Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: dsgAX408ZmvpGnbKtW5Q3zqiu5kscSrIFbIWSICoy58=
Subject key identifier: 8E:7D:5D:75:84:21:06:DC:9E:20:33:CC:7F:88:3F:5C:53:6D:07:FA
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019F8EA265F961D623967D7E63AABFC24733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 11:00:35 +0000
Manifest this update: Thu 23 Jul 2026 11:00:35 +0000
Manifest next update: Fri 24 Jul 2026 11:00:35 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: Jfw58iGXjDPBEKVvu0oJuA7djWoWp2RVavJ7lNh2m7Q=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:65:f9:61:d6:23:96:7d:7e:63:aa:bf:c2:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jul 23 11:00:35 2026 GMT
Not After : Jul 24 11:00:35 2026 GMT
Subject: CN=8e7d5d75842106dc9e2033cc7f883f5c536d07fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:48:18:48:84:d0:11:d3:b0:58:6c:38:52:
61:5d:81:7f:3d:47:aa:51:6b:58:2d:f1:70:8c:fc:
32:a9:86:65:4b:66:84:7b:cd:52:5a:9d:83:9b:ce:
2e:30:68:3f:8f:7c:4b:32:52:a0:c4:7b:4a:25:1d:
88:b8:ab:ec:f6:ac:08:c5:d1:83:93:d9:80:5b:d5:
03:3b:2b:b3:d0:a5:4c:17:37:31:bb:6f:e3:fa:8e:
f4:ca:55:00:99:5e:8c:81:5b:c0:b5:9e:f4:16:df:
15:97:2f:fc:94:62:47:38:2b:07:ac:45:d6:45:2b:
6e:b2:ee:64:5f:11:dd:82:04:c3:fc:1d:d0:61:b8:
e7:e8:01:02:22:dc:76:40:8a:aa:7a:5a:ff:9f:41:
90:ba:62:5b:a5:f0:91:ee:b5:97:f0:de:cb:c0:1f:
15:c5:e4:66:38:b3:25:6a:d0:b8:d7:e7:3d:c2:5a:
f6:f0:af:a7:ee:56:75:1d:c3:bb:e9:dc:bd:71:42:
f3:60:77:16:28:81:6e:a1:69:b5:06:c7:87:21:00:
d6:70:e3:56:2d:6b:0e:af:47:a3:e0:da:97:0f:f3:
ac:f8:ba:0d:d4:b6:44:c5:f5:d3:fd:ec:60:76:8f:
31:d7:0e:a0:1f:e1:5a:88:46:40:20:3a:7e:37:23:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7D:5D:75:84:21:06:DC:9E:20:33:CC:7F:88:3F:5C:53:6D:07:FA
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:ae:31:72:f2:28:ad:78:1b:e3:c5:c7:ee:33:e3:4b:0d:
b0:26:42:96:b5:5d:1a:26:f8:c3:c6:9f:69:38:dc:a4:fa:e2:
05:55:9e:37:7e:14:a8:14:3c:8b:fb:e0:e5:77:b0:a6:82:c5:
62:80:fc:c6:b4:38:a4:d5:cd:c5:f8:3a:cc:97:b9:01:b8:8b:
16:1f:86:b9:d1:8b:a7:2a:f2:3c:5e:c0:c5:3b:af:cb:dd:2a:
b9:c5:b5:c8:b8:82:9c:e9:1a:61:b8:7e:4b:a7:82:6e:a3:c2:
0f:fc:ca:5c:53:f9:c8:ea:68:d7:d7:bd:d8:97:b6:4b:1d:37:
ba:31:fb:68:e5:43:d8:79:39:d0:ab:e1:c7:2a:84:ee:4c:3b:
f9:90:c1:db:76:61:81:c7:ea:a8:42:61:d8:fc:3a:79:86:2f:
12:1f:a3:67:bc:ce:54:d5:1e:7f:a4:0f:23:f7:66:a1:09:76:
83:9a:fa:b7:98:ba:6f:88:88:44:cd:94:d1:9a:87:dc:bf:30:
2f:2d:cb:3b:a5:5c:e3:f1:b8:f3:1d:bd:bf:34:b8:e1:2d:e9:
25:c3:49:c7:50:86:38:4b:dd:91:11:bd:82:8f:34:c0:f4:d6:
73:f8:c8:d2:62:d6:2e:a2:5b:eb:8a:25:91:11:bf:e2:7a:8b:
b2:21:6b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OomX5YdYjln1+Y6q/wkczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTkwZWVmOWUxZDFhZjhiNzJlNTE4ZWM2Y2NmNTljZDdm
NzUxZjUwHhcNMjYwNzIzMTEwMDM1WhcNMjYwNzI0MTEwMDM1WjAzMTEwLwYDVQQD
Eyg4ZTdkNWQ3NTg0MjEwNmRjOWUyMDMzY2M3Zjg4M2Y1YzUzNmQwN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy9IGEiE0BHTsFhsOFJhXYF/PUeq
UWtYLfFwjPwyqYZlS2aEe81SWp2Dm84uMGg/j3xLMlKgxHtKJR2IuKvs9qwIxdGD
k9mAW9UDOyuz0KVMFzcxu2/j+o70ylUAmV6MgVvAtZ70Ft8Vly/8lGJHOCsHrEXW
RStusu5kXxHdggTD/B3QYbjn6AECItx2QIqqelr/n0GQumJbpfCR7rWX8N7LwB8V
xeRmOLMlatC41+c9wlr28K+n7lZ1HcO76dy9cULzYHcWKIFuoWm1BseHIQDWcONW
LWsOr0ej4NqXD/Os+LoN1LZExfXT/exgdo8x1w6gH+FaiEZAIDp+NyN90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI59XXWEIQbcniAzzH+IP1xTbQf6MB8GA1UdIwQY
MBaAFAlZDu+eHRr4ty5RjsbM9ZzX91H1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYt
ZTRkOGNmNzMzZWM5LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83N2YyYzUtNDEyYS00ZTRkLThjYmYtZTRkOGNmNzMzZWM5
LzEvQ1ZrTzc1NGRHdmkzTGxHT3hzejFuTmYzVWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5quMXLy
KK14G+PFx+4z40sNsCZClrVdGib4w8afaTjcpPriBVWeN34UqBQ8i/vg5XewpoLF
YoD8xrQ4pNXNxfg6zJe5AbiLFh+GudGLpyryPF7AxTuvy90qucW1yLiCnOkaYbh+
S6eCbqPCD/zKXFP5yOpo19e92Je2Sx03ujH7aOVD2Hk50KvhxyqE7kw7+ZDB23Zh
gcfqqEJh2Pw6eYYvEh+jZ7zOVNUef6QPI/dmoQl2g5r6t5i6b4iIRM2U0ZqH3L8w
Ly3LO6Vc4/G48x29vzS44S3pJcNJx1CGOEvdkRG9go80wPTWc/jI0mLWLqJb64ol
kRG/4nqLsiFr8w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:58 2026 by rpki-client