Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: brL37FvSjY1QWX0akpj2cRH4cP0J+Xk9fmmm9Li1GfU=
Subject key identifier: 57:C4:83:37:D6:C7:0B:84:AE:89:F3:90:70:4B:2B:4E:85:9E:22:02
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019E30728288653774C5DD2D734DA41E50AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 05DC
Signing time: Sat 16 May 2026 11:01:11 +0000
Manifest this update: Sat 16 May 2026 11:01:11 +0000
Manifest next update: Sun 17 May 2026 11:01:11 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: YdXTn0kGgLbaVljoeGOYsoW7vpmySoFTvMWpc3f5oVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:82:88:65:37:74:c5:dd:2d:73:4d:a4:1e:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: May 16 11:01:11 2026 GMT
Not After : May 17 11:01:11 2026 GMT
Subject: CN=57c48337d6c70b84ae89f390704b2b4e859e2202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:40:0a:8e:28:29:f7:49:cf:30:18:7b:22:
73:88:ab:95:c0:51:2b:66:05:8e:f9:4a:52:bf:19:
0c:35:50:ce:0b:fb:ff:6e:f2:3a:d2:3e:cc:c3:b3:
13:c5:10:84:ab:d7:6d:3b:f2:17:b6:e3:ba:fa:a6:
5b:15:67:94:8c:27:57:a2:e3:42:b6:17:17:64:95:
26:cb:5e:20:22:cf:a1:8f:14:5e:80:2c:99:04:64:
14:09:b7:74:29:b9:73:e1:f7:16:50:2b:e1:be:bc:
84:a3:3f:09:9d:6b:36:5d:f8:55:eb:21:2c:4c:11:
b9:4d:14:ca:87:44:11:42:39:65:10:1f:d0:bd:c6:
76:3b:dd:8a:ad:06:b0:11:d9:12:b0:e4:cc:5a:be:
e2:fb:db:fb:8d:a4:1b:53:f3:3b:f8:73:54:11:90:
e0:de:fd:e0:a7:8b:27:6c:ef:92:f4:e9:41:49:14:
ef:90:13:2c:8b:4f:1f:93:b2:1b:82:3c:78:ea:e8:
a3:f8:f3:f3:9f:d2:7a:5c:dd:6d:5e:51:f5:97:e0:
d9:93:52:34:12:1a:b7:e1:4f:cd:8b:c7:6e:1a:b0:
36:f8:12:3d:59:f7:14:e5:a1:ec:d3:33:74:38:0d:
ff:06:28:ff:1e:fe:1f:d3:5c:4f:b5:66:f1:9e:3a:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C4:83:37:D6:C7:0B:84:AE:89:F3:90:70:4B:2B:4E:85:9E:22:02
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:b0:59:be:36:0c:68:fc:7f:68:9d:05:7e:0b:18:e5:05:
76:62:7b:f6:be:78:88:5f:d8:37:b4:be:f9:02:29:dd:db:57:
99:b3:87:f9:60:57:cf:bb:4d:81:2d:f2:b7:12:a8:00:e2:0c:
8c:83:2e:97:eb:9b:c2:40:2a:e8:c1:dd:f9:45:ee:5a:2a:20:
1f:97:8e:26:2f:06:fc:11:f6:5b:5e:33:7f:a9:0b:a7:dc:96:
46:60:06:22:8a:46:de:33:3e:db:c8:d5:30:cb:f5:41:e7:d9:
56:d5:29:27:24:37:a1:8c:63:de:64:5d:4b:bc:4d:e4:52:b5:
eb:ac:59:f0:89:4b:7e:d6:b9:dd:b9:a8:0d:e9:57:ce:f8:0f:
9e:74:b8:9c:be:44:01:4b:24:a4:48:10:2d:14:0e:19:4f:8f:
f2:d5:dd:df:6d:ac:ba:58:57:27:b2:97:3f:87:76:bc:53:6e:
be:7d:e7:5a:93:46:1d:76:56:ca:3d:63:9d:6e:8a:3c:31:e3:
23:9c:6b:9d:82:b8:32:19:c1:33:7c:32:bd:67:9f:b6:9b:25:
3a:a5:b2:5c:76:7f:c4:f9:77:16:05:0a:57:54:75:4f:b7:b3:
26:87:fb:60:26:5f:20:04:64:e6:c4:12:b8:d9:28:7f:0d:b5:
42:ee:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:54 2026 by rpki-client