Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 8zAUe4sjG2SqUcNydBNnQL1RO3l9kGY9PHuIcb/pRtw=
Subject key identifier: CB:01:CF:CD:EC:C6:B0:90:A0:AC:06:F2:FA:A3:9D:E7:7C:B5:E0:8A
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019D98F430C3BC6F7CFD1F813BE634B21DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0BB0
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: Hf0MEPMu1zgu9YBrAvluc+heONgX0ZIvq6IWLh+7msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:30:c3:bc:6f:7c:fd:1f:81:3b:e6:34:b2:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=cb01cfcdecc6b090a0ac06f2faa39de77cb5e08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:d9:f3:b0:88:46:87:1f:e2:f6:b9:80:da:
77:73:96:ed:40:b5:57:54:4b:6b:d5:ef:e0:3e:16:
db:9d:c1:5d:94:34:de:45:2f:6f:5d:d3:ca:5a:6b:
70:87:7f:01:83:d3:4e:ac:bc:e2:20:31:83:8e:b6:
ee:bb:05:22:0e:d4:2f:e1:04:ae:47:dc:6e:e5:e2:
55:9e:c0:f8:ab:49:08:ea:4f:0d:18:a4:c1:3a:dd:
2d:c1:e9:c0:51:97:8d:9b:f7:92:00:36:2c:8c:6a:
33:7f:a8:5f:0f:86:e0:f9:a6:f5:61:5a:91:3c:11:
5a:2e:68:80:26:e9:12:20:10:33:5e:a9:1b:2a:1b:
91:7e:ab:3b:74:bf:55:4f:f3:eb:39:f3:2c:25:73:
8e:d8:d6:5f:69:77:9a:0a:f5:03:0e:70:c3:e5:e3:
e4:39:4d:17:97:4b:9b:18:5a:ce:4c:41:0d:38:db:
18:5d:04:cf:40:84:12:f7:c3:0b:1e:6f:4f:42:91:
65:93:c5:23:56:c8:ec:01:be:bb:03:db:36:77:1f:
e6:35:ce:f7:08:9e:24:0e:71:a8:7d:9c:cf:8f:27:
6b:fa:3e:59:53:ab:04:ae:d3:57:28:0a:13:8a:52:
06:7a:51:84:44:c3:b5:b5:f6:e4:c2:81:a8:a8:13:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:CF:CD:EC:C6:B0:90:A0:AC:06:F2:FA:A3:9D:E7:7C:B5:E0:8A
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:52:ff:78:54:8f:ee:00:d8:79:fe:55:d2:7a:bb:87:72:
f5:e5:bf:ba:d5:b8:d4:be:15:f4:1b:64:31:72:c6:ad:97:97:
b7:e2:77:06:b8:cd:88:97:fd:29:03:7a:5d:b5:ac:48:01:0b:
af:46:25:4b:b7:4b:44:0e:e4:86:c6:ca:1a:7c:dc:88:eb:47:
b0:1c:12:9d:5e:fe:95:6d:1f:8c:ee:8c:58:4d:80:38:7c:77:
d1:b5:9b:e8:f5:91:fe:4d:c2:ce:6d:48:2d:8e:4a:ab:c0:48:
a9:95:74:95:55:b1:3e:49:4d:47:cf:c8:5b:0c:07:45:97:70:
f4:1a:27:12:ad:ad:b3:68:34:28:14:58:68:f8:3a:46:b4:ca:
62:a8:70:70:cf:3e:82:8a:17:26:72:e5:20:4a:b7:3e:36:c8:
c3:91:eb:18:19:02:47:3a:c6:40:29:44:7a:64:77:26:cd:d5:
d4:8b:b6:2a:4c:6b:11:80:bd:ec:b8:fe:c0:89:d2:54:94:a0:
29:12:5c:90:41:7a:bd:31:d3:07:35:3f:41:5e:91:f9:2f:ea:
3a:27:45:fd:45:94:44:12:34:99:b3:0b:dc:f9:e8:40:87:94:
e0:9c:51:1d:f4:57:c9:94:ed:62:91:b5:de:c4:8d:3c:0b:f9:
d6:f7:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:22 2026 by rpki-client