Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: Q+OxHrorgzIS1ChoAvgGnoRSxrX3J3j3RhcFEYtgbiY=
Subject key identifier: F1:2F:38:54:A0:6E:F0:95:6A:03:B9:EB:C6:D7:65:0B:02:7B:9D:98
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019DA45445E46D82A761223E752E1729E3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1859
Signing time: Sun 19 Apr 2026 06:01:19 +0000
Manifest this update: Sun 19 Apr 2026 06:01:19 +0000
Manifest next update: Mon 20 Apr 2026 06:01:19 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: cOMKd1HfCc8J7Lj4to01aMcrmFr44Hd/U1kdgWm300o=)
2: MQurPkwc9xNchlLvXHc7cyLJXYw.roa (hash: M1ZfO3jLMgMlEbBcemPRY1pNZBv7xD+CQfvS21lMERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:45:e4:6d:82:a7:61:22:3e:75:2e:17:29:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Apr 19 06:01:19 2026 GMT
Not After : Apr 20 06:01:19 2026 GMT
Subject: CN=f12f3854a06ef0956a03b9ebc6d7650b027b9d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:bb:69:12:1d:c6:4a:48:60:e5:e6:fb:8c:
33:e7:0a:ac:78:87:b1:ad:7c:ee:10:22:78:b8:81:
9e:ac:e6:98:eb:ef:7e:d1:60:ad:b1:28:a6:87:47:
60:17:94:15:c5:1a:09:2f:7c:71:83:13:db:8f:91:
ec:d2:7d:67:d0:57:3d:2b:13:d7:39:71:b5:6b:0d:
ef:b0:4e:89:13:93:89:f8:54:b4:6b:25:6b:5f:48:
53:0f:cc:54:1c:88:75:8c:59:dd:38:20:3b:5d:61:
b9:88:e6:7e:93:06:6e:62:50:ec:a4:bb:22:af:90:
a7:9c:de:3e:e1:9f:de:fc:da:ce:16:37:3a:84:9e:
38:c3:e8:b7:21:ff:22:5c:1f:ac:82:53:23:9d:8a:
9b:65:59:74:04:f2:f6:51:00:bb:dd:70:5d:cf:b2:
7c:fb:95:fa:36:59:5b:17:76:a0:9a:98:69:4d:c7:
01:86:22:2d:9e:04:54:50:21:b5:c3:5a:07:14:6e:
fe:fe:6a:6d:47:86:ca:ec:62:11:63:cc:ad:d9:45:
57:29:44:15:eb:53:fc:45:63:d7:0d:d7:70:67:55:
47:27:69:24:53:8a:0b:85:1a:ac:ac:d8:c2:d1:f6:
b6:3e:27:a6:36:e9:e2:3a:d8:22:ea:24:a3:a5:97:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:38:54:A0:6E:F0:95:6A:03:B9:EB:C6:D7:65:0B:02:7B:9D:98
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f7:85:fb:25:f9:36:76:c0:13:2f:57:c6:0a:38:60:4d:34:
7b:1c:3b:d8:16:77:3e:8e:3d:fe:c8:11:ca:2b:78:75:8b:03:
a3:e6:e9:83:78:40:15:33:5d:4b:9f:99:c6:33:80:71:c9:09:
87:41:6c:15:c8:f4:96:1c:a5:54:7f:3b:20:b0:39:05:9a:dc:
e3:fb:5a:9c:5c:35:fe:70:06:6c:16:8f:4f:42:70:97:36:de:
29:98:e6:d8:40:3e:9f:62:01:2d:89:4b:9e:c7:7f:1b:20:2a:
01:72:0b:d5:46:1a:0b:68:e1:58:e6:e2:b1:06:dc:d5:e8:08:
c9:cc:bb:ad:53:01:db:92:a0:ee:54:aa:69:1c:04:b5:99:6c:
06:b4:62:a3:94:3c:50:79:8a:06:91:3c:4b:c1:bb:40:9c:49:
d1:a9:af:87:24:8f:30:95:33:e5:40:4b:d1:d5:21:e2:77:00:
41:3b:e0:2e:33:b9:04:64:c6:d4:4c:74:1f:10:6a:e0:ed:c5:
76:84:68:79:ce:69:09:c0:64:87:a9:35:df:5c:17:54:bc:e0:
38:b5:56:ac:c9:c6:ba:44:93:e3:f7:5f:06:ff:20:a3:53:d6:
b0:68:9c:9c:af:79:e1:6e:85:08:64:3b:5f:79:3d:fc:ea:fd:
98:29:a8:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVEXkbYKnYSI+dS4XKeOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0
OTI0ZWEwHhcNMjYwNDE5MDYwMTE5WhcNMjYwNDIwMDYwMTE5WjAzMTEwLwYDVQQD
EyhmMTJmMzg1NGEwNmVmMDk1NmEwM2I5ZWJjNmQ3NjUwYjAyN2I5ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX27aRIdxkpIYOXm+4wz5wqseIex
rXzuECJ4uIGerOaY6+9+0WCtsSimh0dgF5QVxRoJL3xxgxPbj5Hs0n1n0Fc9KxPX
OXG1aw3vsE6JE5OJ+FS0ayVrX0hTD8xUHIh1jFndOCA7XWG5iOZ+kwZuYlDspLsi
r5CnnN4+4Z/e/NrOFjc6hJ44w+i3If8iXB+sglMjnYqbZVl0BPL2UQC73XBdz7J8
+5X6NllbF3agmphpTccBhiItngRUUCG1w1oHFG7+/mptR4bK7GIRY8yt2UVXKUQV
61P8RWPXDddwZ1VHJ2kkU4oLhRqsrNjC0fa2PiemNuniOtgi6iSjpZd5NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEvOFSgbvCVagO568bXZQsCe52YMB8GA1UdIwQY
MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt
YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl
LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPeF+yX5
NnbAEy9Xxgo4YE00exw72BZ3Po49/sgRyit4dYsDo+bpg3hAFTNdS5+ZxjOAcckJ
h0FsFcj0lhylVH87ILA5BZrc4/tanFw1/nAGbBaPT0JwlzbeKZjm2EA+n2IBLYlL
nsd/GyAqAXIL1UYaC2jhWObisQbc1egIycy7rVMB25Kg7lSqaRwEtZlsBrRio5Q8
UHmKBpE8S8G7QJxJ0amvhySPMJUz5UBL0dUh4ncAQTvgLjO5BGTG1Ex0HxBq4O3F
doRoec5pCcBkh6k131wXVLzgOLVWrMnGukST4/dfBv8go1PWsGicnK954W6FCGQ7
X3k9/Or9mCmo2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:54 2026 by rpki-client