Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: YI+YZwz4rdTr1//O1lKqTaGWmmTYS8YKHftdvroHLyQ=
Subject key identifier: 47:C3:FC:0D:42:97:45:4A:EC:4B:99:0C:CB:E2:DD:4E:CB:02:40:92
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01A0F3437B54999B99872FBB17D203575D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 074A
Signing time: Wed 30 Sep 2026 17:01:21 +0000
Manifest this update: Wed 30 Sep 2026 17:01:21 +0000
Manifest next update: Thu 01 Oct 2026 17:01:21 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: HzXv3NunGJQebetGw6iO+sZRCCF8K9ug3DGU6TzuRkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:7b:54:99:9b:99:87:2f:bb:17:d2:03:57:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Sep 30 17:01:21 2026 GMT
Not After : Oct 1 17:01:21 2026 GMT
Subject: CN=47c3fc0d4297454aec4b990ccbe2dd4ecb024092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:2a:d8:17:a2:01:5e:21:19:a7:45:e3:7d:
10:2b:a4:8a:92:7d:e5:de:0f:65:3c:55:f1:0f:15:
9d:59:de:1d:f8:9d:6f:68:fc:75:53:27:6a:7a:9e:
ff:98:a6:24:8f:1f:4f:80:07:c9:f1:2b:a0:11:c5:
f1:db:4e:9e:97:30:b0:cb:c9:14:a2:e0:e7:85:1f:
27:11:87:22:1e:67:6a:71:d3:e6:ff:f9:f7:ad:fe:
a5:30:80:3c:9c:ce:b6:1a:93:0f:01:67:23:63:a1:
04:12:3c:e4:0d:eb:19:25:48:7d:07:38:4e:b4:c3:
11:d4:3a:b5:1d:18:be:3e:78:30:4d:ee:58:25:4c:
e8:5c:d1:99:51:90:9a:83:3a:9c:a9:fb:eb:7b:55:
02:94:f4:3c:2a:e5:8e:b7:b0:6d:1e:ee:15:c5:cc:
03:c0:a7:63:78:7f:a5:67:86:00:85:43:cf:27:da:
7f:15:ee:1f:cf:aa:ea:e6:b6:f9:ad:bc:3d:c6:64:
31:90:a5:36:72:b9:83:4c:42:d4:70:d8:a6:2b:4c:
92:d1:26:4c:c8:25:61:cc:27:24:5d:6d:71:01:20:
ff:ff:91:11:0e:93:f7:01:c5:e5:b3:4c:3e:81:37:
63:92:d3:2f:87:36:85:67:4d:f3:1c:1b:c4:51:b3:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C3:FC:0D:42:97:45:4A:EC:4B:99:0C:CB:E2:DD:4E:CB:02:40:92
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:21:86:60:84:ee:4b:96:cb:a9:d8:2c:7f:f8:a1:d5:d4:
23:41:c6:8b:4f:f2:11:a6:1b:d6:87:e0:12:55:05:26:3b:c0:
bc:c0:57:59:0c:57:d9:83:f9:13:55:c9:5b:69:46:1b:a5:42:
94:2b:a4:29:2b:8a:c0:57:66:42:9d:da:71:24:1c:68:99:6c:
20:fd:85:c3:de:a7:a3:8c:a2:d7:8c:bc:8d:ad:3a:8d:e6:35:
7d:51:42:fe:e2:b9:f4:ff:96:ff:f0:a9:9d:ca:da:67:8f:20:
b6:37:07:43:70:6d:84:2c:0e:30:90:14:f0:8d:92:26:66:a5:
4d:fb:dc:8b:51:4f:1d:17:5e:f9:76:6d:f2:11:ce:b0:2d:5f:
22:b3:26:f3:37:ae:d6:31:f5:3e:62:91:29:9f:7c:b6:5a:ed:
62:35:76:3f:3b:5d:3b:77:5e:4f:0b:29:4c:45:92:9d:3a:ba:
39:6c:ae:06:13:13:12:d1:bb:20:c9:22:2e:d3:30:8a:7a:50:
88:53:dc:e2:08:da:ac:78:04:ec:4b:92:19:07:c2:55:1c:78:
91:05:1a:29:f5:1d:e4:8f:87:56:5e:69:ea:38:a9:0e:3e:59:
f1:76:ee:72:a6:a0:e8:15:d1:80:89:7f:bf:6f:57:7d:92:83:
42:d0:e0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzQ3tUmZuZhy+7F9IDV11MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjNlNDIzYmQxZTk3MzZhNWY1ZDc4NGVjOTI5OWQ1MDgy
NzI3ZGMwHhcNMjYwOTMwMTcwMTIxWhcNMjYxMDAxMTcwMTIxWjAzMTEwLwYDVQQD
Eyg0N2MzZmMwZDQyOTc0NTRhZWM0Yjk5MGNjYmUyZGQ0ZWNiMDI0MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTIq2BeiAV4hGadF430QK6SKkn3l
3g9lPFXxDxWdWd4d+J1vaPx1Uydqep7/mKYkjx9PgAfJ8SugEcXx206elzCwy8kU
ouDnhR8nEYciHmdqcdPm//n3rf6lMIA8nM62GpMPAWcjY6EEEjzkDesZJUh9BzhO
tMMR1Dq1HRi+PngwTe5YJUzoXNGZUZCagzqcqfvre1UClPQ8KuWOt7BtHu4VxcwD
wKdjeH+lZ4YAhUPPJ9p/Fe4fz6rq5rb5rbw9xmQxkKU2crmDTELUcNimK0yS0SZM
yCVhzCckXW1xASD//5ERDpP3AcXls0w+gTdjktMvhzaFZ03zHBvEUbP8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfD/A1Cl0VK7EuZDMvi3U7LAkCSMB8GA1UdIwQY
MBaAFArz5CO9Hpc2pfXXhOySmdUIJyfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEt
ZmUxZTkyYzM2YWRiLzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEtZmUxZTkyYzM2YWRi
LzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONUhhmCE
7kuWy6nYLH/4odXUI0HGi0/yEaYb1ofgElUFJjvAvMBXWQxX2YP5E1XJW2lGG6VC
lCukKSuKwFdmQp3acSQcaJlsIP2Fw96no4yi14y8ja06jeY1fVFC/uK59P+W//Cp
ncraZ48gtjcHQ3BthCwOMJAU8I2SJmalTfvci1FPHRde+XZt8hHOsC1fIrMm8zeu
1jH1PmKRKZ98tlrtYjV2PztdO3deTwspTEWSnTq6OWyuBhMTEtG7IMkiLtMwinpQ
iFPc4gjarHgE7EuSGQfCVRx4kQUaKfUd5I+HVl5p6jipDj5Z8Xbucqag6BXRgIl/
v29XfZKDQtDgJw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:53:03 2026 by rpki-client