Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: 3SDOgTuiJXnO/Vvoh90PPnybqJsK/fKYUNa4uC/yhX0=
Subject key identifier: 1A:57:30:D5:57:D7:9A:78:B7:A8:4B:AC:5C:F4:40:47:4E:4E:77:1E
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019FA9AC657BA6282C4901AA55981E8539AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 17:01:15 +0000
Manifest this update: Tue 28 Jul 2026 17:01:15 +0000
Manifest next update: Wed 29 Jul 2026 17:01:15 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 1dh4A7TIULRt/6CQakwX7AaHCerCEa5JEM4CinODEac=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:65:7b:a6:28:2c:49:01:aa:55:98:1e:85:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jul 28 17:01:15 2026 GMT
Not After : Jul 29 17:01:15 2026 GMT
Subject: CN=1a5730d557d79a78b7a84bac5cf440474e4e771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:45:55:53:e6:60:1e:0e:6b:7a:3d:9d:0b:
92:8c:ae:fb:77:4a:f5:14:b9:a6:b3:cb:68:f9:e3:
b2:87:b3:f8:b5:d3:da:87:31:2a:72:e8:a8:d5:b9:
42:f8:33:48:d5:56:15:7d:8d:a4:24:8f:84:11:40:
de:0e:5f:e5:17:15:5a:9c:c3:f8:49:99:ce:1f:65:
ed:5f:38:24:03:32:1e:3d:35:c0:be:2d:48:2f:db:
6f:ff:51:2f:46:a3:4d:dd:85:c6:13:81:52:8a:e8:
34:41:53:6e:05:4b:28:6b:9b:93:91:42:3f:61:bc:
b5:b2:8d:a3:0e:85:88:14:78:d9:52:ba:cc:90:66:
40:6f:e2:27:1b:b3:25:7e:00:88:07:9f:dd:3f:c3:
af:c4:ad:22:1e:5c:1c:51:05:7a:ba:1c:cd:a5:dc:
12:4c:ca:46:53:12:f8:67:47:40:63:24:2b:7f:05:
ad:5f:b3:16:15:01:28:18:8b:41:70:86:0c:5d:8e:
39:20:a4:f0:e5:34:23:0e:54:d0:a8:17:69:f0:c4:
8b:e8:07:95:74:47:1f:fd:09:5d:51:3c:87:91:81:
76:db:0b:43:06:b1:1f:6e:75:4a:63:2b:43:a3:d9:
67:04:d7:f5:b3:be:1a:5e:89:e9:44:54:fd:2b:f0:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:30:D5:57:D7:9A:78:B7:A8:4B:AC:5C:F4:40:47:4E:4E:77:1E
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c1:dd:90:8a:33:0d:0e:b5:f5:3d:8e:48:9d:d2:71:41:a1:
bf:47:35:77:60:29:6a:57:75:ba:1c:a1:fc:4e:59:b3:8d:d6:
ed:b2:73:98:b1:84:1e:d0:92:40:7c:a3:00:d6:35:8e:32:d1:
e7:bb:41:73:53:7c:3f:df:73:11:16:54:c4:bb:df:ad:67:07:
0e:e6:12:b9:98:6c:9f:28:b9:5a:55:48:61:95:69:7a:2e:39:
ed:ee:a3:7e:6f:bc:41:1e:19:f7:0f:36:9a:d5:a2:e3:37:77:
0d:99:ee:42:ca:d1:43:08:5e:ed:35:12:1e:ed:1e:0b:1f:34:
26:5c:34:4d:07:04:91:de:72:19:44:5a:e5:25:55:00:7d:82:
8c:0e:9d:6b:ca:68:04:a7:44:c1:ef:cb:ab:9c:1d:dc:61:c2:
8e:5e:fd:05:3e:c5:87:02:49:e9:6a:68:23:8b:5d:75:71:06:
e9:1a:0b:e2:4e:8b:e3:c6:3e:e0:b3:94:df:ff:1f:86:74:61:
84:dd:21:ad:b8:31:b3:8c:73:e6:cc:dc:b3:4f:c1:e5:2b:7d:
56:e1:5f:30:02:c5:b4:56:7c:00:49:19:78:79:96:b3:d0:cd:
9d:35:b9:03:e4:cc:ca:36:34:6f:dd:d8:61:f1:15:e2:5d:b7:
e7:f6:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:40 2026 by rpki-client