61:4a:55:a2:
82:49:71:18:4c:82:78:b7:11:f6:99:e5:87:bc:05:
19:05:dc:cd:b6:c7:a7:c7:17:4a:4e:1f:92:9a:0a:
0c:f2:64:f0:fe:82:87:c2:55:d6:9c:e6:4f:0c:68:
cb:c1:91:e3:fc:c4:0e:6b:35:17:b9:3f:0a:89:e9:
c8:2e:c0:e2:05:7b:88:17:24:a6:8b:17:76:3c:44:
41:36:11:dc:20:42:73:02:0a:63:8a:80:c6:49:65:
1c:40:19:0e:aa:26:22:ec:1b:de:82:00:aa:19:9e:
d4:d1:41:86:2a:67:f3:7f:b2:1b:0f:f1:c4:b2:e6:
bf:67:7d:8c:7d:78:e4:a2:4b:6c:fb:c3:1c:4f:bd:
d2:7f:19:3b:7d:21:7a:2b:94:e7:75:92:91:05:f1:
47:c9:b5:4d:15:af:c0:ea:34:64:27:e1:13:d4:48:
c6:9f:a5:59:44:20:97:38:e4:96:27:85:bf:7d:90:
1d:45:ba:57:ac:4d:dd:1d:a8:ce:04:11:62:ed:73:
ad:7d:8f:ab:7f:1b:60:a8:8f:95:ee:cc:cd:7b:be:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:13:ED:1E:FC:2A:96:CB:06:62:36:3E:FB:CA:2B:52:C4:DE:F3
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2a:87:0b:7e:ee:e9:1e:9a:84:2b:39:d5:6c:f4:4d:96:56:
11:8c:e7:8b:42:f9:22:df:42:2c:60:ba:e2:60:3b:20:79:3f:
6f:a0:f2:1e:ae:20:e1:7f:8e:ec:99:11:94:f6:72:e5:f9:5c:
c4:f4:da:6f:da:6e:8b:cf:c5:cd:ce:dc:e9:db:b2:14:21:dc:
45:7b:90:e1:5e:6f:e1:55:a7:fd:64:5a:ef:64:65:34:12:59:
fc:79:28:dc:35:1a:52:1f:63:ca:0e:05:2f:f7:87:a6:18:c7:
75:05:91:69:26:d6:22:b4:c1:fd:f1:77:ae:ae:df:fd:c6:1a:
78:44:ff:b6:1c:87:0c:4a:0e:ec:8d:f5:d9:c6:92:0a:e9:ae:
38:d3:84:89:98:16:39:0b:24:83:fb:c8:4a:d5:63:d7:ca:c1:
33:a4:bc:49:6e:7d:8a:48:b0:83:ad:96:e9:70:d2:33:46:9c:
d7:d0:3c:b5:d3:31:18:e2:34:c4:a8:fd:ea:45:44:a1:d8:98:
f7:97:1e:c3:cb:6c:7b:66:58:a1:35:ac:4e:22:f4:a2:2e:de:
01:eb:ef:69:a6:5c:07:fe:d8:8f:6e:b5:77:67:62:df:21:15:
3e:0f:69:61:5d:8b:e3:1e:77:e1:a1:fe:b0:2d:e2:fc:2e:c0:
e8:6a:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:44 2026 by rpki-client