Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: EDgA5BAmxgzrdyzQHv+4HpvXglChZ2Qth9sCiyMQXfA=
Subject key identifier: D2:1B:1D:A6:37:F0:0B:79:45:39:A4:02:23:EF:B8:D2:12:63:B5:9B
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 019CAA8FA6D3F8094050C28F4EF008F3D993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 1719
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: K64nG/H1qYjouODh8qwN38El+bUqgHsoqFZYvNK4nd4=)
2: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (hash: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a6:d3:f8:09:40:50:c2:8f:4e:f0:08:f3:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=d21b1da637f00b794539a40223efb8d21263b59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:f6:98:19:7c:58:72:d3:b7:84:01:a8:8c:
3b:88:2e:37:cc:59:f1:91:40:68:86:55:96:6c:12:
87:67:c3:0c:4f:df:e3:17:77:37:0c:00:23:52:e7:
5e:d1:0c:94:df:48:02:6a:0b:fd:f4:72:4c:3a:81:
08:40:b0:03:94:a0:d9:de:c9:b4:8a:0c:63:82:66:
65:d7:6e:b6:9f:79:e1:4c:57:56:73:df:9d:59:7e:
b5:f1:66:82:f5:66:23:9d:94:40:05:63:ab:3f:a1:
1a:de:7c:77:df:26:bd:ac:15:dd:2c:51:dc:7d:d5:
fb:11:81:0c:cc:59:43:b2:fc:a8:7b:39:86:fa:0c:
3b:f0:f8:89:60:48:7b:3b:f1:95:85:74:d5:98:f5:
2e:61:fd:39:a8:f6:6d:13:f7:b9:6c:25:12:a8:4e:
cd:44:b7:a6:ac:d2:85:0e:d3:83:a1:73:35:e6:4e:
32:7e:50:12:a2:75:81:af:0e:0f:69:da:21:a5:87:
6b:94:9e:f4:c4:ab:88:83:8d:4a:0b:e6:42:53:28:
f5:75:27:7e:8f:ee:61:76:b3:c3:e8:d3:89:b1:a2:
2a:62:4b:6f:0d:7a:10:6b:81:41:0b:82:2a:af:fe:
8a:3a:72:1f:07:f6:88:14:86:28:6c:f9:a5:9c:b0:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:1D:A6:37:F0:0B:79:45:39:A4:02:23:EF:B8:D2:12:63:B5:9B
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:cb:38:75:e9:fb:0f:4f:be:02:d3:43:89:2c:f2:6e:19:
c1:a6:ca:51:ac:72:a2:c9:6e:80:11:2f:6d:9e:2b:1a:b9:de:
f8:16:df:7e:15:30:8d:4c:a3:a0:77:f0:02:0a:e3:09:59:1e:
62:42:51:29:29:4e:de:37:b3:09:0f:8c:64:bf:1f:a0:0f:af:
aa:43:96:c7:a3:bc:d7:11:ee:08:a0:eb:25:93:bd:a3:15:c5:
d2:b4:3a:e6:c1:0e:7b:e5:d7:da:a8:17:5b:63:ed:88:db:ee:
66:7c:be:19:41:a6:c7:50:6b:0c:66:b3:e7:31:ee:83:2c:4b:
d7:df:0e:9d:75:39:c9:17:58:d4:54:2d:e1:7a:1c:71:ea:2f:
d7:9b:93:a5:da:fd:9e:90:84:88:ab:f3:54:fa:66:8b:72:da:
69:c0:9a:87:9f:58:90:b3:ba:c8:27:be:31:ac:8c:80:31:9e:
0a:e5:fe:d8:bf:b9:4e:22:20:6e:00:96:aa:e1:67:5c:5c:24:
ac:ba:be:5c:68:10:6d:54:e0:3b:1f:f2:1f:5d:c8:4c:4a:3c:
3f:14:7c:67:ec:f9:6b:a5:62:55:42:a2:25:0b:b1:97:8c:a7:
a7:e7:ce:1f:8f:fd:79:26:6a:57:49:7d:b2:ee:7c:b9:80:5c:
24:03:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:25 2026 by rpki-client