Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
File: cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft (raw, json)
Hash identifier: uPobxaSithtV5127EswXMhDYRdYboSQLELf1JldHWWE=
Subject key identifier: B5:A4:6C:CD:CC:D3:2E:D6:34:C7:20:B4:44:6B:5C:E9:4C:9D:97:FB
Authority key identifier: 72:F6:71:BF:E6:48:C8:BD:9C:40:49:81:39:A7:65:FB:72:06:9A:82
Certificate issuer: /CN=72f671bfe648c8bd9c40498139a765fb72069a82
Certificate serial: 01A17995E129C151AACBA0440873B13225EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
Manifest number: 0100
Signing time: Mon 26 Oct 2026 19:00:27 +0000
Manifest this update: Mon 26 Oct 2026 19:00:27 +0000
Manifest next update: Tue 27 Oct 2026 19:00:27 +0000
Files and hashes: 1: cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl (hash: ihtmc2CKkcKpEvP7x+4b0XVJD768xOKWX6hE2JijmRI=)
2: exxpw5cx3XOG7qb0UXxN_-8TTi0.roa (hash: HBHB+elJSDeSFqlZLJRXOXB3AMZZ+OnUUwKQ8K/55F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:e1:29:c1:51:aa:cb:a0:44:08:73:b1:32:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f671bfe648c8bd9c40498139a765fb72069a82
Validity
Not Before: Oct 26 19:00:27 2026 GMT
Not After : Oct 27 19:00:27 2026 GMT
Subject: CN=b5a46ccdccd32ed634c720b4446b5ce94c9d97fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:e9:78:92:96:89:bc:22:c9:b7:13:ce:f8:
83:fc:a8:6a:fe:64:b5:f0:ad:28:a8:8f:e6:2b:b3:
c6:47:88:84:03:f4:7b:88:09:36:79:72:f5:f6:46:
f1:b8:94:80:b1:29:7d:1d:7c:11:99:1c:c0:7c:47:
2b:eb:4a:6a:df:5c:95:b0:98:ee:f7:94:c3:63:85:
5b:27:65:0e:44:bb:48:04:97:b3:4b:78:43:1a:14:
a2:89:cc:16:a5:8b:51:40:1a:01:d6:3d:44:b3:ea:
28:b2:1e:94:d1:8b:d6:f0:73:13:49:d7:cf:b1:b9:
07:1b:1b:ff:65:53:7e:2d:8e:40:d1:7b:2f:d0:bd:
da:c3:e4:da:91:19:2a:46:a8:c5:b2:37:ff:8e:e1:
32:2d:31:e0:27:ff:74:49:ed:ef:44:f6:2b:b9:c4:
66:57:08:3d:e8:9f:64:ac:f3:06:90:e6:b1:43:1e:
94:27:62:a6:1c:76:29:38:05:4e:61:6b:6d:65:fc:
8e:d8:1f:fb:70:34:2e:e0:ff:68:1b:09:35:ca:20:
73:31:b1:ae:24:84:dc:82:5e:af:73:09:5e:83:2a:
18:e0:3d:a8:6c:ea:fd:59:72:f9:41:ec:68:7a:5d:
ba:04:fa:2b:37:fc:ea:28:69:06:e9:c7:ef:46:c7:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:6C:CD:CC:D3:2E:D6:34:C7:20:B4:44:6B:5C:E9:4C:9D:97:FB
X509v3 Authority Key Identifier:
keyid:72:F6:71:BF:E6:48:C8:BD:9C:40:49:81:39:A7:65:FB:72:06:9A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvZxv-ZIyL2cQEmBOadl-3IGmoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5cccd3-afb3-4358-91a9-14496057e05d/1/cvZxv-ZIyL2cQEmBOadl-3IGmoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:81:87:b4:4c:b6:82:4b:e4:77:fb:8f:5c:c7:d3:0c:43:26:
fd:7e:52:ea:b0:de:d5:99:d9:ac:db:d4:1d:26:1e:c4:24:ee:
ee:9a:1c:61:5f:a0:38:d5:be:7d:03:00:e7:6c:34:98:04:4a:
ac:73:e6:b3:31:c8:b0:c5:04:0f:ed:c7:68:d3:26:f1:35:1d:
48:70:eb:58:4b:06:86:5e:a0:85:c8:89:2a:55:cc:6b:8b:f6:
98:b5:e0:e1:14:12:0a:56:87:0f:29:3d:82:da:05:52:55:68:
43:ac:11:85:a4:13:8d:84:af:3c:b8:bb:44:3b:55:fe:8e:6c:
f0:8f:c9:b5:3f:2f:21:b1:10:86:38:cf:4d:a2:75:b6:77:3d:
08:7e:b7:35:84:1d:b1:4a:f4:f4:1d:8f:d3:1a:cc:9a:77:cc:
51:3d:80:e4:64:6a:af:b7:92:bc:86:33:86:07:79:19:11:e5:
2f:6b:25:9a:b1:b0:b0:d4:f8:65:0f:95:6e:d3:f1:f0:e5:da:
88:0e:29:62:8f:94:d0:1f:1a:f6:3f:42:65:58:5a:e4:14:93:
41:e1:94:55:1d:ac:45:92:6a:b9:a1:69:a6:9f:9f:0d:0e:04:
74:74:a8:84:93:35:35:b3:93:e1:56:ae:e3:06:45:19:31:44:
2e:7b:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:43 2026 by rpki-client