Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: hDLjw+o5/iungV1T7n1sjCTtm0YxDOJtpLyI36EAJC4=
Subject key identifier: 22:79:A2:CA:07:79:F8:F0:89:91:7B:8A:96:28:62:3F:04:A0:20:3F
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019CAAC703A053156DAD98E22CC1905ACE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: x5ZpFiGGvSezu3dbVRMxickkU8dVTzuM3rbWnOv4wTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:03:a0:53:15:6d:ad:98:e2:2c:c1:90:5a:ce:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=2279a2ca0779f8f089917b8a9628623f04a0203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:c9:05:d6:57:a1:fd:44:64:ed:51:cc:96:
4f:1b:31:0e:e4:63:54:64:7d:eb:73:e5:e7:ae:c1:
04:66:af:0f:90:b5:d6:1f:5b:22:4b:77:19:38:16:
e7:89:39:8c:2c:ca:2e:47:0b:8b:bf:39:98:d1:df:
67:11:26:99:71:64:17:2a:4d:70:38:01:04:3d:ce:
78:57:9f:ec:aa:f6:93:70:09:ee:36:a1:5c:73:96:
81:c0:e8:1d:2d:34:28:63:4a:f2:26:0e:d0:1d:b8:
78:d7:9b:0a:25:98:47:d7:2e:88:5f:98:43:8d:cd:
30:85:15:5b:d6:b2:c2:d3:83:34:35:d2:78:70:b8:
58:65:34:3b:02:d1:f4:c9:f9:96:f9:d4:d6:1f:61:
71:c7:75:c9:e4:13:fc:ba:9d:be:2f:da:7d:bf:8e:
ec:98:6f:51:94:4d:02:2f:73:78:3b:a1:2a:bd:31:
c8:9b:d7:2c:46:7d:78:88:b7:43:ed:72:5d:56:d2:
42:c3:53:3b:05:04:83:ac:a9:7e:eb:0e:0b:95:7c:
e4:f6:37:5f:9e:dd:b5:07:df:1d:1f:86:c0:bd:23:
1d:3f:76:19:f8:53:0e:cd:c2:ab:07:29:e0:ed:36:
04:83:0c:7e:b3:f3:8f:de:f1:43:87:1e:84:14:a0:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:79:A2:CA:07:79:F8:F0:89:91:7B:8A:96:28:62:3F:04:A0:20:3F
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:f2:1f:e1:03:16:96:30:8c:c9:d5:9a:6d:a7:68:7f:36:
c7:0b:af:e5:9e:8f:53:57:5c:e5:c0:75:77:3f:a5:dd:05:e7:
05:cb:e7:10:0e:e7:12:e2:af:9c:ee:5a:dd:4b:f6:d5:54:7f:
02:ea:eb:fc:3f:d6:df:ee:2a:ca:b0:cc:0d:4d:06:7e:39:ec:
78:4a:d6:01:31:0d:e1:e0:74:1d:ea:63:e6:09:a4:ce:ac:2f:
0d:9a:28:c8:c0:ca:c0:cf:48:6b:be:71:4c:c6:ec:67:89:07:
02:16:00:ba:44:df:88:38:97:b0:21:07:dd:48:c3:1d:4d:73:
ed:e7:04:c8:89:72:e2:a4:09:b6:54:3a:81:49:ad:67:a9:42:
d9:b9:0e:ab:55:40:bb:f3:c4:d4:07:33:28:33:d8:a5:31:22:
43:b1:48:fe:ec:b7:70:81:4a:03:a0:41:56:8c:12:e0:db:ad:
c9:8e:1d:02:3a:31:04:c8:d8:80:01:67:64:75:73:67:cb:9b:
73:68:ac:7f:3d:f1:c3:a0:92:76:23:01:c2:41:a6:3d:b3:f2:
e6:6b:1c:04:00:3e:a3:91:e4:1a:75:e1:f9:40:0d:26:26:28:
63:a1:95:30:ab:33:9c:3c:55:8d:53:e5:84:45:ec:c3:18:67:
4b:34:a9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:03 2026 by rpki-client