Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: GcivYx4adeGcS2OIXVtgxru5DP7w33BrbaRGpumxCk4=
Subject key identifier: B5:70:0A:38:C7:DE:DF:71:1D:8D:79:26:BD:C8:CE:79:38:68:9F:51
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01A0C632C0029115F5D096EA8EE8C68A581B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1755
Signing time: Mon 21 Sep 2026 23:00:09 +0000
Manifest this update: Mon 21 Sep 2026 23:00:09 +0000
Manifest next update: Tue 22 Sep 2026 23:00:09 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: gF2644gLYtaid8wxDZQPrvDqjzdSq1t8kOxqfhwB50k=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:c0:02:91:15:f5:d0:96:ea:8e:e8:c6:8a:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Sep 21 23:00:09 2026 GMT
Not After : Sep 22 23:00:09 2026 GMT
Subject: CN=b5700a38c7dedf711d8d7926bdc8ce7938689f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:a5:48:1f:35:67:17:b1:33:38:6a:19:a1:
be:17:e8:55:7d:77:bc:a3:0c:29:3d:e8:ed:fc:d8:
b3:07:b6:21:bd:24:61:7f:52:79:54:e7:2e:d5:10:
24:4e:09:46:65:91:18:34:42:e8:bc:94:da:39:51:
21:4c:d9:ea:60:67:43:6b:0f:ec:39:76:87:67:00:
31:2c:b5:96:f6:8a:33:fb:74:17:ff:c5:3a:ca:2a:
e3:fe:3d:88:25:0d:05:2b:df:5a:e7:89:27:99:e3:
72:39:12:01:72:6e:1f:81:12:fb:f4:cb:62:d2:57:
09:e8:0e:a0:48:b2:83:ff:e9:ec:b6:55:ef:5d:7f:
06:fc:76:b5:a8:ac:e2:c5:22:dc:2f:e4:2f:cc:1e:
17:9d:62:f8:c6:e0:e9:dc:ed:f1:cb:e5:25:52:9b:
e5:7b:d1:44:ec:f8:b2:6b:9a:ec:a2:25:95:c4:1a:
24:a7:f9:cf:ab:1e:19:3e:51:b9:f5:1e:4c:3e:ab:
f4:a0:98:d2:96:94:51:e9:85:72:5c:f9:1d:46:d3:
e8:6e:7e:a7:2b:cf:ae:43:44:ff:90:35:68:38:e2:
e7:40:f8:1a:19:be:d4:28:03:72:d8:0f:85:53:10:
83:71:2b:77:f7:94:79:39:c1:99:93:41:67:31:e1:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:0A:38:C7:DE:DF:71:1D:8D:79:26:BD:C8:CE:79:38:68:9F:51
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:e8:cc:bc:15:a0:96:cb:59:c5:c9:f1:ed:2c:56:f9:29:
6d:f1:ea:57:66:f0:06:c0:af:50:28:8b:ce:c0:13:98:40:f4:
6f:56:fa:39:8e:66:24:07:58:4c:9e:70:ae:33:5a:da:3f:e5:
a3:83:f6:95:85:76:21:24:c4:5b:ae:f0:d1:e3:19:60:f7:38:
be:3d:bd:af:46:52:b1:f1:95:7d:88:66:d8:7a:0b:ad:6a:70:
0e:cf:0a:b2:fc:b6:ad:20:e7:8b:55:f5:f1:ec:fb:74:24:a2:
c6:49:e5:dd:6c:7b:61:94:3b:e0:16:e8:bb:60:2a:15:65:51:
14:53:ff:90:97:73:06:fa:ec:2e:40:ea:e7:d6:73:ac:82:db:
17:6e:b6:11:bb:5e:dd:53:06:5e:9e:e6:67:11:55:0c:05:c0:
cb:a1:17:32:cf:ff:bc:ba:a0:b6:60:a4:c0:5f:0e:b6:8e:9c:
ae:dd:f5:df:16:79:eb:ca:c1:d8:f0:18:97:9d:8e:f9:7d:25:
30:18:0c:49:78:51:64:1a:ae:3e:d7:46:2e:03:fe:15:48:68:
14:a3:6d:fa:78:bc:5e:1e:ed:4e:1d:c0:15:c9:a9:07:96:fe:
70:41:ee:81:20:6d:66:d6:9a:32:b8:89:da:0f:af:f3:05:84:
4d:b1:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:22 2026 by rpki-client