Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: xh5YAkAAXaJMWBTOd06MLvZiN3C+GqlOBkidu9EZNH0=
Subject key identifier: 36:9F:E1:9A:1D:EC:14:6A:88:AE:36:54:F2:EB:C2:6E:6E:C9:26:C1
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019CABA1DB36AA8D22AD08C058D100036691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1535
Signing time: Sun 01 Mar 2026 23:00:37 +0000
Manifest this update: Sun 01 Mar 2026 23:00:37 +0000
Manifest next update: Mon 02 Mar 2026 23:00:37 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 9rZ6DGiBiRZZ+4/9kL9Fy8mmzGnsp6JCdcqXfAayBq4=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:db:36:aa:8d:22:ad:08:c0:58:d1:00:03:66:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Mar 1 23:00:37 2026 GMT
Not After : Mar 2 23:00:37 2026 GMT
Subject: CN=369fe19a1dec146a88ae3654f2ebc26e6ec926c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:0a:a3:81:da:13:ad:93:a9:ed:76:c9:e2:
ac:55:99:d0:3b:99:38:00:72:2d:be:aa:c1:0a:30:
7d:2f:e6:c5:fd:95:ec:cb:86:32:fd:ca:c2:67:9a:
a9:56:7c:f8:fb:b0:f1:03:35:66:ca:65:92:8c:94:
b0:0f:51:1d:04:80:ad:4c:43:f5:09:90:5b:e0:a3:
a5:a4:bf:44:1b:97:b7:f4:5d:87:51:45:d1:83:ba:
19:31:da:4e:12:ad:5a:12:19:99:c5:b8:15:47:23:
75:5c:d4:b3:72:61:0a:db:5c:06:06:a6:ed:80:ea:
6b:66:7f:3c:94:11:d3:f1:fc:24:9b:83:de:1b:2b:
e2:81:a6:b8:54:dd:c8:43:d8:93:3c:25:ed:a1:81:
9b:3c:7d:40:bc:cf:64:12:88:32:52:2f:46:b7:ae:
1c:d8:4b:b6:5e:f7:02:1e:f5:0e:e2:5f:0b:d7:94:
41:d7:db:7c:fd:72:72:f0:19:30:70:d5:28:62:c0:
62:94:e0:b0:3b:29:6b:d9:df:e9:5e:e4:f3:d8:2a:
b0:71:ff:9e:5b:87:af:63:73:f8:c4:0e:9e:0c:9b:
ee:7a:b8:64:c3:2d:16:ea:46:28:86:5e:68:4d:12:
d0:d1:50:9d:b5:0a:35:01:35:1d:b2:88:9e:2f:38:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:E1:9A:1D:EC:14:6A:88:AE:36:54:F2:EB:C2:6E:6E:C9:26:C1
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:b7:cd:39:af:18:19:16:a8:81:8b:da:e8:81:5c:c4:ea:
01:e7:66:3e:04:a5:6e:5e:8c:dc:1d:ef:40:da:1b:a7:2f:65:
ac:c6:e9:6d:f6:64:32:f7:14:bb:e8:1f:fb:c9:d3:1d:15:39:
5d:ce:49:43:33:8d:6c:da:09:f4:e5:e3:c3:ba:b5:3d:52:8e:
43:db:7a:b9:cd:a2:ff:09:b9:94:63:0d:15:21:3e:55:4c:f6:
5c:37:96:22:ae:e1:2f:8f:41:97:27:0c:02:3e:31:dc:8c:f3:
3a:c3:41:78:b8:81:5a:e6:4c:cc:05:cc:1a:5e:a7:08:3b:6f:
3b:b8:fc:20:27:c9:8c:39:cb:71:0c:b6:c3:93:b8:94:2d:99:
1f:1c:71:ef:f5:bb:8d:bf:c0:41:08:c8:28:26:8e:d5:4a:58:
ea:ef:df:e7:9c:0e:ac:2b:96:59:ee:29:03:fd:e4:58:d1:ec:
f9:e1:1c:4f:f0:65:e5:6a:48:97:9a:a8:4a:a2:ca:61:18:63:
b4:cb:ba:10:6e:67:79:de:0d:c7:91:25:33:51:25:c6:bc:7b:
7c:22:d7:7b:f9:2a:93:f5:9e:3e:d1:be:f7:49:2e:3e:4a:84:
24:05:cb:a0:03:9a:f5:eb:7c:bf:9d:1d:25:91:13:44:99:1b:
21:44:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:34 2026 by rpki-client