Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: CsdO3WJVgsRARhTerKDJdYUl6pd9kvTSo3rmY0gPGns=
Subject key identifier: 72:5B:D6:86:6A:26:8D:5E:C3:DA:E5:A2:2F:8F:A7:39:AA:3C:D7:1F
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019FA974BE0CA106CDA8A83B9F646B56AB89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 16:00:28 +0000
Manifest this update: Tue 28 Jul 2026 16:00:28 +0000
Manifest next update: Wed 29 Jul 2026 16:00:28 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: LoU7/gvs90Ay6PXxQwPIFiT4eXwGO0CPF6rxH9D89Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:be:0c:a1:06:cd:a8:a8:3b:9f:64:6b:56:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jul 28 16:00:28 2026 GMT
Not After : Jul 29 16:00:28 2026 GMT
Subject: CN=725bd6866a268d5ec3dae5a22f8fa739aa3cd71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:45:1e:02:d2:b4:99:b8:eb:8f:ba:7b:fa:
e0:e7:2c:48:1c:c2:e0:e5:39:4d:48:fa:36:d4:6b:
a3:40:f9:91:8d:40:ec:47:78:b6:f9:7e:56:b6:ce:
c7:ad:e9:18:bd:84:1d:29:86:80:b2:0d:a4:3a:b1:
e1:cb:63:88:3a:1a:59:f4:4b:74:f2:71:82:50:0c:
06:a0:cf:13:91:a4:fc:94:e2:ce:0f:8b:18:84:c8:
ca:0e:ae:e5:ce:2d:69:1d:cb:2b:af:96:cc:13:a8:
fb:1f:f4:f5:fc:74:8d:38:76:68:1e:76:c7:bf:af:
0d:44:dd:bc:39:dd:a1:f1:41:29:83:33:17:87:bb:
c7:e2:51:91:a7:5d:c2:01:6b:cb:3b:f7:3f:82:5d:
4b:c9:4e:83:63:ea:aa:a0:c8:ec:81:0b:b3:1f:53:
7f:d9:01:96:b8:7f:26:1d:04:6b:f1:24:a0:e2:f3:
c1:46:f3:cd:50:42:96:77:f9:f7:26:3a:b2:14:61:
78:55:b1:62:f1:24:54:b2:bd:e0:0c:f4:d1:04:4e:
86:c8:a9:58:03:3d:3a:96:8c:dd:18:91:88:92:19:
72:e1:64:49:1e:30:22:b3:84:a3:b2:c6:11:0f:86:
6f:b3:79:bf:1b:95:4e:b8:cf:34:e6:05:a4:3a:24:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5B:D6:86:6A:26:8D:5E:C3:DA:E5:A2:2F:8F:A7:39:AA:3C:D7:1F
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:e1:cc:08:aa:5c:82:82:55:5a:22:d5:29:c6:6a:6f:93:
32:a5:c2:a5:a3:a4:5e:18:48:f2:a4:0d:75:44:3c:e5:75:21:
07:32:fc:fe:f3:36:81:75:c3:45:64:c6:50:ac:a4:58:80:04:
a2:4e:19:33:1d:d3:6c:02:cf:93:85:43:fb:b5:a3:85:ea:8b:
51:55:f6:14:df:ff:61:90:41:57:54:b0:0d:62:a6:d7:df:ab:
be:e9:d6:a0:b2:9c:41:9e:ea:28:80:b8:64:69:90:2d:9d:f4:
64:d8:0a:35:bb:d4:f8:80:80:c3:c6:5f:dc:52:93:ac:3b:b9:
89:a6:95:74:91:87:0e:0c:c0:dc:be:65:f4:d4:19:41:fa:71:
eb:61:c1:54:a5:65:c7:07:77:96:8f:7d:07:8b:1a:a2:82:78:
c4:7b:f9:10:cd:dc:08:ee:48:04:af:b5:28:e4:b3:87:07:71:
86:cb:d8:8d:8e:1c:75:43:c3:df:eb:14:7b:11:f1:c1:0f:fe:
58:8e:3c:5c:eb:eb:03:b9:3e:de:46:f4:89:f1:34:71:e5:7f:
bd:20:3c:85:0e:0e:cf:3c:ac:f8:51:9c:6f:58:1a:56:ca:2c:
c1:ef:e7:48:5b:8d:60:43:6c:f6:c8:36:d6:a1:4c:43:c1:41:
f5:d2:ea:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:19 2026 by rpki-client