Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: h6X14GspsxwQx3C12M+F/r4ERVJPwMgHn8PR/kNt+F8=
Subject key identifier: 5E:C5:4D:91:C7:0F:8B:57:35:44:3C:82:C2:CB:9D:02:F3:0B:9B:2D
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019E1E6C0557D064390EAE3E9AF87F55A71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 15F5
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: cpkhhssINKP3Q7klJEdb2m7TqEgPMup5iw/td5VqXrc=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:05:57:d0:64:39:0e:ae:3e:9a:f8:7f:55:a7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=5ec54d91c70f8b5735443c82c2cb9d02f30b9b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:98:15:8f:21:d9:0b:11:02:8d:fb:2d:1c:
7d:5b:02:44:90:90:c6:66:0c:3e:89:5f:46:6c:64:
31:47:08:65:56:06:cb:f8:97:dc:9a:3a:0b:3b:70:
d0:61:fa:7c:32:6c:63:b7:bb:b2:14:06:a8:5f:b9:
19:29:37:12:4c:ca:e5:04:ab:43:9f:dc:36:7b:70:
d2:88:ae:f6:b2:85:33:a7:1b:18:7c:1c:83:47:8e:
35:22:a2:85:f3:3c:c9:7f:5c:4c:45:7b:03:4e:c1:
6d:55:ab:f0:12:be:25:33:f8:0c:9f:bb:76:4a:21:
99:e7:11:75:81:9d:10:d6:21:8b:2c:92:85:71:ad:
d5:26:0a:97:3b:39:e6:c1:8b:cf:18:79:a8:23:47:
8d:da:78:a2:7d:e8:f2:dd:6e:69:a2:7b:4a:65:54:
40:98:6c:80:60:28:91:f8:7e:9b:e5:77:5e:15:df:
af:12:69:10:81:ad:8d:96:f7:bd:83:e3:98:f5:99:
22:ca:7c:55:b4:3c:5b:12:17:a7:0a:ff:30:d5:1f:
58:ae:08:35:37:3b:aa:e3:d1:91:f7:82:5a:3d:32:
83:19:ae:2c:d5:57:c3:a4:88:90:ea:d3:c2:d7:71:
63:ef:c7:72:7d:6e:e9:d1:0a:4c:32:53:8d:03:e8:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:4D:91:C7:0F:8B:57:35:44:3C:82:C2:CB:9D:02:F3:0B:9B:2D
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:b4:dd:c3:11:3f:f7:02:88:0d:e9:7b:d3:0e:62:a0:be:
56:de:22:a8:18:2a:cc:1e:de:2f:44:58:32:cd:87:17:18:0d:
ab:2e:a8:7d:92:75:ef:e2:63:89:99:56:5b:72:e5:be:55:bb:
c2:76:5a:52:bf:c2:a5:90:80:3f:92:b1:3a:6f:d5:46:be:c0:
7d:2c:9a:19:ec:8d:09:6d:9e:8d:26:30:2a:22:15:f4:3e:ed:
d5:8f:d1:41:c7:fb:3b:6d:70:17:66:11:d7:ac:9a:93:b9:b3:
e1:7e:8c:7f:91:29:dd:71:90:7c:54:90:78:34:1a:8c:e5:81:
16:b1:a2:16:06:4b:48:96:01:c8:16:2c:69:2e:8b:a7:13:2c:
1d:15:6c:23:57:e2:a9:c4:c1:96:1a:f8:8e:76:bf:a4:c9:4e:
3e:a6:60:3c:a0:e7:8a:ca:12:76:5b:90:04:d0:e2:37:c0:21:
ff:63:1e:15:69:eb:b6:cc:02:5f:f8:06:74:48:de:02:28:a0:
78:ec:50:5f:7b:c4:88:b7:9e:be:6e:34:0c:f6:3c:81:db:85:
fd:b9:fb:e2:15:11:d4:92:9c:27:e9:5f:b2:df:7d:a7:61:b4:
b5:8e:58:40:73:1b:5c:2c:1c:ca:2c:cf:b0:35:d4:05:90:a6:
60:a6:d2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebAVX0GQ5Dq4+mvh/VacbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjYwNTEyMjMwMDU2WhcNMjYwNTEzMjMwMDU2WjAzMTEwLwYDVQQD
Eyg1ZWM1NGQ5MWM3MGY4YjU3MzU0NDNjODJjMmNiOWQwMmYzMGI5YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ciYFY8h2QsRAo37LRx9WwJEkJDG
Zgw+iV9GbGQxRwhlVgbL+JfcmjoLO3DQYfp8Mmxjt7uyFAaoX7kZKTcSTMrlBKtD
n9w2e3DSiK72soUzpxsYfByDR441IqKF8zzJf1xMRXsDTsFtVavwEr4lM/gMn7t2
SiGZ5xF1gZ0Q1iGLLJKFca3VJgqXOznmwYvPGHmoI0eN2niifejy3W5pontKZVRA
mGyAYCiR+H6b5XdeFd+vEmkQga2Nlve9g+OY9ZkiynxVtDxbEhenCv8w1R9Yrgg1
Nzuq49GR94JaPTKDGa4s1VfDpIiQ6tPC13Fj78dyfW7p0QpMMlONA+gwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7FTZHHD4tXNUQ8gsLLnQLzC5stMB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF+03cMR
P/cCiA3pe9MOYqC+Vt4iqBgqzB7eL0RYMs2HFxgNqy6ofZJ17+JjiZlWW3LlvlW7
wnZaUr/CpZCAP5KxOm/VRr7AfSyaGeyNCW2ejSYwKiIV9D7t1Y/RQcf7O21wF2YR
16yak7mz4X6Mf5Ep3XGQfFSQeDQajOWBFrGiFgZLSJYByBYsaS6LpxMsHRVsI1fi
qcTBlhr4jna/pMlOPqZgPKDnisoSdluQBNDiN8Ah/2MeFWnrtswCX/gGdEjeAiig
eOxQX3vEiLeevm40DPY8gduF/bn74hUR1JKcJ+lfst99p2G0tY5YQHMbXCwcyizP
sDXUBZCmYKbSXw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:32 2026 by rpki-client