Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: vxSs4Pxr5N1pybiB34IdBOJEHFgq1xJk9ORGT0rGAfQ=
Subject key identifier: D5:8A:FA:4C:16:C3:66:81:09:01:B1:EC:EE:2B:93:5E:8B:35:EE:65
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019E1C7DA6152FFD64FA521971BBCE15D2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 6QLemcRrMbxCthcrr0qQHckhtgBJTl2giyQpAL6wVVM=)
2: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=)
3: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a6:15:2f:fd:64:fa:52:19:71:bb:ce:15:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=d58afa4c16c366810901b1ecee2b935e8b35ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:ae:6b:d6:f8:9d:35:94:11:73:1d:82:44:
27:b5:eb:5f:28:d7:5d:45:59:ae:d0:75:d4:7b:eb:
25:15:30:fb:3e:a1:ee:3c:e6:ea:13:e4:03:08:6f:
91:9f:2a:21:a3:52:88:0f:46:ac:31:66:8b:e6:56:
75:ba:28:6c:a7:9b:df:18:f8:6b:24:d9:dd:f9:c6:
3e:f5:4d:6c:5f:69:90:79:b5:d9:4e:be:81:d3:a2:
49:56:51:43:c2:f5:c0:c9:02:9e:c5:63:71:83:d6:
b1:77:68:28:4b:0d:f2:1f:0d:fc:10:7e:ea:23:42:
46:c6:77:bf:4e:b8:f5:e5:95:70:af:11:ed:a8:7c:
cb:f3:e3:c7:ef:6e:e7:b2:da:6d:45:3b:a8:56:fa:
3a:d7:42:a4:e6:4a:a7:0e:3f:4e:11:ec:f8:d4:d0:
68:32:2f:c3:8b:db:f6:94:da:30:19:fe:f3:d6:50:
0f:c0:3f:52:3a:1c:0a:da:11:3c:95:29:3b:a3:c7:
20:96:10:c3:46:40:54:6c:62:0c:1e:8d:6a:10:01:
09:6f:71:ce:73:ae:69:79:c6:7c:46:80:8d:57:62:
6b:18:ca:cc:48:3e:60:64:05:40:f7:26:bd:24:5e:
9a:bc:74:ed:7b:a8:1b:0a:e0:36:6a:39:8e:a5:25:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:FA:4C:16:C3:66:81:09:01:B1:EC:EE:2B:93:5E:8B:35:EE:65
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:24:8c:7d:04:db:75:12:94:17:ce:d2:fe:30:14:5e:75:
f9:ac:e8:6c:3c:6c:c0:7a:5d:6d:06:cd:5b:54:2f:ea:98:cc:
b6:60:7a:95:67:2f:9f:1c:f4:2e:00:b0:44:b0:a6:c5:1e:67:
97:ca:e1:6d:d0:6a:4d:c9:48:3f:a1:2f:54:95:09:96:0d:d1:
f2:4c:33:29:df:57:a7:9d:67:fe:9d:49:07:5f:52:d2:ed:3e:
30:da:42:a0:37:fb:b4:6d:37:5f:72:d3:74:a0:d4:43:b9:56:
e6:14:03:9a:02:46:3b:73:c1:5a:d5:97:4e:55:ac:f5:1a:0f:
a4:3f:70:ba:3c:2e:7f:b7:ca:29:e7:93:c3:77:68:62:c7:61:
7c:fd:79:be:d4:3b:1c:4d:7b:ff:67:74:84:05:3d:6e:d7:70:
a4:cd:53:ee:52:a4:4e:a0:25:83:4f:95:34:31:77:e5:15:17:
54:0d:78:d5:64:63:03:0e:0b:cb:a8:9f:f2:31:cf:d4:f9:78:
fa:97:c1:13:d7:d1:07:e3:8e:67:d0:ff:68:b7:dd:7d:36:b9:
08:3d:e8:0c:d0:99:5e:81:73:c4:f2:2c:55:16:bd:86:7d:35:
41:93:6c:3c:ea:7b:0e:ca:8c:61:a1:25:d7:0c:1d:c5:a4:34:
42:74:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:03:10 2026 by rpki-client