
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier: L1ilKwWxC3/iONAXGwpxR+DbpvoYSxVdOjXHz+Ccr7k=
Subject key identifier: 1D:A2:9F:07:2A:46:EF:DE:24:75:C1:87:06:C3:B6:8B:51:E6:B1:C5
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer: /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial: 019FAC082A15139C1340A1B10CFC9C1C690C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number: 011D
Signing time: Wed 29 Jul 2026 04:00:43 +0000
Manifest this update: Wed 29 Jul 2026 04:00:43 +0000
Manifest next update: Thu 30 Jul 2026 04:00:43 +0000
Files and hashes: 1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: iKwmeee6OIDOStXJFVUhiGqioGacpRRpC1C39XLqdkQ=)
2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:2a:15:13:9c:13:40:a1:b1:0c:fc:9c:1c:69:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Validity
Not Before: Jul 29 04:00:43 2026 GMT
Not After : Jul 30 04:00:43 2026 GMT
Subject: CN=1da29f072a46efde2475c18706c3b68b51e6b1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:29:a2:c2:31:aa:b5:bb:7f:c3:e9:0f:23:
68:8d:97:88:0b:f0:bc:95:3f:53:66:dc:01:bc:28:
28:9e:e9:f9:73:3b:4a:f3:52:bf:a1:e2:83:0f:27:
82:29:b7:df:1a:aa:48:f4:47:00:38:dc:e2:5f:58:
38:55:89:78:26:fd:25:a4:36:88:c7:12:e9:e7:73:
66:0f:63:28:5c:9c:03:c2:43:5c:49:8c:67:36:65:
13:b5:b4:f7:20:0e:01:0a:f1:48:dc:6e:e1:21:9f:
29:1d:3d:13:ff:14:88:ed:ea:2b:bc:da:92:d0:7c:
fa:2e:15:f8:b9:9f:37:55:96:4c:12:d5:92:6c:e1:
b7:fc:9e:22:5c:43:5f:6e:bf:48:26:e0:49:ef:19:
ad:94:02:8f:1f:91:6f:23:7d:6a:91:4a:84:8f:42:
68:89:a4:55:58:0f:14:4d:f0:04:bf:a0:3c:b8:3e:
51:13:e6:11:77:b0:84:77:12:7b:c3:57:a7:1b:73:
d8:96:01:59:9b:11:4a:4f:bd:f1:0d:ca:07:cc:51:
e7:9e:02:89:0f:ff:c3:22:6f:56:1e:df:a4:f0:fa:
ec:d2:c0:5c:f1:66:95:59:2f:0b:80:13:e1:6a:30:
f2:a1:b5:25:c7:68:a3:bd:25:82:eb:a1:2f:e7:db:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A2:9F:07:2A:46:EF:DE:24:75:C1:87:06:C3:B6:8B:51:E6:B1:C5
X509v3 Authority Key Identifier:
keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dc:de:c5:ca:f3:76:1f:7b:6f:91:75:3e:e2:36:de:1c:18:
54:5d:37:68:89:95:99:07:a5:a0:e9:49:0f:7b:07:01:9d:d2:
7f:c4:1e:25:59:3e:f9:10:69:b7:aa:7a:ed:4f:64:a8:42:0e:
d8:c0:06:26:93:f8:9e:78:0e:66:df:65:a1:ca:25:c9:5e:ec:
27:ca:aa:71:79:08:c4:d4:15:c9:e5:55:ec:b4:28:5b:ea:14:
bb:6b:45:cd:75:48:0a:f6:d3:b4:f7:2e:e7:ec:cf:d0:91:6d:
26:3d:b1:0e:d2:fa:df:33:f0:41:2e:64:5a:b2:e8:dd:ab:8e:
ce:29:c1:a9:51:84:b6:b9:c3:ba:9f:19:68:af:50:95:f6:4f:
8a:9e:c2:e8:4f:90:66:33:bf:b7:57:cb:3e:ac:80:dd:a4:1d:
a2:1b:24:99:2e:24:14:7b:1a:a9:ce:4f:e4:0b:81:de:fd:73:
21:c5:df:f7:b7:bd:75:2f:44:9d:94:1b:71:5d:52:b8:50:c9:
99:6e:d9:f5:5e:72:ad:62:ed:ed:75:67:ba:bc:61:73:4e:eb:
df:c0:5e:b7:fd:a0:39:f4:fd:b3:17:91:92:e6:ce:4c:00:5e:
ab:54:0a:57:c1:8d:52:e8:c0:ff:cd:28:24:4f:2e:4e:56:81:
dd:e7:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:43:34 2026 by rpki-client