
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: y3opxP76YYmapOU/ChfUTlWcuNuersORgqBGEmK86wU=
Subject key identifier: 60:54:46:4F:65:F2:17:5B:05:EA:03:C0:D9:E0:5C:38:B9:DA:DC:F7
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019CAAFD3B62F5254C44120C277EF085A805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: 2Y6quasBBtqiTIKmeRTvIxGNZBg.roa (hash: mqAgZqV030TmfwPKsg0X5x+gSYsK7poBlKoJUyvGnoE=)
2: SWYonVyw6t-M4w3DUnG06hLvLEk.roa (hash: tco63oARuy5EvMpcq7VsYr3Rw0Zp8rf/jNLMSLMD8J0=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: 61CoodXwrXzg8yar8VnYkoX2SOtyLpgkRKiHyQE+Qjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3b:62:f5:25:4c:44:12:0c:27:7e:f0:85:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=6054464f65f2175b05ea03c0d9e05c38b9dadcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:19:52:f8:36:07:eb:e6:75:f1:ca:fc:6e:
7b:96:f1:48:8b:fa:44:1b:09:10:c6:1f:1f:f6:cb:
14:d0:76:da:2e:1f:f4:a9:53:c2:b5:f7:17:10:48:
65:1a:37:15:68:0b:c4:d3:e0:ca:b3:af:a2:33:c1:
ae:fd:79:c0:a2:ac:ea:bd:6b:6e:01:fe:a9:38:74:
75:b6:9c:4d:25:e2:98:0c:b8:50:51:1f:ea:98:97:
b8:58:b1:0b:7b:5c:0f:c8:a2:aa:77:99:e2:2f:51:
2b:f4:cd:f5:73:5e:3c:7e:61:8c:67:c7:3a:da:71:
9d:12:6b:4e:7a:d0:f8:92:f7:dc:a3:3a:38:63:3b:
98:3c:e9:1d:d9:8c:5e:03:d4:bf:fb:5d:77:59:e2:
d3:c5:1d:c2:a0:25:66:6a:47:0d:4d:0d:3a:c7:3c:
08:31:99:89:bc:d7:f3:5b:fc:6d:67:2d:9c:2f:d3:
7a:8a:76:b3:38:2d:45:1a:cf:8d:d8:ea:2c:7f:c8:
42:84:5f:95:75:eb:53:2d:70:4c:2d:c5:61:b3:ef:
7f:5d:c4:f0:07:ec:d5:09:2b:fc:8c:e1:8e:f5:6e:
a8:c3:f9:32:51:af:94:8c:ef:47:83:3d:38:ac:aa:
36:a4:1a:53:83:02:9a:49:f5:0b:10:ae:9b:04:cc:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:46:4F:65:F2:17:5B:05:EA:03:C0:D9:E0:5C:38:B9:DA:DC:F7
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4b:44:91:ea:b2:e2:dc:01:32:ad:15:b9:03:c9:0a:a6:bf:
99:e3:ea:1a:80:43:b5:af:4e:c5:09:04:e4:28:8c:b9:2e:a3:
9c:d8:68:c2:1a:3e:94:ab:84:76:80:50:9d:aa:96:40:05:65:
95:12:ae:4b:fd:33:9d:81:41:8e:d4:6a:a5:ae:3e:f3:31:56:
e3:71:fe:e4:6c:ce:85:58:f6:e3:e4:51:48:28:5d:b9:d1:e5:
2c:49:97:ab:d2:38:6a:b2:4b:90:87:27:95:91:dd:77:28:3e:
63:9e:1a:b1:81:95:be:50:88:30:9e:5a:80:26:11:7d:89:0d:
15:eb:3b:fd:3f:4b:87:64:d7:96:28:9e:82:47:97:4a:db:3e:
0d:4b:25:9a:2b:2e:1e:bc:f0:fd:22:c8:72:1d:05:18:53:a5:
6c:6f:17:30:9e:1b:4e:bd:6e:76:90:d5:0f:94:7f:d0:9c:c1:
09:03:d6:4e:0a:51:42:ad:01:77:51:90:97:99:41:da:b7:22:
ad:aa:4b:b7:7e:08:e9:40:49:35:6b:42:68:7e:f4:05:90:16:
de:2c:26:50:78:85:28:aa:86:1a:e8:bd:21:32:6e:77:89:38:
31:42:bf:85:9c:58:6d:dd:1d:d9:68:b3:5f:66:a2:69:42:d2:
40:a2:18:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Tti9SVMRBIMJ37whagFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZTBhZjQ1YWI0ZTU3NDU2ZjVhMGE0MGRmYTg0ZjhkODA2
MTA2NjQwHhcNMjYwMzAxMjAwMDQ4WhcNMjYwMzAyMjAwMDQ4WjAzMTEwLwYDVQQD
Eyg2MDU0NDY0ZjY1ZjIxNzViMDVlYTAzYzBkOWUwNWMzOGI5ZGFkY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaEZUvg2B+vmdfHK/G57lvFIi/pE
GwkQxh8f9ssU0HbaLh/0qVPCtfcXEEhlGjcVaAvE0+DKs6+iM8Gu/XnAoqzqvWtu
Af6pOHR1tpxNJeKYDLhQUR/qmJe4WLELe1wPyKKqd5niL1Er9M31c148fmGMZ8c6
2nGdEmtOetD4kvfcozo4YzuYPOkd2YxeA9S/+113WeLTxR3CoCVmakcNTQ06xzwI
MZmJvNfzW/xtZy2cL9N6inazOC1FGs+N2Oosf8hChF+VdetTLXBMLcVhs+9/XcTw
B+zVCSv8jOGO9W6ow/kyUa+UjO9Hgz04rKo2pBpTgwKaSfULEK6bBMw6YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBURk9l8hdbBeoDwNngXDi52tz3MB8GA1UdIwQY
MBaAFHvgr0WrTldFb1oKQN+oT42AYQZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQt
NGMzYmU5YTI4ZDkzLzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hYzFmYTktNGVjOC00MDE2LTlhZGQtNGMzYmU5YTI4ZDkz
LzEvZS1DdlJhdE9WMFZ2V2dwQTM2aFBqWUJoQm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAktEkeqy
4twBMq0VuQPJCqa/mePqGoBDta9OxQkE5CiMuS6jnNhowho+lKuEdoBQnaqWQAVl
lRKuS/0znYFBjtRqpa4+8zFW43H+5GzOhVj24+RRSChdudHlLEmXq9I4arJLkIcn
lZHddyg+Y54asYGVvlCIMJ5agCYRfYkNFes7/T9Lh2TXliiegkeXSts+DUslmisu
Hrzw/SLIch0FGFOlbG8XMJ4bTr1udpDVD5R/0JzBCQPWTgpRQq0Bd1GQl5lB2rci
rapLt34I6UBJNWtCaH70BZAW3iwmUHiFKKqGGui9ITJud4k4MUK/hZxYbd0d2Wiz
X2aiaULSQKIYMw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:37 2026 by rpki-client