Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: IBY/oPMpYWjZhfWK7baQmt8fH3eh/qS0eDFpVTQlAD8=
Subject key identifier: FC:C3:BA:4A:30:C5:26:1B:FD:C4:D2:08:55:3D:0B:A2:B9:30:6D:25
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019EC0A3F9223C437E882D6E9DBE6DD63C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1649
Signing time: Sat 13 Jun 2026 11:00:32 +0000
Manifest this update: Sat 13 Jun 2026 11:00:32 +0000
Manifest next update: Sun 14 Jun 2026 11:00:32 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: bWXFHkjZE+jFc026d7d+kZM10kcnLGgxVSWJXc3j1/g=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f9:22:3c:43:7e:88:2d:6e:9d:be:6d:d6:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jun 13 11:00:32 2026 GMT
Not After : Jun 14 11:00:32 2026 GMT
Subject: CN=fcc3ba4a30c5261bfdc4d208553d0ba2b9306d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:22:89:9f:e1:8b:3b:78:7d:8e:ea:fe:af:
c7:f8:95:9d:95:3b:e5:a5:8b:df:ce:40:7f:b0:38:
94:d6:15:06:f6:79:19:42:89:80:98:3a:64:a8:34:
25:af:1a:33:5f:6e:a2:ea:39:e1:62:8c:2e:25:7f:
cc:b5:37:09:3a:fd:db:f3:4a:2a:69:0a:1d:24:1d:
43:25:36:2f:7d:c6:a3:fa:ee:ce:06:ba:3f:cf:6a:
a0:51:a6:e7:5f:1c:f9:d7:44:5c:c0:65:a5:49:d1:
af:3e:fa:09:de:b5:2b:8e:55:c3:5f:cd:32:11:0e:
39:28:51:35:38:c1:78:b8:b1:0c:5f:79:4e:71:7a:
c9:35:d3:f7:b2:ce:6e:64:79:5b:10:71:2a:91:dd:
8f:51:e0:d8:ba:48:53:8a:d2:19:e4:17:ff:b7:6d:
fe:69:19:2c:f9:82:16:b2:43:17:e5:6b:76:79:3e:
77:2a:ef:4d:2d:5d:d9:93:df:4c:b5:03:09:73:6d:
97:00:79:25:ad:8b:15:cb:ed:d3:19:f0:fb:c9:ee:
a0:89:fb:63:1e:bc:12:84:48:3b:3a:0c:45:06:f0:
97:2c:c8:80:1c:8f:d4:da:98:b6:3f:d5:37:c8:aa:
16:ab:d6:7f:5a:5b:13:bc:5e:fe:bb:54:01:60:6f:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:BA:4A:30:C5:26:1B:FD:C4:D2:08:55:3D:0B:A2:B9:30:6D:25
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:f5:db:07:42:b5:a5:b9:62:62:a8:b6:82:89:f0:0f:12:
4f:91:63:28:ef:b3:ad:c9:a8:73:be:32:22:d3:7c:8e:1f:fa:
25:c5:9c:b4:73:f8:59:3c:a7:c5:13:cd:76:6f:d3:a7:68:cf:
a1:b5:73:00:71:44:2c:3b:48:87:2c:cd:3f:24:61:f1:61:c7:
ed:7e:c9:ef:5c:5f:b7:f8:6e:ae:da:a9:90:57:f5:76:b6:97:
9e:f0:84:82:2b:9b:ea:79:e3:57:c6:2a:ba:ec:f3:03:3c:e3:
df:63:48:25:d1:22:b6:17:35:f8:bf:09:a3:57:ac:b1:91:7c:
67:9c:d3:ee:41:e9:b8:99:0c:20:d0:a8:26:70:63:b6:19:10:
2e:0c:28:01:c6:53:e1:1e:91:3f:f9:d8:b4:50:54:35:fa:56:
0a:f4:3f:87:75:38:8c:66:3b:ab:96:59:ce:f5:39:73:c8:1b:
4a:f1:66:08:03:de:c9:85:cc:ea:96:0c:73:0c:64:b8:6b:8a:
6e:66:b1:68:4b:bb:c8:b0:36:74:0f:5f:30:52:0d:9f:31:72:
20:3f:e5:b4:61:2e:b3:e3:bd:fb:2e:29:a2:97:d7:b7:14:ec:
bc:27:f0:58:95:11:70:b7:01:1e:49:94:38:91:5d:e1:29:42:
01:d3:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:38 2026 by rpki-client