Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: vHYoyPV0kJfrVG8RxT6ZC0lr+zGqcY9CpFJP0MFMkOM=
Subject key identifier: 15:1D:EC:25:23:38:9A:D4:37:29:00:8D:4C:79:AA:22:FC:FF:19:C3
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019F9135A0B11CAAF44E2DB4ACC7A3483FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 16B5
Signing time: Thu 23 Jul 2026 23:00:38 +0000
Manifest this update: Thu 23 Jul 2026 23:00:38 +0000
Manifest next update: Fri 24 Jul 2026 23:00:38 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: zPYwlAJy9oIqQya6/YqBfSx/NnltEKT1gFpZ6Spqbkc=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a0:b1:1c:aa:f4:4e:2d:b4:ac:c7:a3:48:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jul 23 23:00:38 2026 GMT
Not After : Jul 24 23:00:38 2026 GMT
Subject: CN=151dec2523389ad43729008d4c79aa22fcff19c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fa:c4:2f:af:9b:7a:25:55:dd:dc:6e:80:94:
f3:6e:7d:94:04:e7:10:67:75:36:89:99:e1:e3:72:
5b:1b:9b:68:f3:86:1d:48:8f:97:ed:d1:54:51:4c:
f1:20:35:29:18:cc:8f:a6:33:74:ee:a1:b0:5d:a2:
00:a9:ed:21:18:2f:a2:85:15:73:d4:81:f8:cc:87:
cd:db:3f:a1:68:08:00:3d:d2:63:9a:87:36:ca:51:
c4:c9:f7:a4:fa:10:45:28:89:5a:f4:2b:19:df:d4:
75:ad:26:4b:df:10:99:05:a6:90:24:22:5e:7a:ef:
93:b9:c3:bf:f7:19:d0:23:b9:08:e0:55:48:74:4d:
15:60:dc:92:31:41:a3:7f:05:d6:17:73:ac:01:61:
b8:f3:8f:37:83:1d:46:83:9c:00:c9:cf:53:e4:6e:
35:a5:ba:32:2a:3b:f7:60:fb:b8:a6:af:a8:28:82:
6d:80:a0:a6:56:dd:91:83:73:02:99:b1:7c:0b:db:
98:7e:87:86:a4:c2:8a:a5:68:4c:2b:57:21:a7:be:
9a:81:7f:20:b6:d8:91:46:2a:39:f0:dd:b8:68:65:
af:8e:8f:25:4e:c2:e1:27:12:50:f9:f4:4b:70:21:
74:96:10:40:5b:dc:bb:00:6d:d9:f9:10:18:d1:36:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:EC:25:23:38:9A:D4:37:29:00:8D:4C:79:AA:22:FC:FF:19:C3
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:a3:ca:60:f6:a1:2f:06:c5:50:95:35:30:80:1f:8c:d7:
5a:36:35:67:a2:a0:78:26:04:b5:33:4c:1f:5c:bd:76:1c:7f:
8e:37:5f:86:1b:55:b5:b0:f9:1d:3a:13:f6:71:9f:fe:32:24:
41:48:50:41:fc:52:9f:61:a4:93:22:5b:5a:5d:c2:c7:f4:82:
d0:32:c2:a4:d4:88:83:c6:70:f2:17:b3:f9:3a:d3:da:3b:3f:
00:b2:76:94:a5:de:d8:22:2d:fd:ee:cf:32:78:e9:57:85:2a:
35:d5:6a:98:bd:75:78:28:85:38:3d:c8:1d:c5:a0:fc:95:78:
86:b5:35:f7:71:ea:60:f5:06:98:b0:2f:15:41:2f:eb:29:c9:
6d:3f:a2:8e:38:7c:53:46:62:b0:83:c2:33:cc:c6:87:fd:06:
33:5e:8e:d0:93:66:cc:52:11:72:b4:d2:b1:c3:cf:1a:cc:19:
25:0e:50:c8:5b:0d:6c:67:8b:94:1f:30:b6:ef:1a:12:e4:b8:
7c:7d:48:62:d4:b8:3e:cc:4f:af:d9:af:e8:64:ec:e7:72:51:
3e:d9:67:0d:65:84:e9:16:93:63:d7:66:fd:10:9a:26:2c:a6:
ea:fe:ce:77:3f:f4:f1:e1:0f:b1:90:7f:3e:8e:27:88:1a:3a:
87:17:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:49 2026 by rpki-client