Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: SgvwjHGaF9rYJRNxqOuT27NPSYWT+QSAMxv4oAOmsgk=
Subject key identifier: 5D:1B:90:FD:B1:0A:44:2B:35:A0:81:F0:B9:B6:B4:4D:19:EA:67:3F
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019D9AABCC5AC9EEC3A0F1880657F7983291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: CyFPTP28Cxyz74yxQ9PSBkYJ7F8Uh+kpsY8YAZ9FTGY=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cc:5a:c9:ee:c3:a0:f1:88:06:57:f7:98:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=5d1b90fdb10a442b35a081f0b9b6b44d19ea673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:c8:7f:3b:dd:01:c1:cb:21:09:c4:f1:b0:
83:92:a5:38:05:09:66:90:95:41:39:ee:99:91:35:
b2:27:5c:16:32:f2:16:ca:22:94:af:57:8b:91:ce:
22:17:e9:3a:5d:15:fc:9c:af:69:e4:60:d5:7d:09:
c3:1c:29:13:2d:f3:ca:61:41:5e:92:0a:90:26:a6:
9c:e9:f2:f3:96:d7:9c:82:ef:4f:1d:3b:cd:3e:22:
2c:4c:a2:25:62:00:f7:75:c1:34:52:b7:0c:74:29:
38:35:21:d6:a6:fe:65:05:de:8f:28:cf:9a:d2:73:
ff:2e:95:39:62:f3:15:17:b3:9e:01:c3:db:3a:ab:
f3:f4:0d:87:c1:f1:a5:0e:51:8a:9d:e1:80:f7:c0:
88:2e:80:0e:17:64:32:7e:68:93:c9:03:2b:ac:23:
ed:1b:71:4b:d6:80:61:45:e1:47:88:77:60:37:60:
9c:90:11:ac:d3:de:4c:dd:49:7c:27:82:11:3a:65:
58:60:f7:61:95:8d:53:dc:ec:ca:d1:c7:fb:2a:0e:
d7:90:07:c2:7b:ec:90:87:f6:74:4d:c9:48:e6:41:
38:dd:d0:c6:c3:e4:99:94:e0:6e:fe:d9:92:02:73:
69:ff:41:bf:ff:e1:0c:54:d2:59:7c:53:bd:04:48:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:90:FD:B1:0A:44:2B:35:A0:81:F0:B9:B6:B4:4D:19:EA:67:3F
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:83:dc:6a:a7:8f:90:b2:cd:33:d0:68:16:d0:7b:54:e1:
57:39:0b:8d:20:1c:fa:2f:49:f7:e9:d8:53:20:96:a1:68:99:
4c:1f:38:b2:a3:b2:6e:3f:ff:27:cd:c3:88:28:b5:d0:e6:d0:
8d:eb:12:df:32:9c:8c:82:ff:e0:07:6a:a0:e6:a8:08:24:6e:
2a:d0:4a:69:47:6c:1a:41:d2:47:a4:f9:d0:0e:db:d5:fb:3d:
fc:3e:53:41:e0:d0:fc:55:fc:1d:d9:f3:3b:b7:f3:73:fe:9d:
91:28:6c:14:b2:10:70:98:89:b0:b0:80:e8:6a:65:af:27:df:
0d:9c:71:56:84:33:b9:75:ff:eb:06:74:b1:47:bb:a3:4a:d3:
17:aa:68:24:76:4c:67:87:59:cf:78:4e:de:7f:f1:05:7d:2b:
9a:a3:6d:9e:f9:88:85:d8:4d:eb:c9:87:b9:43:8b:3d:de:9c:
53:73:e6:94:2a:43:7f:0b:05:3f:5e:7e:cc:f9:79:a8:64:6b:
1e:8a:ac:43:2d:65:84:8c:3a:0c:8c:14:67:56:ee:f1:d4:07:
94:11:25:4c:09:63:bd:21:80:08:c7:3a:38:c1:93:6a:d0:82:
00:ff:cd:8d:ab:2f:7d:e7:ba:6c:cc:49:4b:b6:32:92:10:19:
26:a9:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:04 2026 by rpki-client