Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: K+6k771lnwnAfGRZ4JH7C+0omlpNYcyCRQvhJx57pJQ=
Subject key identifier: 7C:30:B6:FF:44:0F:CA:3C:D7:6E:0C:6F:01:E5:D9:C6:0E:B2:6A:9A
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019CAC7E07347DB3C0C3CE80D6F774E9F542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0958
Signing time: Mon 02 Mar 2026 03:01:06 +0000
Manifest this update: Mon 02 Mar 2026 03:01:06 +0000
Manifest next update: Tue 03 Mar 2026 03:01:06 +0000
Files and hashes: 1: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: vYANrHXjRUd0pzBFCSnMxZ7Qac3gzgmNBG4n11fYdvU=)
3: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
4: yz9etzU3WAij-xTcB349cOYhteM.roa (hash: MWnxlRDoogvVu7rgyi8dvl0hLzqj48ZRfL2MzhVICvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:07:34:7d:b3:c0:c3:ce:80:d6:f7:74:e9:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Mar 2 03:01:06 2026 GMT
Not After : Mar 3 03:01:06 2026 GMT
Subject: CN=7c30b6ff440fca3cd76e0c6f01e5d9c60eb26a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:fa:c7:83:3f:95:78:6b:76:61:20:fd:5b:
d1:ff:a9:57:8b:f2:89:77:c2:84:1a:4a:23:87:54:
fd:88:7b:f7:74:90:12:c4:2b:37:97:c2:f7:81:1b:
9c:08:bb:a2:bc:3d:99:61:50:a0:37:84:ee:97:cb:
25:a8:ba:83:74:af:b7:92:d2:ed:d1:0a:f0:28:0f:
72:f4:93:77:c5:33:84:70:6f:f5:bb:04:2b:12:ca:
23:91:ef:5c:4a:b5:0e:4f:16:69:48:c8:49:ef:78:
91:81:be:70:61:dd:04:64:d7:9c:cf:d8:ee:fe:1b:
44:e4:c1:b7:b7:96:1e:55:18:81:69:f1:d4:2b:f0:
6c:98:2d:43:3f:31:3a:8e:9f:a9:95:f4:31:65:d0:
c4:f7:9e:e8:65:fe:e8:6d:7e:ba:8b:fd:3c:b9:2e:
6b:c4:26:e8:2e:af:1b:60:6b:89:dc:01:d0:ca:82:
ed:1e:52:8d:ad:a8:cf:72:ff:9a:1d:1d:54:75:d4:
ef:8c:d1:50:6f:a5:c5:34:c9:e2:2a:f7:22:c9:0c:
55:2a:bd:e3:fb:f0:4e:fc:4c:f1:7f:a5:e5:0d:d6:
b6:ad:f7:ab:ce:46:d6:8d:c7:29:63:d4:26:4a:e1:
ce:d9:8e:50:e0:23:1e:75:82:c4:3d:64:6d:7a:f0:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:B6:FF:44:0F:CA:3C:D7:6E:0C:6F:01:E5:D9:C6:0E:B2:6A:9A
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:52:89:76:64:7f:15:9f:22:89:92:47:66:e1:7a:de:b1:
0e:9f:18:b6:16:4b:e6:a4:99:62:07:46:d7:1b:32:8c:71:2c:
bc:5f:ae:1b:a3:97:fc:16:56:a5:28:c8:b6:16:8c:38:bc:c2:
bf:82:f5:45:48:45:fd:8e:d9:34:d6:1c:42:db:57:56:44:13:
09:51:d6:55:9f:63:82:90:09:4f:e5:3e:b8:97:62:41:97:7f:
8e:73:d8:c1:c8:7e:3e:7b:9e:c2:68:52:42:f9:78:30:07:15:
c0:20:ee:f9:06:1b:8f:81:53:5f:a0:ad:37:97:dd:c7:d4:1a:
00:2b:e4:39:ae:11:4c:dc:49:e9:f7:49:39:23:ec:7b:28:9c:
fb:8e:61:5b:ef:09:4f:69:fd:d8:f1:89:87:ea:40:0f:fb:8a:
e5:25:21:16:33:bc:17:0f:c8:4a:7a:df:2f:42:5d:8b:a8:8b:
c9:db:d8:bb:e3:8c:e3:d6:b2:29:d5:5d:2a:38:7f:da:2f:e3:
2f:a8:a5:8a:7e:30:51:da:db:4d:4e:1c:32:48:76:66:6c:fe:
af:94:7e:e7:f8:1c:0a:13:83:47:f9:7e:94:f3:4b:e4:03:93:
2e:a6:a9:d2:22:4f:ef:d6:8e:d3:7a:db:2e:5b:23:6b:9e:95:
dc:b3:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:57 2026 by rpki-client