Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: 2Kg+7M/7Iro6U4m3IOATYSpFSNoHqg0NMEcjiUMiK4c=
Subject key identifier: 06:FC:F3:EC:F2:F4:61:7B:FC:4B:FE:D8:BD:FB:DD:D4:CA:34:4D:EE
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019CAC476D208A3DA477B579D34013F61F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 0513
Signing time: Mon 02 Mar 2026 02:01:27 +0000
Manifest this update: Mon 02 Mar 2026 02:01:27 +0000
Manifest next update: Tue 03 Mar 2026 02:01:27 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: h90m7OQyhRixXcHzjVrAN+A38M2dwODJYzGaEDNk23A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:6d:20:8a:3d:a4:77:b5:79:d3:40:13:f6:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Mar 2 02:01:27 2026 GMT
Not After : Mar 3 02:01:27 2026 GMT
Subject: CN=06fcf3ecf2f4617bfc4bfed8bdfbddd4ca344dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:16:2b:c3:16:02:ef:e4:b4:76:e2:d6:4e:
78:46:28:1d:4c:e3:55:4a:f5:5a:a0:37:94:b9:11:
47:85:f7:ec:63:f6:9c:c9:62:35:d1:a5:c4:89:c1:
17:62:82:2d:f5:90:9a:45:13:d2:8c:6c:fb:ad:94:
01:1e:2c:c7:22:2a:11:3b:64:21:d4:c6:fb:fc:c4:
49:24:10:db:a4:b6:2c:86:23:d8:80:a9:f1:ec:50:
86:c3:ae:ed:a3:0e:4f:f8:d9:8e:ce:36:d4:82:a7:
3f:ff:a6:98:5d:97:c4:8e:7b:06:ed:73:f5:0b:11:
db:6f:fe:78:5c:38:59:bf:9c:3c:bb:e9:87:32:e5:
e8:ab:5b:7b:b3:73:2a:0a:d9:8c:22:be:fd:42:f6:
98:a5:ca:55:50:2b:c6:74:fa:cb:1d:40:d5:1e:c9:
78:32:2f:4f:ec:57:b7:aa:be:92:76:e8:84:5c:29:
49:38:6b:84:71:f9:c2:bc:ad:76:25:dc:8c:e3:19:
8a:2d:dd:1b:0b:76:ee:b4:57:dc:10:31:f9:fc:f4:
b4:9d:e1:a2:d3:71:df:d7:c8:c0:14:81:cc:90:3b:
57:cc:22:6f:12:0b:cf:cc:90:d1:db:0f:25:18:e9:
33:5a:eb:db:49:21:f8:04:53:cf:c7:f7:2a:8b:78:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:F3:EC:F2:F4:61:7B:FC:4B:FE:D8:BD:FB:DD:D4:CA:34:4D:EE
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:30:85:d3:d5:a9:fd:f1:79:43:71:8d:62:8d:a6:c6:82:
69:9e:f1:d5:70:bb:0f:4c:51:62:69:f7:05:6d:2a:2e:25:39:
e5:51:f8:ae:3c:ce:56:54:d0:93:db:66:78:eb:ca:c2:38:7a:
67:8e:37:b0:b3:3b:8a:a6:75:a2:a3:71:dc:4c:0c:62:6e:18:
69:f6:f7:50:0f:6c:c0:e9:84:38:a4:fa:bb:d6:10:56:96:1f:
40:66:90:84:8e:04:95:88:dc:97:29:88:44:56:cd:a9:0f:b8:
97:10:e3:9b:51:ae:05:36:d5:e5:a2:9c:49:b4:b8:9e:b5:5a:
a0:35:56:2d:0a:a8:a0:f6:6a:67:7c:24:dd:5c:40:1a:89:fd:
3c:66:b1:fd:d7:db:6e:a2:9c:27:7f:71:94:2a:c0:08:b0:e9:
3f:8b:60:9a:88:55:95:a6:d4:e2:cd:99:a2:b2:26:e9:2a:1d:
25:2d:f0:42:42:87:0d:4e:fb:1a:b8:8b:08:ce:ce:04:95:ef:
3a:df:11:85:a4:3e:b5:d8:ef:8a:1a:38:26:24:0a:a7:8a:17:
f3:d3:af:ee:b4:9e:b6:0c:32:59:be:3a:b4:47:93:0a:39:7f:
49:81:df:08:5a:6c:74:9e:c8:f2:b5:0b:a8:a1:7f:ec:da:37:
e9:fc:6a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:59 2026 by rpki-client