
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: Qg5EuxzIO2LPg5aDgHPpLd8FTNLOqz4Zt8vP0WbdR7M=
Subject key identifier: F6:57:59:D6:F5:5B:09:1E:B1:D6:E7:F9:8C:E8:CF:09:8E:08:9D:3D
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019FABD16BB29CF78DAEA78DF29171CB9A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 03:00:56 +0000
Manifest this update: Wed 29 Jul 2026 03:00:56 +0000
Manifest next update: Thu 30 Jul 2026 03:00:56 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: 7QM5yOSPXu0tuJFkFAOTzRyrA0EZL9jwFKt2rKlt/Mc=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:6b:b2:9c:f7:8d:ae:a7:8d:f2:91:71:cb:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Jul 29 03:00:56 2026 GMT
Not After : Jul 30 03:00:56 2026 GMT
Subject: CN=f65759d6f55b091eb1d6e7f98ce8cf098e089d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:5a:f9:80:55:c2:94:19:36:ac:68:f1:de:
e2:09:8e:f2:f7:02:a0:e7:e8:0d:91:36:e6:af:9d:
da:dd:16:ca:6f:dd:e7:8a:35:e0:33:3b:13:91:27:
74:6f:fe:ab:ae:5c:c8:9b:0e:09:90:b2:24:4e:ba:
80:6e:b9:f9:a7:77:f9:81:b9:7c:78:d4:4e:9a:ab:
28:af:1d:94:68:58:5d:22:1d:69:a5:9d:cf:74:ff:
54:c9:8a:88:b0:da:58:c2:a1:0b:ec:81:c4:cc:f5:
3f:86:83:52:2d:20:d4:b8:68:72:38:c8:87:b2:43:
1c:29:ef:f7:f2:af:56:32:35:ee:1f:d2:8f:9e:a5:
ba:3e:12:78:6c:bc:38:9b:59:5c:1a:06:d0:b8:c5:
10:e6:ac:c5:80:8a:57:e1:2c:09:d4:6f:a6:56:28:
d8:6a:b3:1a:64:4a:b0:a8:2a:8a:05:46:c5:91:fe:
48:eb:4d:5e:b2:3e:a9:b9:6e:8b:f6:9d:d9:85:73:
ef:df:12:0b:39:77:49:09:6f:33:8a:a4:f7:bc:cc:
4a:42:a6:55:df:de:6d:2c:24:e6:fe:a6:8e:ff:8f:
ae:7f:17:0d:d6:9d:09:92:4c:e5:a4:01:b5:b9:a4:
c0:9a:1a:54:81:e4:2a:19:28:ad:5c:d1:6e:72:bf:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:59:D6:F5:5B:09:1E:B1:D6:E7:F9:8C:E8:CF:09:8E:08:9D:3D
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d9:f0:12:32:a4:2a:45:c2:36:04:c5:e1:e2:f2:20:0b:d9:
7b:c4:29:1a:7f:7f:53:a4:46:65:dd:aa:57:f3:f6:ce:32:b8:
e1:fb:a7:11:bb:08:d0:0d:30:b5:8d:56:ab:7a:68:66:44:a6:
94:d1:4b:97:a4:32:61:6f:d0:75:e8:f4:5d:49:aa:80:c0:0d:
8e:94:91:d4:ca:8f:40:31:cf:48:b6:71:81:0b:98:42:19:ac:
4f:73:26:73:5b:c5:2c:c7:7f:e3:d2:02:27:67:23:5c:5b:ce:
bb:04:c1:37:4a:67:e4:11:98:cb:7e:86:c9:27:55:f4:24:a5:
d2:f2:77:ac:19:ee:30:e4:b2:a4:a3:1b:6d:cb:f9:0c:93:74:
7f:a0:0f:2a:4c:36:82:4e:e8:3f:d7:8b:b3:28:e3:a5:a0:f6:
cd:c5:6d:3c:a7:f2:d5:08:2a:ef:00:8c:2f:ec:d8:23:01:e6:
b4:6a:f1:d0:70:26:d0:60:b3:a0:db:0f:8e:4b:c2:45:10:eb:
99:f9:c0:8d:22:7c:5c:22:d9:75:ff:55:e1:19:09:8f:0e:5d:
b7:03:62:b6:9e:15:71:04:9e:e4:c7:5a:ad:3e:67:eb:78:ad:
3a:12:8f:3e:fa:d7:44:87:ef:bb:17:a6:a3:01:5f:11:aa:02:
1d:aa:6e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:57 2026 by rpki-client