Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: 8Z7aGxX5Atobhb3Ez6KlZjFz4NCumKZaPfvetzB8yRQ=
Subject key identifier: 92:D6:C1:E7:49:9F:58:B5:ED:BF:40:FC:87:DF:79:A6:8B:F2:79:83
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01A0BFC38F783B891165DD74B94322E5A442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 17:00:59 +0000
Manifest this update: Sun 20 Sep 2026 17:00:59 +0000
Manifest next update: Mon 21 Sep 2026 17:00:59 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 04tRIxHI5qHXSaT1Lk+FKhmF2GA9U6TS4odz54zah4U=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:8f:78:3b:89:11:65:dd:74:b9:43:22:e5:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Sep 20 17:00:59 2026 GMT
Not After : Sep 21 17:00:59 2026 GMT
Subject: CN=92d6c1e7499f58b5edbf40fc87df79a68bf27983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:cc:78:8e:d2:7c:d6:ca:d3:33:03:07:df:
3a:e3:b9:8c:cb:3d:3d:89:f1:1e:bc:38:a5:68:4c:
a3:6a:e9:1e:ba:e1:82:d3:d1:08:91:db:8e:e9:c8:
d9:f0:bb:03:c4:50:13:92:f6:b7:f2:f9:46:70:19:
5f:a8:73:9e:74:13:fc:9f:29:41:5b:fc:ad:57:a2:
f3:f8:ee:79:df:32:02:d8:6e:c1:d5:20:23:e0:bc:
aa:5c:52:fa:8e:fa:88:ff:b0:c6:6a:c4:e0:b0:6d:
c1:9c:2d:22:8b:31:58:71:fd:84:ba:b0:e4:e6:52:
8a:0a:d8:c5:9a:38:be:41:50:7a:8b:79:06:c9:8e:
29:bf:0b:2b:fa:77:22:30:17:3a:27:0c:ff:30:c3:
6f:34:6e:0f:de:63:aa:b0:15:6e:52:98:77:7b:6e:
05:2d:4d:5d:bb:02:90:ac:77:9d:a3:c6:54:e9:59:
d5:37:26:41:bb:47:d1:8c:23:d4:ba:dd:ee:b9:c3:
5c:43:77:fa:01:5f:f0:77:cc:a6:07:91:a6:95:e0:
e8:12:cd:bc:ff:c1:5b:27:bf:69:09:34:fb:0f:58:
f6:dd:f1:7e:8f:d7:05:e4:80:0c:aa:0f:45:5f:91:
2f:4c:e7:a6:03:29:5b:c4:32:27:97:a3:92:84:ba:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:C1:E7:49:9F:58:B5:ED:BF:40:FC:87:DF:79:A6:8B:F2:79:83
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:30:30:fd:65:92:37:49:33:55:f0:87:c0:d8:1a:c5:f0:50:
34:a8:d4:49:86:ad:76:16:f3:85:9d:a5:35:69:38:00:20:dc:
bf:d1:8a:4d:51:9d:3b:bc:3b:11:e1:98:dd:46:26:ac:09:8e:
3f:9d:6c:f3:95:e3:f5:75:ad:2b:5a:24:29:b0:c6:ba:53:85:
46:8a:6d:30:f5:83:42:0e:44:05:68:01:cd:48:36:b5:5b:7d:
b8:3f:41:71:93:2c:81:26:74:32:a3:f8:ce:21:0d:d7:9e:ed:
6b:3d:9d:eb:58:52:83:20:6e:aa:4c:82:53:16:56:d3:03:75:
d1:8f:59:be:e0:90:ab:dd:ea:f7:46:4c:d5:77:73:49:bd:9e:
3b:c2:d5:32:d2:50:37:ae:b6:78:49:fe:1e:ab:ac:68:dd:e7:
de:b4:c5:ea:a3:53:25:91:14:90:d6:e8:27:a2:ea:35:88:ca:
7b:dc:06:ad:21:71:4f:4a:4d:f4:3c:9b:41:10:1c:28:9b:c0:
5c:75:99:5f:64:1f:39:45:09:ad:95:90:f1:80:79:ad:82:40:
d4:66:dd:71:35:8d:1d:f1:4e:df:d6:d5:01:a1:e8:38:dc:a0:
ad:76:1a:1e:09:26:6d:ad:47:6e:64:b0:62:f7:56:11:d3:a0:
fc:40:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:02 2026 by rpki-client