Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: zRpAOmAPBDAwYVqaw1ALkzfapdED+7rnlG+I97rUPRk=
Subject key identifier: 5B:08:7F:D1:5A:35:05:48:8B:42:FA:DC:3B:5C:0F:44:0A:3C:4A:57
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 01A0C7B3577CEF889F697C84738822B5921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 1147
Signing time: Tue 22 Sep 2026 06:00:14 +0000
Manifest this update: Tue 22 Sep 2026 06:00:14 +0000
Manifest next update: Wed 23 Sep 2026 06:00:14 +0000
Files and hashes: 1: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 5M3A/PQiGullhKxzIwitP+94SRGaIBG4LXsD2141rRU=)
2: SBJXesURbWihSshv3u6VuySN3mw.roa (hash: /Jpt73chQ1hiua7JBiCWzhb079MLWM9eJT7lT8kviMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:57:7c:ef:88:9f:69:7c:84:73:88:22:b5:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Sep 22 06:00:14 2026 GMT
Not After : Sep 23 06:00:14 2026 GMT
Subject: CN=5b087fd15a3505488b42fadc3b5c0f440a3c4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:2d:ce:3c:87:e9:63:2f:a8:38:fe:6f:00:
53:1b:3d:6d:bb:ed:0c:eb:c0:a9:24:33:58:3c:d7:
ca:86:9f:30:f1:f0:c0:13:08:28:ad:79:54:36:2a:
78:0c:c7:dc:87:5c:70:94:32:97:c1:fe:a6:b1:11:
c9:7f:08:ef:99:e0:70:63:17:e0:00:ca:7c:4a:b9:
84:1f:30:c8:12:ce:c1:3e:a1:28:b9:75:b5:be:c2:
a4:ee:6f:f7:fd:83:4e:5a:75:1f:66:1f:e8:43:a1:
df:14:d3:2d:86:af:a2:6d:ef:21:04:ba:f8:bb:08:
a5:ca:b4:d0:5b:da:e2:16:cf:c0:0e:1c:29:10:4f:
32:df:01:e3:b1:14:ea:9f:3c:95:aa:b8:e7:a3:03:
25:da:31:88:9d:76:0a:bf:fa:cd:9a:82:1d:fe:3d:
10:56:2b:dd:ab:c9:89:a3:48:81:5c:4c:76:95:c3:
20:e9:c8:27:f1:66:59:14:31:00:27:78:d8:9a:4c:
cb:14:2f:bb:02:1e:cb:0c:44:ed:ab:31:0a:82:2e:
32:e2:ef:da:f9:55:8d:ce:ac:5c:d0:e6:2f:4e:c7:
42:9a:3e:3c:87:c1:ed:15:57:a0:4b:ba:8c:25:67:
c9:aa:f3:19:7d:ca:0f:78:05:f1:f4:66:93:b1:6c:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:7F:D1:5A:35:05:48:8B:42:FA:DC:3B:5C:0F:44:0A:3C:4A:57
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d1:95:a0:f2:3a:11:f1:a8:25:a4:bf:0d:45:0e:3f:a0:e8:
13:d7:6d:eb:ea:1e:e4:b8:c3:c8:5c:d9:05:3b:84:c4:12:57:
21:10:01:52:40:90:d5:80:61:a1:53:9c:9a:b2:18:79:f8:02:
3d:07:7f:43:35:31:42:50:d5:82:6a:c6:4f:27:98:7a:5a:58:
c4:9d:54:aa:78:c5:7e:00:f0:aa:9f:cb:b2:0c:0c:71:19:e0:
a8:84:ce:45:15:46:34:59:14:48:f1:7b:80:bd:d4:df:fc:df:
fa:ab:44:3b:b5:14:a4:e2:1b:1e:a1:7e:ea:33:eb:65:30:08:
06:84:55:69:9c:84:b2:b0:d5:dd:74:0d:fa:c7:42:ba:a6:c9:
cd:ab:41:96:99:1c:fd:f0:d2:8d:f0:3c:ca:ad:08:d0:42:16:
9a:66:15:1f:43:39:3b:57:9c:14:1c:07:2a:ae:e6:a8:a5:45:
6a:3d:13:fe:cc:8a:9e:86:e1:9b:a8:d5:0a:45:5e:05:2b:01:
63:e0:93:ca:00:16:f4:c7:e6:4d:4c:34:a1:fd:c6:91:4d:31:
61:95:01:74:12:69:14:e7:f7:bf:b9:47:fa:ea:2d:cd:41:0c:
55:97:71:eb:00:d3:bd:d8:7d:2c:da:39:38:86:3b:6c:05:08:
c0:05:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:29 2026 by rpki-client