Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: ajd0yz+Vu/08UVFKsHuHbfnhfQlegy5/S4k/NAmoe0o=
Subject key identifier: 6E:E8:74:98:C4:71:C8:0E:AE:6E:47:5E:F4:83:E7:E2:B5:15:DF:F5
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019FAA5052FECAB9BE31D78D958898352C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 16C2
Signing time: Tue 28 Jul 2026 20:00:18 +0000
Manifest this update: Tue 28 Jul 2026 20:00:18 +0000
Manifest next update: Wed 29 Jul 2026 20:00:18 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: yTKuUkdjlZlmaocz7Vp1DbEs0TE5xPvpONGxQp5qDs0=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:52:fe:ca:b9:be:31:d7:8d:95:88:98:35:2c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jul 28 20:00:18 2026 GMT
Not After : Jul 29 20:00:18 2026 GMT
Subject: CN=6ee87498c471c80eae6e475ef483e7e2b515dff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:76:27:7e:a4:71:57:d8:d6:94:40:9f:27:
db:99:c8:af:0d:b4:f8:a5:5c:54:a2:31:56:04:e5:
2a:67:ea:e5:1e:86:f7:99:64:ca:68:f2:73:7d:54:
79:39:f7:68:d0:26:99:a1:ab:ef:40:38:db:f7:9b:
46:a9:50:4a:70:5d:ab:69:96:c6:aa:96:42:b6:dd:
42:4d:33:dc:22:bb:00:2d:aa:c2:64:d6:d4:01:41:
bc:7f:f2:d1:05:e9:72:96:81:97:41:f3:8c:79:29:
30:c0:b6:4c:35:a7:7e:be:96:d7:40:73:4c:71:a8:
db:5f:ba:10:45:0c:02:a1:8c:9f:af:00:75:0b:a9:
d6:35:86:54:71:7f:f1:16:98:ef:d8:ea:16:9c:03:
ea:fc:d3:93:2b:e3:28:b0:cc:f7:b9:23:e5:27:6d:
f2:ab:fa:97:82:88:8a:ff:ea:f0:0e:94:be:ca:79:
06:b8:0f:93:ef:3f:62:9a:07:cb:13:f3:83:e0:46:
03:ca:26:63:05:75:99:e9:38:d3:70:b9:51:e8:15:
32:f0:c4:d0:a4:b5:09:a9:63:4b:2f:c4:1d:d7:c6:
8d:97:4d:02:e8:0a:70:25:ed:25:4f:bd:62:bb:c7:
4d:56:82:4f:22:70:e0:0b:84:c0:04:e2:7c:62:9d:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:74:98:C4:71:C8:0E:AE:6E:47:5E:F4:83:E7:E2:B5:15:DF:F5
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:65:6e:71:71:58:e1:f9:69:db:57:38:57:f8:85:2c:48:1b:
27:f0:bf:6a:50:41:d6:1b:4d:53:f3:dd:ea:6f:fd:69:09:03:
02:cd:02:61:22:42:bc:3e:e2:e5:e8:30:8f:35:83:c0:93:29:
7c:96:c0:87:b0:b7:ee:98:6a:0d:4c:1e:e8:17:b7:20:b1:4b:
67:28:17:4d:7d:84:82:60:30:7f:dd:71:51:ec:94:4f:a8:89:
e2:4b:60:cd:a2:2d:91:db:c5:34:d8:3b:42:d2:98:c9:08:47:
fd:03:db:32:3d:d7:86:91:2a:4e:65:ad:fb:d3:1d:d0:99:10:
95:f4:dd:ab:1c:9e:3b:a1:0e:52:0f:87:af:38:33:88:f9:ab:
06:48:c1:6e:bf:97:ba:9b:7d:2d:9c:5a:95:ac:97:92:d9:45:
1a:eb:4e:df:32:c9:9b:09:0d:7a:37:44:63:d5:c2:0b:3f:a9:
9a:4c:7e:87:1d:d0:b0:4b:61:82:22:2b:7c:1b:88:20:11:77:
6a:21:53:92:a6:18:b6:1b:1a:a9:13:24:78:5e:21:fa:ff:16:
59:ac:58:c0:cb:17:f1:da:aa:65:8f:92:ca:fe:1c:98:40:0a:
33:7a:75:b8:56:ff:0f:1e:34:2a:3a:bf:29:0c:22:a5:ec:b7:
d9:7c:09:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:53 2026 by rpki-client