Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: Uwci3yyPpcZaad3gw2TM9plaWIDTD/lrLb7xv3iixZg=
Subject key identifier: 0F:66:15:9F:84:5B:A3:00:E0:D3:C1:CE:14:34:BD:9B:A5:55:01:41
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 019D9818D0F9B51774463A831E57A0D5884A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 21:00:56 +0000
Manifest this update: Thu 16 Apr 2026 21:00:56 +0000
Manifest next update: Fri 17 Apr 2026 21:00:56 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: ZVpbJWptSeNWqF8mlhQsgWbg53U3IcQS96FeWKv3dLg=)
2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d0:f9:b5:17:74:46:3a:83:1e:57:a0:d5:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Apr 16 21:00:56 2026 GMT
Not After : Apr 17 21:00:56 2026 GMT
Subject: CN=0f66159f845ba300e0d3c1ce1434bd9ba5550141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:bc:ca:f9:98:4b:01:c7:46:a9:fa:96:a2:
b4:33:32:8c:be:df:29:bd:0c:63:a7:14:44:bb:d5:
be:7d:b9:bf:43:d7:2e:9f:11:9b:f4:be:05:1d:35:
bb:4f:c6:87:8a:2c:db:a3:c3:c5:90:36:27:21:54:
bd:a5:ce:b0:3a:f7:74:93:03:d2:ca:b3:f4:3b:9b:
b5:99:58:f3:5e:4c:e4:58:71:4c:c0:18:ae:3d:d5:
cb:b3:a5:4d:fc:0d:51:18:9b:d2:97:29:b5:ed:c2:
d2:e7:04:6d:2b:2b:86:23:03:cf:bc:42:3b:1b:5b:
13:f2:7d:51:64:dc:67:69:47:45:2c:0e:d5:b5:d1:
0e:0b:53:70:59:42:3e:9d:20:56:68:99:be:0b:44:
ae:ec:3b:8e:4c:de:85:42:4b:e2:de:81:0b:01:d7:
34:ee:09:8f:e0:2a:b3:b1:5d:1a:39:a2:fd:2f:cf:
a4:d7:ab:64:2b:80:29:a9:a3:58:59:7a:19:e9:37:
c3:56:0c:3f:25:c4:16:ab:c9:3e:6d:c9:9d:6f:d7:
01:8c:1b:d4:b1:86:49:d4:0f:99:a6:3a:0d:74:40:
37:3f:27:3c:d2:62:d9:9f:4d:89:f4:b2:47:a8:8b:
c4:6d:80:e9:46:0c:e1:7b:ac:15:89:e3:81:72:c2:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:15:9F:84:5B:A3:00:E0:D3:C1:CE:14:34:BD:9B:A5:55:01:41
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:6a:61:e2:d3:31:34:3e:a3:2f:b9:6d:57:56:06:e0:04:
51:54:c1:b9:aa:da:1d:4e:0f:34:54:bb:22:c3:e9:79:8d:61:
29:c9:07:0b:44:de:8f:b3:16:a8:b6:dd:57:6a:e7:8b:c5:74:
c3:86:db:47:d0:4e:e8:51:9b:2c:a8:a8:55:e0:19:ea:3b:c9:
14:79:06:c1:ba:22:ff:0c:2c:ad:ba:a0:cb:33:33:c1:e3:d6:
5a:bc:86:0e:d3:7b:d6:4f:1b:10:d0:6d:80:e7:c7:5b:ea:54:
b5:66:71:49:15:e9:36:a1:db:aa:28:4d:9b:d4:bd:7f:62:ff:
a0:70:53:9a:71:f0:e2:85:7e:c0:b8:92:b8:52:e7:e6:e5:f3:
3f:2a:2f:9a:ac:e5:c2:d5:d5:85:95:3c:de:06:d3:3c:8c:fb:
eb:a7:31:db:c1:fc:95:6e:f7:f0:ee:f2:fc:09:63:84:f2:5e:
cc:57:7b:8b:77:5e:eb:2b:bf:54:b2:83:f6:17:ba:4b:d3:1d:
af:b9:ce:c5:c0:b6:5a:b4:7e:80:77:8d:43:20:92:37:8d:bc:
d4:b2:46:a1:16:a4:04:8e:dd:e9:cc:20:9b:64:d7:48:01:25:
7a:55:41:8d:c7:2e:81:8c:cd:0c:88:d5:a8:99:d3:f8:47:f0:
ab:42:45:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGND5tRd0RjqDHleg1YhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTdiMjNjODM3OTViYzM1YzMwYmMxMzY1YTMwZmRmMzM3
NWFjODkwHhcNMjYwNDE2MjEwMDU2WhcNMjYwNDE3MjEwMDU2WjAzMTEwLwYDVQQD
EygwZjY2MTU5Zjg0NWJhMzAwZTBkM2MxY2UxNDM0YmQ5YmE1NTUwMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrO8yvmYSwHHRqn6lqK0MzKMvt8p
vQxjpxREu9W+fbm/Q9cunxGb9L4FHTW7T8aHiizbo8PFkDYnIVS9pc6wOvd0kwPS
yrP0O5u1mVjzXkzkWHFMwBiuPdXLs6VN/A1RGJvSlym17cLS5wRtKyuGIwPPvEI7
G1sT8n1RZNxnaUdFLA7VtdEOC1NwWUI+nSBWaJm+C0Su7DuOTN6FQkvi3oELAdc0
7gmP4CqzsV0aOaL9L8+k16tkK4ApqaNYWXoZ6TfDVgw/JcQWq8k+bcmdb9cBjBvU
sYZJ1A+ZpjoNdEA3Pyc80mLZn02J9LJHqIvEbYDpRgzhe6wVieOBcsJ7bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9mFZ+EW6MA4NPBzhQ0vZulVQFBMB8GA1UdIwQY
MBaAFAlXsjyDeVvDXDC8E2WjD98zdayJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMt
MWU5MmM3YmRjNTgyLzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NDk4NGQtYWU4Zi00Y2Y5LWEzYzMtMWU5MmM3YmRjNTgy
LzEvQ1ZleVBJTjVXOE5jTUx3VFphTVAzek4xcklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkpqYeLT
MTQ+oy+5bVdWBuAEUVTBuaraHU4PNFS7IsPpeY1hKckHC0Tej7MWqLbdV2rni8V0
w4bbR9BO6FGbLKioVeAZ6jvJFHkGwboi/wwsrbqgyzMzwePWWryGDtN71k8bENBt
gOfHW+pUtWZxSRXpNqHbqihNm9S9f2L/oHBTmnHw4oV+wLiSuFLn5uXzPyovmqzl
wtXVhZU83gbTPIz766cx28H8lW738O7y/AljhPJezFd7i3de6yu/VLKD9he6S9Md
r7nOxcC2WrR+gHeNQyCSN4281LJGoRakBI7d6cwgm2TXSAElelVBjccugYzNDIjV
qJnT+Efwq0JFAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:36 2026 by rpki-client