Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: /y+ozMmEIcbSNzHR/NDqb0pfhV0aJY/e3Utld3m56NQ=
Subject key identifier: 31:30:93:33:48:22:BB:83:1E:DF:54:56:92:E8:48:C8:A4:55:05:A9
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019CAB3428889F73E15931D4B3342376C69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0F26
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: /a+0OskxMKe1a7d5fLJUQ+eicRSZ2ALFLix2DT0CUNA=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:28:88:9f:73:e1:59:31:d4:b3:34:23:76:c6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=313093334822bb831edf545692e848c8a45505a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:d8:d9:a2:1e:67:79:9b:2f:2b:28:9c:31:
a8:38:f6:94:25:97:c9:58:59:36:1f:12:22:49:c8:
c8:12:a3:cd:70:6d:ea:06:c6:c0:da:eb:60:ea:3e:
cc:a7:5f:03:e9:27:05:dc:ea:eb:eb:df:34:3c:3a:
40:0b:55:54:f8:e9:75:1a:d5:12:f7:77:6e:64:ec:
81:68:92:37:17:d7:14:0a:f7:57:75:8a:dd:e9:2f:
40:b9:b9:3c:2a:fe:4b:93:96:ec:f7:0b:75:f1:8c:
b4:5d:95:a1:f8:80:8b:85:29:b8:07:98:f2:38:74:
1f:30:1b:11:bd:39:fc:e0:b1:8f:3a:d6:9f:66:fd:
99:d6:46:e6:d0:d3:b4:15:25:ac:a7:9f:ad:c4:21:
99:a6:46:de:db:ec:2c:0f:2e:7d:58:14:fd:05:f0:
99:4e:9e:3a:3d:f4:bd:10:2d:cd:58:90:ed:92:06:
8e:1e:4b:fa:eb:2c:89:f5:3d:83:62:65:19:59:04:
9d:36:cf:0e:73:b5:90:f0:2d:8c:a1:c8:b6:e7:1f:
20:82:2d:df:ff:88:e2:51:f2:f2:fd:b6:9e:07:1a:
e8:fa:e2:0b:7a:57:fb:1f:9a:58:20:de:53:d6:a6:
d4:23:f0:dc:ab:fe:3e:a8:d6:32:da:d3:9a:0e:33:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:93:33:48:22:BB:83:1E:DF:54:56:92:E8:48:C8:A4:55:05:A9
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:62:a1:b7:bf:bc:69:87:95:e2:ed:dd:fa:a1:3f:87:b7:
55:17:e9:d3:a9:c4:0c:0a:f5:6f:b6:a4:ba:e1:7f:90:e2:d2:
c3:35:79:03:cb:cc:a3:58:d9:50:68:a4:94:c9:19:81:ac:3e:
f3:30:c4:d4:40:98:43:f6:8f:25:38:94:11:17:22:9f:73:58:
b9:0e:f2:ee:46:a2:a1:2c:aa:ab:23:56:bf:a6:5c:a5:96:56:
bb:eb:bc:8f:17:fe:0d:ea:dd:be:f6:61:67:db:66:f5:88:10:
e1:e8:7e:12:62:bc:83:2f:bb:e6:25:55:1d:16:f2:6d:15:98:
ab:a8:6b:4d:51:21:59:f0:12:7c:cd:04:a9:48:a7:2b:d1:fe:
21:8b:35:8d:94:0f:83:2d:c7:7b:ce:fa:de:6e:d3:5f:c9:c7:
c1:2f:1b:a8:7b:e3:8b:22:4a:98:86:94:01:c3:92:47:50:c2:
77:a5:86:de:38:b4:cf:4e:16:57:13:d8:1b:30:d6:61:9a:c6:
92:02:a6:78:d1:a1:b2:20:39:8a:6b:9f:9b:60:5d:70:69:b1:
28:3d:00:c8:7f:eb:2e:8d:90:24:33:aa:cd:bf:f3:28:e3:d1:
9a:3b:9b:7a:58:27:09:ac:ee:56:e1:fa:4c:49:e5:4a:ef:a6:
e4:74:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:45 2026 by rpki-client