Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: 8qQw2p0NMZRoTwqulnhwEA+OV8X9dUQoGt79p/FZgYM=
Subject key identifier: D5:50:92:2B:4D:E4:B2:C9:3D:86:A6:48:7E:CC:48:E1:B6:EA:F5:16
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 01A0C5570449B8B92009763D00FB8F640CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 19:00:09 +0000
Manifest this update: Mon 21 Sep 2026 19:00:09 +0000
Manifest next update: Tue 22 Sep 2026 19:00:09 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: kIZD6y2C/+3Hvs2Cm+aMRFUaPtfLb47ieMM6Q6lNx6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:04:49:b8:b9:20:09:76:3d:00:fb:8f:64:0c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Sep 21 19:00:09 2026 GMT
Not After : Sep 22 19:00:09 2026 GMT
Subject: CN=d550922b4de4b2c93d86a6487ecc48e1b6eaf516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:b7:3d:d5:b4:67:da:bc:19:e8:46:03:e3:
f5:6c:ac:21:d4:e2:d3:57:8b:0a:66:9d:15:f4:2a:
7c:73:80:dd:d2:a3:4e:23:6c:0d:68:cb:f1:7a:78:
f5:62:eb:3f:a9:0c:ba:86:9a:bd:5b:e3:53:72:d6:
b2:29:bb:9a:07:2a:ad:c7:01:bf:69:3c:91:2f:56:
d2:58:a8:3a:ed:f6:0f:6a:c8:df:39:f0:d8:05:aa:
84:d1:88:5b:a6:63:28:4a:12:53:f2:ed:11:a2:50:
18:4d:92:52:0d:1c:88:67:98:b4:46:a4:60:a8:58:
56:1d:4d:44:0a:27:83:63:76:ff:02:1b:8e:aa:f5:
37:a0:62:e9:b5:bf:27:c0:c5:9b:0a:ea:89:21:c9:
98:91:3b:3b:ac:f0:ba:5b:3d:77:34:f9:4f:3d:62:
76:fc:3f:8a:d7:67:37:59:fa:94:61:a6:a8:65:b4:
8b:fa:b5:25:5f:e9:0f:88:df:b4:7f:b2:a5:96:60:
ac:bb:da:7b:e0:1d:d7:e1:d3:eb:d5:59:b4:ae:79:
22:52:36:4b:7b:7f:46:4e:4f:42:13:23:0f:c7:b5:
ac:5f:7b:f1:5a:55:f8:6c:82:26:cc:18:9d:3c:28:
bc:05:49:20:60:8e:f2:e7:b9:38:d5:db:81:24:c8:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:92:2B:4D:E4:B2:C9:3D:86:A6:48:7E:CC:48:E1:B6:EA:F5:16
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6b:a6:50:26:b8:ff:77:90:75:99:19:61:1a:46:17:7d:39:
1f:f3:59:a5:bf:8f:68:fb:fa:b7:de:c6:c6:4c:b3:a8:1d:c7:
02:c2:cc:c1:c3:c7:8b:79:db:44:31:82:68:b6:7b:46:45:00:
a4:47:07:d3:ec:81:a1:93:12:7a:e0:ff:41:e0:19:f4:a4:4b:
54:76:d8:00:bb:05:c5:6f:53:80:dc:10:a0:fb:fd:27:81:83:
65:ef:8a:49:42:3c:58:d3:02:de:60:db:92:86:e8:ee:11:ee:
8d:ba:07:71:42:33:ae:a0:e4:98:71:04:15:40:ff:43:c5:26:
54:88:a9:94:c3:58:32:6f:4e:fe:58:bc:27:63:a3:1d:92:50:
02:82:e8:48:8a:1b:e7:af:3d:1a:21:99:a3:2a:e1:9d:f3:4a:
f3:fd:73:f2:93:cb:d1:85:cd:14:78:e5:5b:ff:92:26:f6:da:
60:a9:8e:37:92:8e:ee:c7:35:b5:60:ce:70:d7:ae:06:02:fa:
16:10:e4:2f:12:72:b3:ca:39:73:2e:d6:72:d6:c1:6f:81:b1:
8a:25:a5:d5:5e:ea:f3:f2:08:17:f4:4e:65:87:00:a0:34:40:
98:83:4d:ee:98:d1:34:03:e6:2c:44:cd:a0:40:a8:87:aa:55:
aa:02:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:47:31 2026 by rpki-client