Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: 68LbfnMSl8ETu6SbNAVd2dlaPXNy6IwWRd7xD78k9pI=
Subject key identifier: CD:E8:11:8D:B3:3A:75:7A:C4:5A:0C:4B:9E:ED:B2:66:CD:DF:CE:1A
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019FAAF51EC744AD972F0B1261E1EBC09EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 06A0
Signing time: Tue 28 Jul 2026 23:00:18 +0000
Manifest this update: Tue 28 Jul 2026 23:00:18 +0000
Manifest next update: Wed 29 Jul 2026 23:00:18 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: ydbHHi7kfICdgYI3um5m1ntxQMtOWlLKYXVSHlngl0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:1e:c7:44:ad:97:2f:0b:12:61:e1:eb:c0:9e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Jul 28 23:00:18 2026 GMT
Not After : Jul 29 23:00:18 2026 GMT
Subject: CN=cde8118db33a757ac45a0c4b9eedb266cddfce1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:54:05:65:44:fb:3e:50:2d:59:b6:98:93:
28:f8:6b:f6:dd:11:dc:a7:dc:9c:77:ed:ae:4a:84:
e5:81:0d:91:41:08:77:70:78:45:8a:d4:e9:f2:66:
5f:f5:73:3a:c2:e3:a6:c1:e9:e1:93:82:49:d4:3a:
ec:68:d1:3d:76:70:9b:b2:6f:5e:a5:af:13:30:3d:
39:12:a6:a6:cb:13:ea:d3:b3:ff:5c:c3:82:de:b0:
de:c9:81:e4:ab:e0:9c:72:81:5e:2e:db:1d:22:e7:
87:e6:ce:2d:57:56:cc:bd:c8:9e:b1:53:82:47:43:
b0:ce:71:b3:50:a5:c3:42:34:8d:31:ce:66:5b:3d:
03:91:3c:7f:6c:90:d6:b8:14:81:db:e7:df:95:67:
96:e6:84:d8:24:f2:b0:fe:72:80:4c:6a:ff:d9:d5:
c1:ad:df:dc:05:d4:6c:85:e3:31:7a:39:f5:3a:fa:
a9:e4:8e:94:40:24:98:78:35:17:c4:01:6d:98:26:
69:69:1c:59:a9:89:26:b5:ff:c0:0b:7a:34:08:8f:
24:5c:67:cf:fe:ae:cf:9a:15:84:de:96:d6:f2:09:
0d:59:d7:63:34:4a:e0:0a:47:b8:5f:cc:2f:1e:d0:
d2:3b:60:84:a2:5f:00:6e:96:81:34:a1:1a:1b:6c:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E8:11:8D:B3:3A:75:7A:C4:5A:0C:4B:9E:ED:B2:66:CD:DF:CE:1A
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:27:b2:ee:d8:f1:84:fe:52:4c:85:ae:06:b0:d6:52:d2:
55:dc:47:3f:5f:a3:13:83:5f:30:f2:2b:9e:da:53:d0:4d:62:
50:77:fc:47:08:a0:7a:54:d8:b4:78:cb:7f:31:49:c7:19:d3:
22:46:4f:3c:f4:e5:10:b8:6d:46:f8:fe:7b:2e:69:78:d8:67:
98:65:1a:85:25:99:2f:00:f0:f0:32:13:b8:b8:77:dd:ef:5d:
43:b3:71:19:a2:a7:a8:b0:f2:e0:37:d2:bd:1e:e2:28:62:c3:
93:43:f0:b3:f3:08:8b:97:d3:4f:9f:b7:08:d5:a7:0b:b9:8c:
c0:ec:df:7c:43:f6:a7:ec:8b:e9:47:73:26:cb:e4:e8:ef:b2:
ea:1e:79:b6:72:87:15:38:0b:1c:1c:2e:ba:73:77:bb:52:48:
93:15:87:de:a3:b8:64:85:af:a3:1f:3d:74:fc:0d:e1:f8:85:
83:78:2d:16:63:fe:64:28:01:07:ff:68:d6:2d:db:e8:06:ad:
5d:de:33:86:67:7a:c8:54:b1:ed:1c:67:de:01:13:79:c6:5f:
d7:b9:d3:e2:21:a1:cd:9d:c1:e6:fe:50:d7:d7:ad:be:f4:7a:
77:b5:1d:f1:9b:ee:dc:06:96:57:95:8a:6e:28:e5:2a:ce:52:
7c:41:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:14 2026 by rpki-client