Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: H25UwbTJOMI63AEagFyyQg8QATXhMN+fbrESK3V1P7g=
Subject key identifier: 13:50:4F:5E:35:F1:8C:C6:65:24:6F:20:13:86:37:D2:0C:8A:91:50
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01A130A25C32E57E9CFF092D930478271866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0BB0
Signing time: Mon 12 Oct 2026 15:01:49 +0000
Manifest this update: Mon 12 Oct 2026 15:01:49 +0000
Manifest next update: Tue 13 Oct 2026 15:01:49 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LPUMGL0DH5PcG1AojfBAEkKYHe4.roa (hash: N5ZeUyAle6r7IlHtw9k67XdUKJ/pt6NdHoxYhDtnO8Y=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: Jc6ydLJRH1Wa5dvXRVRck+9uVf7rBbfDUWXF9RiZaPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:5c:32:e5:7e:9c:ff:09:2d:93:04:78:27:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Oct 12 15:01:49 2026 GMT
Not After : Oct 13 15:01:49 2026 GMT
Subject: CN=13504f5e35f18cc665246f20138637d20c8a9150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:f0:74:2b:d6:ad:c7:15:76:e0:20:a5:04:
4a:c3:4c:82:99:49:39:80:cf:dc:f6:c1:a7:6d:61:
89:2d:12:63:07:27:e6:e9:76:c5:ac:33:b7:fd:55:
a5:76:eb:f9:36:58:68:0d:1b:67:70:8e:30:83:93:
37:19:5c:74:62:9e:78:eb:02:d4:2d:7b:d3:27:7d:
d9:dc:c6:22:1a:93:c0:0c:c5:cf:0d:50:23:fa:d7:
b3:e1:5c:fc:a1:30:a3:cf:59:e5:52:0c:e0:25:f5:
eb:bc:74:71:1b:16:30:41:3a:bc:7c:6a:e7:ea:98:
b3:43:3a:f8:6c:08:d5:41:32:c3:dd:f5:d1:93:01:
05:d6:54:12:4f:0d:af:b2:81:90:3c:e7:cb:08:9f:
ea:b4:ed:16:1d:0e:28:63:a5:d4:95:62:94:83:14:
fb:0e:20:38:60:0f:e5:b8:63:d0:3b:37:51:a6:83:
23:00:d2:38:a2:fa:b4:da:8f:30:50:6f:cf:ca:e5:
ff:a5:a2:7d:21:de:4c:c8:5c:de:57:6b:08:60:91:
80:74:72:31:50:bd:5c:23:fa:7b:7a:17:93:a9:6b:
a0:e3:4e:24:c3:97:db:e4:c3:1a:a9:ca:7b:37:e2:
a7:0d:16:28:32:5f:a7:7f:d0:00:f0:97:8d:f8:c8:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:50:4F:5E:35:F1:8C:C6:65:24:6F:20:13:86:37:D2:0C:8A:91:50
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4c:d5:8e:10:1d:7c:28:1b:4b:32:21:52:01:ef:fe:c1:7c:
84:e8:e3:54:d1:3b:c6:41:e9:8c:6f:d5:2d:61:da:58:42:7e:
9c:41:0f:79:1f:e1:f3:99:23:a2:97:2c:0c:fc:65:c7:20:58:
ab:d7:28:4f:4f:21:2d:4b:44:24:b8:56:45:e1:2e:ff:01:2c:
d0:58:e4:89:9b:bc:2b:80:69:a9:b2:5d:e2:f1:4b:c2:bb:85:
19:31:52:93:d0:b3:89:f9:ff:69:2b:d7:cf:31:50:4f:63:b5:
16:a0:99:9a:39:f2:ee:cc:bd:b0:1b:7f:5a:8f:1a:5a:1a:8d:
93:56:49:71:5f:75:6e:0d:a6:53:1e:cc:f6:72:7b:07:cb:41:
72:7f:66:36:da:8b:0c:12:b2:da:26:84:b6:e3:bd:b5:2e:8d:
72:24:68:5b:8a:55:52:d9:08:f2:54:14:0d:ac:14:5e:ef:c5:
ee:ba:8b:4d:25:f4:cd:c4:94:4e:9a:36:93:7d:85:76:94:28:
7d:f6:ec:b9:6b:8f:b0:e3:4a:40:c3:4e:3f:20:c6:83:93:b1:
45:b8:73:0f:c0:4d:c5:46:93:47:5c:bb:ba:db:bc:e0:dc:78:
58:0c:c8:74:d0:0a:f8:77:fd:d8:2b:63:25:9f:1e:12:2c:c7:
2f:24:99:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:02:54 2026 by rpki-client