Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: q5LVLksWi0hRUzJVD9wSZT6EE3oxVdb6sCfP2L3+Lr8=
Subject key identifier: ED:5B:4C:FB:DB:0A:CF:3E:50:7E:69:33:AD:DF:40:BC:98:F7:53:05
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 01A0C332408B701FA7643CE2B0D640D90E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 09:00:45 +0000
Manifest this update: Mon 21 Sep 2026 09:00:45 +0000
Manifest next update: Tue 22 Sep 2026 09:00:45 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: i8QkxY6r9K9xgQwqMKKMyMooGE5wPhAs+UtvQHdXKIY=)
2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:40:8b:70:1f:a7:64:3c:e2:b0:d6:40:d9:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Sep 21 09:00:45 2026 GMT
Not After : Sep 22 09:00:45 2026 GMT
Subject: CN=ed5b4cfbdb0acf3e507e6933addf40bc98f75305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:d0:a2:86:76:62:be:66:01:34:de:ec:dd:
12:ac:3c:78:44:2a:3b:c1:f5:94:c1:7c:8e:c6:1b:
88:d7:6f:dd:2f:d1:07:ff:3e:02:46:ba:78:0a:17:
f3:0c:6b:9d:0c:96:34:24:b4:25:46:bd:a1:55:c2:
11:c3:54:f0:17:89:d9:0c:42:b7:0a:21:36:65:3e:
e7:27:28:4b:3a:2f:c8:d7:38:58:2b:82:1a:a9:40:
18:be:ce:43:fb:ff:34:c4:10:8b:21:f0:1a:bf:a0:
91:25:66:2d:fe:d7:74:02:10:df:f4:62:b6:b2:45:
a0:53:80:b1:c3:12:1d:89:85:9e:0e:24:32:01:3e:
10:54:3c:0e:ea:98:43:35:30:cb:39:2e:52:33:11:
92:35:a2:a7:a0:7d:1c:7c:0e:9c:de:30:32:74:84:
ba:b5:9d:8b:4e:2a:23:cb:d7:17:95:fb:f9:4f:a8:
83:90:8d:7f:55:2c:b2:07:2d:d2:dc:69:bb:59:cf:
f9:dc:0f:5d:a9:01:45:5c:02:5d:ca:d1:c9:d3:ec:
86:25:83:a6:cd:63:0f:32:86:39:cd:b7:60:23:2b:
b3:04:60:4f:68:36:ea:e4:15:c3:20:9f:d8:d4:b4:
39:d9:dc:29:20:cb:35:2d:62:41:26:13:32:b8:c9:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:4C:FB:DB:0A:CF:3E:50:7E:69:33:AD:DF:40:BC:98:F7:53:05
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:88:08:63:06:b3:5f:2c:bd:17:16:4c:57:5c:e9:0a:3f:
a8:7d:7c:20:c1:47:79:6f:94:7c:48:ca:fa:58:b4:34:d7:dd:
03:4c:14:c8:23:53:54:3e:31:68:57:59:59:c8:e9:c6:c0:8e:
25:66:69:b0:3f:8c:04:5d:60:42:7c:cb:74:b6:98:bd:0f:6b:
f8:fb:9c:ad:b9:05:b9:4e:49:85:61:ba:be:f4:f8:ef:17:db:
d8:ec:33:50:e1:e3:f2:b8:6d:3e:e9:1a:96:ed:25:e5:09:66:
16:ac:d9:7f:5c:79:9e:15:0e:4b:5c:0f:42:65:d8:02:23:f8:
d2:c8:ec:00:0e:1d:bb:93:c3:ee:ff:9c:96:15:f2:57:05:7b:
ca:fa:4d:78:35:08:04:cd:a7:89:34:4b:96:5a:e7:e9:0a:9f:
5d:71:c8:43:67:59:66:20:c9:b3:99:46:8e:b5:46:a1:a7:82:
3e:77:2f:25:1f:6e:31:90:bd:ca:1e:2a:e1:5b:3b:7f:a8:32:
45:86:c7:f7:c6:46:fc:70:bf:d1:65:03:fc:f2:cb:33:cf:63:
fc:83:82:b8:17:e4:ae:6f:b7:84:3d:87:24:3a:c8:03:bf:41:
51:30:61:5c:8b:c0:50:a0:fe:d0:6d:14:a9:77:28:cf:aa:cc:
94:45:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:54:24 2026 by rpki-client