Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: PFgzh18oY64ylL/t1NlWDw/u3XZKfIRxY0hCUrHafmQ=
Subject key identifier: 97:28:E7:34:BA:51:1A:A4:5C:BE:04:7F:87:F4:0D:47:6E:ED:A9:04
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019FA7F4C8689B0B8BCEB4D33EA44E92FFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 10B2
Signing time: Tue 28 Jul 2026 09:01:04 +0000
Manifest this update: Tue 28 Jul 2026 09:01:04 +0000
Manifest next update: Wed 29 Jul 2026 09:01:04 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: I9NWriUGrcEyiv+v23mvd9F/ecrSNX3UsbCJ5C3Bi30=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:c8:68:9b:0b:8b:ce:b4:d3:3e:a4:4e:92:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jul 28 09:01:04 2026 GMT
Not After : Jul 29 09:01:04 2026 GMT
Subject: CN=9728e734ba511aa45cbe047f87f40d476eeda904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:77:a0:df:34:d6:16:02:d9:1c:78:19:ab:
03:79:3f:07:bb:dd:26:28:7c:c1:aa:44:6e:4b:0c:
bd:2f:52:89:0b:d3:a0:e2:0c:4c:6c:2f:f0:1c:f7:
e1:45:8e:6a:7e:ae:c5:8e:6f:08:67:ad:d0:0b:b3:
b3:fb:7c:6e:bf:e7:09:7c:ad:58:1f:96:29:b6:08:
c4:93:80:7d:58:d4:57:f5:43:8a:49:61:f5:b7:b3:
a3:d5:53:b5:ca:06:a7:c5:f3:79:9d:9d:f1:fe:9f:
d8:4c:38:ee:ab:fc:41:13:b1:a1:1f:55:26:3d:d3:
c3:cd:3e:96:cc:88:21:5f:a4:0d:f5:16:38:bd:28:
92:aa:4d:18:64:c8:66:f8:66:7b:c8:17:1b:f8:a2:
12:1c:c4:15:e4:02:6e:f7:4e:be:46:8d:54:57:ab:
ab:d9:88:ab:b8:27:95:56:1f:5f:0e:b1:85:a5:31:
a3:2d:07:6a:d3:fd:0e:48:c0:3a:7c:13:13:90:20:
21:ac:f8:f7:7c:97:42:be:01:2c:4c:53:e5:61:88:
2a:f3:ba:ae:b5:12:1c:7b:cd:21:64:a7:53:ee:f8:
e9:df:74:32:75:d1:84:dc:b0:eb:63:f0:94:35:08:
e8:0c:84:e8:f4:74:4c:6e:d8:15:3a:2d:71:50:8f:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:28:E7:34:BA:51:1A:A4:5C:BE:04:7F:87:F4:0D:47:6E:ED:A9:04
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1c:cf:e2:7b:ad:9f:d2:fe:ae:98:7f:fb:d8:12:6e:f2:7d:
fb:28:f2:6f:68:33:d5:dd:1b:6f:d5:5d:85:95:4d:e6:8c:d0:
88:13:22:fd:52:03:65:33:11:6f:51:ae:35:6a:58:3c:73:8a:
16:fe:1a:88:db:86:1b:d8:b8:b7:61:05:cb:b0:d2:fa:b2:01:
0a:98:b1:43:d7:28:7c:95:08:90:5a:be:19:34:a7:1a:b3:14:
e1:25:f2:3a:4f:bc:6b:f9:27:88:b6:17:85:5e:5a:2d:5d:84:
62:8c:e4:51:fa:95:cc:e6:e3:12:1d:09:f3:a2:98:8b:c9:9f:
61:bb:fd:9b:5c:e1:4d:3f:31:10:3e:a8:3e:7c:90:d1:81:66:
1d:70:28:31:4c:67:ea:eb:0a:e1:11:5b:72:3e:cf:eb:01:61:
ad:e4:97:2a:80:b9:ef:a7:1b:97:4a:74:53:36:e0:29:50:40:
7d:72:1b:97:62:61:0a:cc:8e:a8:2f:80:2c:d2:e6:72:d0:56:
79:e0:1c:d7:41:70:d6:53:1b:b9:4a:22:c2:45:b8:dd:2f:b0:
f8:37:75:ba:5e:02:f5:be:79:67:68:a6:c9:3c:1b:b3:2c:cd:
05:40:8c:3d:94:b7:3a:27:15:87:40:9c:4c:bf:ba:d0:d5:61:
b3:37:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:26 2026 by rpki-client