Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: wleB8Daxj/ckTp3d+rBg3mXPqfUrBmv19nPVjECddHs=
Subject key identifier: 0F:AC:6E:B1:9F:8D:66:8C:0F:58:F0:37:E7:08:F3:2E:BC:EB:4F:7B
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019FA7BD4CBB2AD8E5AC50B48EDC2BD1ED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 08:00:28 +0000
Manifest this update: Tue 28 Jul 2026 08:00:28 +0000
Manifest next update: Wed 29 Jul 2026 08:00:28 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: NKdaNz3BeIlzK0LikzY7FEyXZm4uIGMOP0uQwqi9vy4=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:4c:bb:2a:d8:e5:ac:50:b4:8e:dc:2b:d1:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jul 28 08:00:28 2026 GMT
Not After : Jul 29 08:00:28 2026 GMT
Subject: CN=0fac6eb19f8d668c0f58f037e708f32ebceb4f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:0d:a8:80:ce:84:d3:27:9b:8f:e8:41:39:
49:e5:10:e0:8b:24:f7:a9:49:42:b9:09:39:9a:78:
38:68:8d:25:4e:a1:7e:a8:bb:25:17:a2:5a:a4:34:
34:0b:ca:3c:a9:6a:3d:1d:2c:d4:21:9b:10:d2:d1:
77:c4:14:14:b2:69:03:02:fb:08:a3:56:30:8f:93:
bc:5f:25:29:9a:fc:14:c5:f4:13:66:9d:a6:72:2a:
15:23:96:8e:07:e2:b8:dd:3e:09:01:31:8f:6c:d9:
1d:62:8a:31:a1:6c:51:97:45:d2:79:ef:8d:44:6f:
3f:c8:90:af:27:16:3f:e4:df:6c:c4:f4:e8:85:d4:
eb:b7:3b:46:75:3e:1d:74:f4:d3:a3:cd:1f:33:e8:
25:b5:bb:d5:3b:03:77:f9:46:c1:21:ca:a9:eb:c0:
dc:fc:05:38:e3:cd:19:b6:fc:79:2b:13:c3:81:36:
7b:a6:84:45:cc:38:cd:78:26:8f:46:ed:b6:20:35:
ec:19:0e:f6:15:50:a0:1c:db:5a:e5:aa:59:52:7a:
22:6f:dc:06:c4:26:61:45:c6:81:5d:cd:b3:1b:1f:
fe:8b:0c:24:ae:b6:7b:0a:7e:87:26:d1:46:9b:2a:
d4:3c:74:03:91:da:63:3b:0b:aa:79:d9:91:4a:4d:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AC:6E:B1:9F:8D:66:8C:0F:58:F0:37:E7:08:F3:2E:BC:EB:4F:7B
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:df:fd:a0:23:9a:17:24:25:2b:a0:35:22:ad:39:ab:70:
11:cb:f3:f5:1a:ae:bd:84:c3:2a:ea:dc:d0:ff:4a:62:d5:5a:
34:e4:d1:4e:26:a5:1d:84:84:b4:ba:1d:2c:7f:c8:d5:70:9b:
41:da:0c:65:a4:01:5b:4e:21:0e:a6:00:f2:ea:e4:c0:ff:09:
c8:50:bc:e4:cf:6d:0d:69:9b:68:57:2e:f4:d0:c0:fa:ab:85:
0f:55:09:d6:46:50:b0:59:0f:2f:3b:6b:b1:ab:6e:af:9e:25:
0e:f8:ef:19:c1:68:a3:1f:a8:86:ac:1c:c3:10:a8:32:24:6a:
96:95:0a:48:17:f6:1c:7e:87:b0:51:8f:37:32:ee:9a:d6:b1:
59:67:bd:8f:87:66:20:b5:fb:9b:fc:81:25:37:99:95:32:2f:
2b:46:75:f0:e8:7c:ea:6c:09:d5:2f:df:86:f7:ec:44:2c:f9:
20:e1:34:2a:d7:0d:b3:87:74:0c:15:30:b1:da:20:d1:47:65:
2b:79:6e:d8:db:51:81:3f:4a:5b:f2:fa:ab:fe:97:30:14:8f:
81:12:ee:92:03:e1:5f:20:97:a0:0f:88:fa:b1:b6:57:12:9d:
c8:f0:5a:71:1e:8f:0f:58:0c:0d:07:f9:14:0f:74:88:f4:3f:
9f:80:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:53 2026 by rpki-client