Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: +Xo7AqVnhvkSjvI3akt2ybQ/KbAsy5/uP9S9xU4zk1k=
Subject key identifier: DC:03:CE:B5:B6:5A:AD:D0:47:29:72:CC:11:07:8E:E4:8D:39:B5:95
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 01A0C5FCADC3E8249DC2CB9B1742E4586FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0D55
Signing time: Mon 21 Sep 2026 22:01:06 +0000
Manifest this update: Mon 21 Sep 2026 22:01:06 +0000
Manifest next update: Tue 22 Sep 2026 22:01:06 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: hmKpYSv+8oHXPdHNRVstPwaUqnc3Ef6r057x13o+gIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:ad:c3:e8:24:9d:c2:cb:9b:17:42:e4:58:6f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Sep 21 22:01:06 2026 GMT
Not After : Sep 22 22:01:06 2026 GMT
Subject: CN=dc03ceb5b65aadd0472972cc11078ee48d39b595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:ff:87:c9:ff:ec:53:2b:db:9a:a7:fb:8f:
ec:ca:1d:93:8b:bc:ca:e5:ea:90:65:5d:31:29:f8:
b3:9c:1b:2a:86:76:c1:a0:ad:26:de:a4:22:73:b4:
24:59:59:a6:3b:2a:6a:a7:b1:88:6f:0f:02:03:8b:
6d:1a:6f:9b:dd:2f:2e:f5:65:3f:d8:ef:7e:38:c0:
19:ef:e6:23:66:c7:58:98:50:56:85:3f:a9:9b:78:
9d:b3:5e:71:e0:39:9b:f6:bb:5e:ad:2d:ff:e5:92:
5e:ba:25:f7:f2:85:6a:a1:26:7b:58:d0:1f:b4:26:
97:d4:f4:34:ca:75:fc:ff:c8:88:ad:e8:88:dd:f7:
7c:dd:30:d6:6b:32:5d:af:49:d7:f4:0f:d1:b6:ad:
f5:86:cb:3d:bf:90:55:a6:c0:f1:9f:59:3e:fe:b2:
9a:f8:38:e2:c8:f6:88:f2:60:eb:20:3e:ba:a9:51:
d2:d3:fb:e6:d2:ba:54:94:73:2e:aa:e8:c8:de:77:
cd:aa:ae:ed:3b:fc:d2:62:41:17:ba:25:ec:4b:7d:
67:3a:8c:30:e7:f4:9b:db:21:3d:e4:36:b9:8c:1c:
02:4a:17:51:cc:b1:44:a3:07:bd:77:23:e9:bc:88:
d2:38:44:f7:93:e3:7b:b9:dc:ed:b8:60:ad:99:48:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:CE:B5:B6:5A:AD:D0:47:29:72:CC:11:07:8E:E4:8D:39:B5:95
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:d8:7d:31:07:3e:bd:26:10:d2:2e:ad:f6:2e:9a:e3:c8:
f2:e0:51:5b:26:00:b7:26:53:71:49:28:60:f9:b6:eb:d5:bb:
09:01:5f:79:eb:cf:6f:d3:b7:2d:73:84:c2:a8:d0:0f:9f:ad:
72:ee:fd:1f:ef:52:26:05:11:19:40:d1:b3:40:e4:f7:36:0a:
83:c7:c3:34:f2:0c:e2:f1:5c:9d:f9:d5:88:f9:5e:5e:10:96:
ff:ca:18:d3:2b:51:2c:d8:0d:eb:5c:86:1d:90:ef:b9:19:03:
a9:e8:55:59:c8:8c:1d:03:da:db:22:2b:ef:20:fc:2f:47:82:
73:3c:16:f3:81:94:b3:7f:69:cd:e3:73:50:81:3d:21:65:ff:
2e:c0:d1:51:a1:55:3c:9c:4e:9e:13:b9:be:8f:ac:17:0c:29:
20:fe:ac:94:8d:80:89:8f:9a:54:28:a9:fd:df:d7:9f:62:6a:
ec:aa:08:36:03:ca:5d:aa:34:e8:30:26:7f:37:74:49:96:9c:
df:6d:e2:d1:42:5f:39:73:db:8d:81:17:15:83:f9:5b:ae:ae:
01:d1:75:2e:47:5d:94:cb:e9:ca:32:c4:46:90:1c:1d:12:71:
e2:a0:4c:07:4c:81:23:28:27:e8:8f:3c:51:be:3c:ae:a1:12:
f7:27:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:12:43 2026 by rpki-client