Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: jgSSOlRaGybP+RbQH8LUbLvUyFCyYrXaNv29Xob408w=
Subject key identifier: 0A:A5:5B:2A:56:75:AC:E0:45:1A:7F:DB:DC:8E:8E:E7:04:3D:D8:33
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 019CAC7DE9491C479A3DCFC5DA7AB9807B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: nSfsSuyTV5SceOlwzoFE7nakgiS1gu5IfzTrTVYt3qg=)
2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e9:49:1c:47:9a:3d:cf:c5:da:7a:b9:80:7b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=0aa55b2a5675ace0451a7fdbdc8e8ee7043dd833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:34:50:7f:59:f1:33:1b:3e:0f:1e:7a:ff:
2d:1e:73:78:d9:6a:d3:4a:8a:e7:a9:57:af:45:0d:
b2:29:79:59:e0:d3:ab:18:07:f1:8b:c5:0d:18:ac:
9a:a8:ce:4c:c1:42:55:a4:f5:12:40:dd:21:a0:5d:
3e:0e:df:b8:7b:4f:e4:d0:98:e1:73:95:e5:18:8c:
34:43:98:cd:dd:60:75:d5:59:b6:fb:0a:a4:69:f4:
89:dc:0f:51:30:2b:f3:2f:23:e2:0b:ed:a3:3c:69:
c6:02:7c:13:3c:ad:0f:eb:43:8e:52:b8:9c:97:92:
1a:25:69:c9:f1:7a:db:d7:7f:30:6c:08:7d:f5:93:
6e:46:5a:bf:5d:33:40:85:41:6f:14:57:bc:c5:d0:
62:7b:5b:81:83:8f:96:c1:80:26:e0:72:0c:96:f1:
b3:fe:ec:35:e3:20:2c:a2:03:49:a0:44:f7:a9:09:
4f:53:5a:13:e6:76:15:1d:be:6e:9f:63:36:92:d5:
36:8f:0d:02:39:04:72:37:e9:77:54:39:73:05:84:
98:f7:39:67:43:cb:6a:09:11:c4:c5:1a:08:0f:e9:
61:2a:56:28:bf:a4:b7:ea:11:2a:5e:22:33:c4:8f:
92:e0:83:13:ee:79:cb:90:a3:f9:48:f7:98:17:2b:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A5:5B:2A:56:75:AC:E0:45:1A:7F:DB:DC:8E:8E:E7:04:3D:D8:33
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:9a:21:a9:6f:40:f7:15:17:33:9e:c9:ff:6c:50:76:55:
54:0e:1e:f4:72:dd:1d:9f:52:2f:c0:1e:c3:f2:79:64:dc:74:
7c:8a:9a:ad:53:a6:97:f3:33:ec:21:72:04:14:bc:55:82:0a:
95:c9:03:93:e5:93:a9:0c:0c:81:e7:a7:d8:4d:5f:8b:3f:8b:
47:59:1b:cd:0a:d7:e6:59:31:ec:ba:e2:20:68:ba:a8:fd:45:
59:f4:ef:c3:46:5a:52:03:76:12:7a:82:19:e6:fe:9c:6f:f1:
72:8b:a6:5d:cc:74:f9:cd:dd:e4:c9:3e:35:a7:ae:1d:f2:49:
67:ae:56:49:4c:31:8e:be:3e:2e:37:5c:88:6c:23:4f:d6:d6:
ab:03:ca:d3:08:2a:8c:30:4b:a2:83:3f:54:2a:ef:76:eb:f1:
8a:ee:fd:11:2d:e3:01:7f:1b:f5:9d:45:99:a1:9a:bf:59:44:
d6:36:3a:1f:85:98:0b:7c:0a:60:3f:b6:27:e2:b0:69:31:50:
df:b4:58:d1:05:b0:c5:11:87:1c:45:34:da:93:e4:a1:0a:f3:
4c:79:8a:b9:c2:f6:f8:4e:7e:c8:ef:fd:de:02:5e:a3:19:65:
d5:6a:57:0f:ee:9e:74:62:c1:df:8c:39:7b:b0:10:24:36:d4:
8c:b6:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:02 2026 by rpki-client