Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: 0ziEjxkKqUPR0Cyc71/7xOw+9+F0ooGpecICwK7SkhM=
Subject key identifier: 6B:BE:2F:30:26:E2:6F:2F:A5:8E:8C:21:78:4A:18:8A:B4:DC:D0:40
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019CAB347417914CF9785FED409F45EC01F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: adW8vhqux5Lkm34UOPfcwR4Y2BtX7Nql383ogtQI4C4=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:74:17:91:4c:f9:78:5f:ed:40:9f:45:ec:01:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=6bbe2f3026e26f2fa58e8c21784a188ab4dcd040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:77:9d:52:26:f6:d0:02:0e:4f:4a:a6:67:
bd:e1:16:3b:58:44:0f:c6:b2:1a:6f:e3:0c:18:71:
30:7d:ec:a3:6a:d7:95:1e:c7:2a:b8:f7:53:da:13:
b7:1d:3b:5f:5d:c8:63:0a:67:cc:c2:cd:f7:89:e0:
25:7a:ba:df:4a:20:69:36:07:cc:b2:de:d4:98:51:
07:42:ca:99:be:0b:ab:4e:77:9f:55:05:d3:d7:66:
84:20:8a:7a:56:f9:2a:83:41:6e:6f:9e:3b:47:fd:
74:f7:fd:73:58:f1:e1:40:73:ee:d1:6a:88:8a:aa:
1b:8f:eb:72:8a:50:44:19:78:69:31:54:fc:81:6d:
6d:04:6d:7c:6c:78:ad:59:ea:bf:46:f3:8b:8b:44:
d0:a9:e7:7f:cc:dc:c9:30:1d:2b:33:6d:3f:ce:4a:
ea:49:f4:90:11:6e:46:37:d5:12:83:08:d4:10:f8:
a3:f7:5c:6a:78:cc:a3:7d:9e:cc:e1:c6:53:d6:18:
5e:9d:f8:00:9a:0e:95:ba:91:40:55:a6:05:2a:b6:
37:c6:2c:10:b8:f4:56:c8:4a:98:6d:ad:1a:a5:8a:
c9:4e:f7:46:6b:a7:a8:53:a7:bc:37:84:1d:51:92:
95:d6:ef:56:fa:a7:11:40:59:c4:bc:ce:79:b1:ad:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:2F:30:26:E2:6F:2F:A5:8E:8C:21:78:4A:18:8A:B4:DC:D0:40
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:14:ae:0f:3e:d8:ba:b9:83:1b:ff:0e:ff:50:bd:30:87:85:
64:1b:9b:53:3e:c9:60:c7:ca:81:30:7b:35:aa:6d:06:5c:6f:
ff:8a:73:e1:84:1a:ac:ec:a1:e6:e3:2e:26:de:29:66:40:5b:
c4:e3:10:d3:be:73:5f:49:4f:80:8d:64:0b:eb:ac:5d:97:75:
8d:ab:ad:41:d0:86:ef:77:ed:05:37:13:b7:de:73:cc:d9:ad:
7f:60:f2:bb:67:2a:4e:5c:8d:2e:0f:2c:44:c6:fc:5f:cd:ab:
20:be:01:66:c0:8a:d2:29:88:a2:a4:a3:21:01:fd:ca:2d:0b:
5d:1f:36:b6:b7:1f:e4:b7:98:38:d3:02:51:6c:8e:b2:4c:2d:
db:4f:c8:b7:d3:19:fc:98:a2:54:15:42:3e:0a:ca:13:5f:61:
60:d1:c5:55:03:93:5c:66:76:45:a6:64:5f:a5:12:fa:ed:36:
8e:4a:ae:71:db:cc:ff:ce:1c:11:a6:f3:c3:62:25:1c:dd:2c:
29:55:0b:97:c7:85:3a:1b:a4:07:da:55:87:5f:af:b9:c1:be:
e4:2d:13:94:e5:18:24:e3:58:9d:b3:fc:1f:43:40:a5:16:ad:
cd:85:be:0f:af:6e:3d:dc:eb:0c:34:9e:2a:33:63:38:a3:69:
0c:9e:d1:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNHQXkUz5eF/tQJ9F7AHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0
OTI0ZWEwHhcNMjYwMzAxMjEwMTA3WhcNMjYwMzAyMjEwMTA3WjAzMTEwLwYDVQQD
Eyg2YmJlMmYzMDI2ZTI2ZjJmYTU4ZThjMjE3ODRhMTg4YWI0ZGNkMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDF3nVIm9tACDk9Kpme94RY7WEQP
xrIab+MMGHEwfeyjateVHscquPdT2hO3HTtfXchjCmfMws33ieAlerrfSiBpNgfM
st7UmFEHQsqZvgurTnefVQXT12aEIIp6Vvkqg0Fub547R/109/1zWPHhQHPu0WqI
iqobj+tyilBEGXhpMVT8gW1tBG18bHitWeq/RvOLi0TQqed/zNzJMB0rM20/zkrq
SfSQEW5GN9USgwjUEPij91xqeMyjfZ7M4cZT1hhenfgAmg6VupFAVaYFKrY3xiwQ
uPRWyEqYba0apYrJTvdGa6eoU6e8N4QdUZKV1u9W+qcRQFnEvM55sa0WFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGu+LzAm4m8vpY6MIXhKGIq03NBAMB8GA1UdIwQY
MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt
YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl
LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxSuDz7Y
urmDG/8O/1C9MIeFZBubUz7JYMfKgTB7NaptBlxv/4pz4YQarOyh5uMuJt4pZkBb
xOMQ075zX0lPgI1kC+usXZd1jautQdCG73ftBTcTt95zzNmtf2Dyu2cqTlyNLg8s
RMb8X82rIL4BZsCK0imIoqSjIQH9yi0LXR82trcf5LeYONMCUWyOskwt20/It9MZ
/JiiVBVCPgrKE19hYNHFVQOTXGZ2RaZkX6US+u02jkqucdvM/84cEabzw2IlHN0s
KVULl8eFOhukB9pVh1+vucG+5C0TlOUYJONYnbP8H0NApRatzYW+D69uPdzrDDSe
KjNjOKNpDJ7Rtw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:13 2026 by rpki-client