Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: fmA+TZZndatFniGukWv4r6mmyxB5/Jt4/6PDzBzGEQE=
Subject key identifier: 9B:43:8C:1E:B0:B4:81:B8:6E:79:43:10:E0:9F:47:81:B7:1D:95:5B
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019D992B86DD2A769F08E78EB247A86A0DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 02:00:59 +0000
Manifest this update: Fri 17 Apr 2026 02:00:59 +0000
Manifest next update: Sat 18 Apr 2026 02:00:59 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: TUUrqFkw71SBbvSm+Vs228yAAW6wluV6dQ2tSt2l2Y8=)
2: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=)
3: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:86:dd:2a:76:9f:08:e7:8e:b2:47:a8:6a:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Apr 17 02:00:59 2026 GMT
Not After : Apr 18 02:00:59 2026 GMT
Subject: CN=9b438c1eb0b481b86e794310e09f4781b71d955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:48:7d:76:8d:8b:3e:a2:02:65:22:76:23:
99:ab:82:e4:92:e3:79:d3:b6:ae:18:c8:62:ce:77:
73:88:af:6d:1b:2a:77:38:ae:09:64:ad:46:20:b8:
ab:dc:75:50:5c:be:6d:f4:73:b1:ce:85:52:fd:88:
8c:b0:a7:8b:53:6f:0c:1d:99:26:0c:08:32:86:8a:
68:b2:b0:7b:7c:46:53:5d:32:3e:0b:95:b6:f0:8b:
26:e0:cb:13:d5:f9:c3:61:67:22:0c:e2:86:e4:02:
e3:78:a8:0c:13:86:e9:db:fe:06:19:e0:f2:61:50:
5c:ff:58:b8:c1:d4:a0:91:b1:9f:09:55:af:51:7c:
ff:c6:30:d3:ee:35:8a:99:08:76:2f:3e:98:af:aa:
92:39:c1:67:d3:fd:35:51:3f:fe:bc:71:7d:fe:1e:
e0:3a:9e:76:7d:e0:f2:61:5a:0a:a7:52:87:27:86:
1f:72:f0:b0:d3:36:ce:cc:39:cc:dc:34:4a:28:10:
85:fa:79:0b:eb:d3:6e:5a:79:f7:a2:cd:b6:49:cf:
f9:9a:38:a0:ee:29:b0:35:f4:89:67:62:f4:81:96:
70:b4:76:d9:3e:b1:4d:89:5c:6f:8d:a5:33:4d:34:
13:ee:0e:17:17:ee:16:f7:49:0a:50:fa:6e:a3:11:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:8C:1E:B0:B4:81:B8:6E:79:43:10:E0:9F:47:81:B7:1D:95:5B
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:57:fd:58:77:9a:67:00:0f:b2:55:fd:d6:61:fa:02:83:da:
3a:cd:8a:3d:11:f9:d6:1f:08:0f:0c:41:ea:e3:43:5e:af:11:
a4:55:56:73:2e:a3:2d:3b:a6:43:32:f7:f5:67:05:bb:25:31:
6c:5e:fa:23:69:76:d4:ce:82:66:38:c0:69:c5:b7:5e:83:d9:
28:a3:c6:64:8e:3c:94:14:de:86:10:e3:fa:60:3c:0c:67:96:
90:63:bb:e8:9e:19:9f:49:d4:73:f8:75:00:3e:5a:76:0d:57:
ee:0c:b8:09:02:e3:14:f7:e6:64:88:da:f7:f0:cd:14:7a:05:
ca:c8:08:58:80:4c:60:dc:97:6d:20:b0:b3:df:34:92:1e:15:
bf:c2:91:83:92:01:d6:65:f5:cd:03:18:c6:3e:b1:89:08:54:
2d:18:25:40:52:6d:cb:47:86:b5:a8:88:ae:77:fb:de:ca:9c:
ea:d3:ef:97:1f:b3:bb:df:7e:d9:a0:c7:9c:a2:93:88:ea:9a:
65:62:7f:52:99:0f:b0:99:f7:db:e7:8d:d2:d2:59:58:b3:3e:
39:66:5f:c6:4f:97:8a:25:03:1b:8a:a0:bd:e2:24:c7:22:91:
39:be:1a:21:b5:40:18:75:10:14:11:fb:81:ab:4c:49:f3:e7:
f6:e1:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:30 2026 by rpki-client