Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier: JGL6N06AMciZUV1Paso+uNTlIOY1z96bkLuLY+ZxYuc=
Subject key identifier: B3:61:D6:4D:49:B7:6D:8C:13:0C:DD:97:FC:8F:DC:19:4E:79:E1:50
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer: /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial: 019D9D75B96642DD65D84EA9FAABD600C166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number: 0A
Signing time: Fri 17 Apr 2026 22:00:31 +0000
Manifest this update: Fri 17 Apr 2026 22:00:31 +0000
Manifest next update: Sat 18 Apr 2026 22:00:31 +0000
Files and hashes: 1: 3Rhi5_ps9SqWelSSqWsozqaT8zo.roa (hash: yQMP5GWWYy6KCkcECGI8p4f08bj4jOetLb0smfTHwxk=)
2: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: hHpFe+BW294Aq/lBeEaDhzOgETKMVwR8iwhgDA7Yzcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:b9:66:42:dd:65:d8:4e:a9:fa:ab:d6:00:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Validity
Not Before: Apr 17 22:00:31 2026 GMT
Not After : Apr 18 22:00:31 2026 GMT
Subject: CN=b361d64d49b76d8c130cdd97fc8fdc194e79e150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:e0:5e:94:13:e0:de:c1:3c:b4:21:d3:a5:
ff:8e:9d:ff:9e:aa:b9:c8:0a:9e:da:a8:c5:85:ed:
14:4e:8c:ed:e6:1c:0d:7b:eb:35:f4:ba:65:82:92:
8b:54:20:e2:da:59:eb:57:d4:5a:1a:b0:db:e7:f8:
76:19:b4:4a:2a:b0:87:dc:dd:c3:eb:1e:9c:39:81:
7e:6a:0d:b9:0b:ef:60:f2:af:d0:c4:1e:aa:3a:22:
4d:fe:7d:fd:9a:05:d4:7e:e0:84:d1:4d:a6:a1:ab:
41:ed:81:05:e9:45:53:e8:3b:6d:f1:55:55:74:03:
42:96:1c:e2:4f:e8:fc:cc:27:62:d2:23:0a:64:c5:
5b:a5:a0:ea:2e:35:8a:a7:1c:06:eb:17:a2:41:83:
36:52:7f:bb:7a:e5:47:34:2f:db:b5:be:b9:bd:37:
8b:e5:21:af:66:74:5e:01:f7:2c:60:d9:6b:ac:5a:
b6:a2:ba:92:cf:3d:d0:c8:4f:d4:4f:0d:4e:b4:f5:
59:d9:b0:3b:08:8c:46:a4:3b:ed:f5:0b:12:52:9e:
a0:a9:bc:f6:f8:e7:be:7a:f3:8b:2f:b3:d3:92:09:
c5:50:4b:00:45:5e:36:89:28:67:2e:a7:f9:4a:fd:
16:7f:be:28:65:c9:35:36:62:2f:ae:b8:cb:31:9e:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:D6:4D:49:B7:6D:8C:13:0C:DD:97:FC:8F:DC:19:4E:79:E1:50
X509v3 Authority Key Identifier:
keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:61:ac:6b:af:b2:9e:0a:15:c4:13:8d:dc:bc:20:d9:2a:
9f:31:99:78:15:13:30:d4:32:ec:8c:92:b3:24:fc:8e:b3:43:
dd:7c:79:c0:5a:05:12:fd:f4:a6:f5:7b:b3:0a:60:37:65:95:
b1:f9:72:a6:5a:16:c9:97:76:6e:56:e0:f7:3c:bb:e7:92:50:
bb:03:49:91:f2:8e:dd:87:01:05:cd:6b:44:19:b5:93:0e:78:
6e:a4:bc:d7:7d:72:44:10:c9:e3:fc:bb:15:f4:d7:6a:4a:9b:
c9:71:25:ae:74:74:73:03:e3:f1:b8:87:5f:55:a9:90:6a:f1:
86:3c:ae:8d:74:d1:8e:9d:14:96:d9:60:99:b4:66:96:1a:5d:
c8:49:e7:d0:75:ce:85:2a:c2:b4:7d:a6:56:0d:91:bf:3d:fe:
85:8a:3a:0c:8d:db:a5:9c:e9:b7:b2:cc:b8:de:f7:31:ae:48:
c9:38:f0:15:fa:28:54:cd:b4:a5:39:e2:1f:fd:9a:f9:4a:24:
85:53:cc:66:b2:be:b4:25:c5:66:c7:e2:e5:9b:6f:e0:b7:d5:
d7:43:32:6d:a1:d3:cc:f2:25:95:40:49:46:6e:f5:0c:83:ba:
e9:48:10:e1:81:03:23:37:46:aa:a9:29:fa:01:2a:a7:3b:cf:
ad:60:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:12:40 2026 by rpki-client