Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: EIiCNznMQcuG8oHLWq8ozw1BjLNyFBCk9mrA1Jtrl6c=
Subject key identifier: 04:16:38:AC:02:BB:94:9B:F5:D0:FD:21:61:A9:82:17:90:92:F1:81
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 019FAA1971421383AF44F32D3DEAC7148D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0CC2
Signing time: Tue 28 Jul 2026 19:00:21 +0000
Manifest this update: Tue 28 Jul 2026 19:00:21 +0000
Manifest next update: Wed 29 Jul 2026 19:00:21 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: Xp0jZxFC8D1TRHJJ5WV9QHSdY1rg+1UGCSQxBWZOnbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:71:42:13:83:af:44:f3:2d:3d:ea:c7:14:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Jul 28 19:00:21 2026 GMT
Not After : Jul 29 19:00:21 2026 GMT
Subject: CN=041638ac02bb949bf5d0fd2161a982179092f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:75:ce:b2:b7:80:66:95:1d:42:3c:86:cc:
25:3a:2d:93:92:5a:02:5e:f0:97:82:8c:8a:e0:a5:
58:b9:2c:b5:77:26:19:75:0b:c9:56:f1:80:c1:34:
0a:46:00:ce:ae:2b:2e:e3:e9:bf:6a:9a:c8:c9:6a:
b1:20:33:f3:97:66:76:93:58:b3:fe:3e:5c:20:fe:
ec:5d:c3:b0:b7:5f:a4:71:14:f0:7c:2e:ed:70:b8:
f7:69:3d:73:89:33:5d:80:4b:b5:e3:70:4e:06:cd:
f2:b1:4a:4e:69:1c:1f:f7:bb:9b:e5:37:ae:bc:ce:
a1:7f:e4:c0:f6:f9:8e:06:64:5d:02:6a:bc:09:93:
5d:6d:e3:80:ef:28:7c:79:34:d0:57:67:51:05:b3:
ea:bc:18:60:e8:dd:20:be:a4:a2:7e:b4:65:db:32:
c0:f8:ec:32:c6:36:cf:47:da:37:2c:6e:35:21:92:
f5:25:9e:5e:66:e4:ba:23:17:0b:e2:7d:a6:0a:82:
e5:f3:a0:bc:60:3a:18:84:5e:17:3f:7f:83:80:cd:
08:78:47:38:51:32:39:d7:b0:d0:47:17:12:51:4d:
be:5d:04:74:5e:4a:b8:bf:bd:7d:61:80:22:50:5f:
4f:b8:d1:ed:6e:36:71:ee:26:f2:7d:f8:e2:77:99:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:38:AC:02:BB:94:9B:F5:D0:FD:21:61:A9:82:17:90:92:F1:81
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:dd:6a:65:c0:34:30:b6:72:2b:24:4a:3e:43:ea:b2:e8:
74:db:b7:51:54:fe:77:fc:84:2b:4d:2a:03:05:43:d1:e2:fe:
8c:26:60:25:0a:46:7b:cf:df:e0:14:91:c9:15:55:ab:65:2d:
ed:c7:33:0d:30:07:7d:0f:4f:4f:e2:75:ef:c6:e7:28:8e:94:
7a:13:8f:35:f5:04:b4:68:58:c8:8f:f6:3e:53:7d:65:0d:74:
45:3e:23:56:6f:49:c6:03:f5:9a:52:f2:97:b7:98:16:ca:d6:
03:e1:fc:a8:30:5d:d3:89:37:1c:55:c7:3c:2a:33:66:6b:86:
f0:0b:47:79:07:ee:55:b3:39:63:53:15:f3:86:9b:54:40:d6:
5c:77:6d:e6:1d:56:9c:28:0a:a2:8f:c7:21:37:2b:32:b5:2b:
b9:ad:b0:ae:22:48:15:c2:19:0c:46:f4:4f:76:91:1c:d5:1c:
26:f7:ca:e3:12:00:15:8c:b6:26:e0:f3:03:97:57:bf:2f:e7:
96:96:2e:fa:27:68:ec:c8:cc:c1:e6:f2:5d:c4:ae:2c:df:6b:
ee:d0:f6:8f:4a:b1:db:14:c4:62:50:f1:ea:c5:c6:cd:5e:39:
ad:62:86:e8:c9:61:d8:6c:a7:7e:ed:6d:51:a3:36:e0:b2:81:
a1:e5:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:02 2026 by rpki-client