Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: dwBRoqz525bhVM9/zJBUJfUb2LZDx5YzZCqUW/EK9N4=
Subject key identifier: 66:B1:1C:EB:0E:B3:77:7E:48:21:A2:AC:9F:9A:D0:F1:4F:50:81:B7
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019D99CFD60312D29AB235EC632A8C1B6C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 058E
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: fqssgVvCPC7AjtM4+zFuNuuY0BxcEAWjNtF2Cm8uIAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d6:03:12:d2:9a:b2:35:ec:63:2a:8c:1b:6c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=66b11ceb0eb3777e4821a2ac9f9ad0f14f5081b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:55:74:59:b7:62:22:59:e0:e2:61:a1:04:
b1:4d:26:8b:b7:4e:32:2d:19:c5:61:47:8a:ab:fc:
3f:e0:ab:3f:c0:70:d8:96:23:87:82:de:9e:26:0a:
d7:7e:85:08:1e:92:ee:2c:ed:06:13:b0:03:e5:18:
18:66:2a:93:60:82:9e:cd:ab:01:81:b7:d7:dd:04:
35:53:32:61:0d:78:f2:e6:5c:0a:b8:cd:93:7e:10:
d8:ec:22:fe:52:49:05:0d:29:18:5c:d4:15:3f:29:
a6:4b:f3:e3:19:d2:2a:85:bf:b3:87:09:54:c5:ff:
04:65:24:ab:90:10:55:9b:32:24:ac:82:3a:17:9d:
4d:e8:28:14:9e:be:0a:d3:75:42:27:e7:6d:c0:a8:
5e:b9:bc:7c:a9:63:0e:c9:ec:da:92:03:fe:79:3e:
b6:3b:a2:aa:3c:88:4c:fb:bc:9a:60:51:44:2f:ea:
70:d5:a7:50:f8:95:38:37:ad:fc:b3:6d:02:5e:47:
4d:c4:63:46:16:b0:ce:46:17:b1:33:b9:69:b5:88:
82:9d:04:37:ee:d2:22:36:f5:0a:f1:33:ca:00:23:
a2:7d:65:58:0b:a4:bf:e2:bd:8b:08:cd:8a:36:07:
17:2b:c5:99:9e:8c:b1:58:c7:de:f1:72:08:79:d4:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:1C:EB:0E:B3:77:7E:48:21:A2:AC:9F:9A:D0:F1:4F:50:81:B7
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:20:22:7e:20:44:25:6e:15:63:45:14:f3:5e:f8:20:b9:
b3:3c:60:4c:89:90:06:d8:2a:df:ef:de:6f:f9:6f:d1:4c:81:
d2:54:ec:e1:1d:2d:96:96:ce:2d:90:92:f1:21:51:24:0a:5e:
94:4c:cb:ca:b6:ae:cb:55:5a:60:0a:1e:23:50:5e:39:9f:26:
cf:9f:d3:e7:fc:81:83:3e:57:1a:c6:89:28:ea:0e:15:43:14:
33:9d:f5:d4:e7:0d:17:a5:9a:a4:1f:37:7b:8b:96:6b:06:75:
d5:79:ca:1f:80:1c:ff:69:07:20:30:39:68:b2:bf:56:c2:aa:
aa:fe:8f:07:4e:ec:32:63:89:b4:a8:3d:7b:99:fb:05:ae:86:
e0:32:77:25:9e:4d:19:29:8c:1a:f0:a8:be:6a:89:2b:ac:8a:
10:e8:e4:ea:06:ce:ba:22:db:a6:2f:d8:91:ec:05:c8:25:90:
08:e6:f8:af:00:77:08:99:83:80:0c:3e:f0:b1:38:2c:56:f9:
a5:c1:b7:4c:6f:78:6a:79:0a:c4:7a:c6:11:6d:e9:bd:e4:11:
e5:08:8f:48:9b:c1:ff:14:7b:d9:10:4d:a5:ea:08:b2:cf:65:
ad:0d:27:0b:e6:90:fc:c9:12:1c:6f:e1:20:99:27:9a:6e:ea:
49:8a:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:37 2026 by rpki-client