Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: 6pUwDAMCtaBBfYTme/KgIbL4TUelMM9IeAEbqPDjCpo=
Subject key identifier: 79:68:72:7E:8A:6D:AF:F0:C1:F0:33:58:2D:A7:27:F6:DE:18:EE:73
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019D273A9BD3F3F76A668BA7AF5FD8AE86BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1575
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: g6aViJYDNvsXoEfe9UYOZ57XB0yjudCHt2H7uKDYdGE=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9b:d3:f3:f7:6a:66:8b:a7:af:5f:d8:ae:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=7968727e8a6daff0c1f033582da727f6de18ee73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:7d:c9:cf:cb:e0:20:b6:57:f8:2e:6b:51:
2e:26:6e:ef:51:1c:ce:ac:31:41:90:b8:31:4f:41:
0d:98:cf:09:ca:a2:6b:15:cb:9e:9c:37:5e:6a:39:
c3:ed:e0:f3:bc:9f:a8:ea:10:4e:44:4e:38:98:ca:
46:55:f2:0d:50:4b:e6:81:df:4c:b0:b6:75:9b:a7:
cf:b7:60:91:1b:10:31:0a:58:a2:12:6a:6e:cc:b2:
51:09:e7:59:93:51:61:99:7f:65:e5:f7:6b:55:79:
b2:b9:84:59:7e:94:3a:ec:cc:be:17:76:58:6a:ff:
ac:28:ff:06:dd:4c:ab:d7:36:ee:f7:4e:d4:46:b8:
78:62:fd:76:b5:a4:f7:e7:5a:85:10:21:53:55:9f:
92:7a:04:01:d7:40:4e:90:63:12:0b:56:a5:d1:9b:
ec:bc:35:c5:e1:a8:38:30:b7:0b:5a:0c:7b:5d:e6:
0f:dd:61:9b:77:13:33:a8:0e:75:c4:64:a9:5e:3b:
c7:a4:3c:0a:90:65:3b:a7:65:2d:05:24:b1:40:ad:
6f:8a:f1:fc:cb:78:fd:71:65:e6:55:32:4c:06:31:
be:20:4c:bf:20:d2:4e:e7:5e:8d:df:d1:c4:d6:e6:
a1:77:e2:56:9f:47:88:86:cc:62:69:ad:69:c7:62:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:72:7E:8A:6D:AF:F0:C1:F0:33:58:2D:A7:27:F6:DE:18:EE:73
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6c:20:a6:2c:12:ea:1e:95:a3:0e:75:3e:35:ca:05:0b:a3:
70:c5:1b:bb:d0:98:c9:34:ab:16:ad:f9:2e:20:a7:21:a0:86:
07:7d:48:7d:bd:fa:b9:a3:ed:18:72:f2:c6:55:4a:2c:9b:58:
99:e1:d9:0d:59:a5:86:9a:51:9b:8d:40:39:68:d0:6f:8c:f0:
8e:65:83:6a:c1:cb:87:a4:59:77:d3:a7:d6:b8:19:c1:c4:ac:
68:5a:6d:51:cb:b2:4a:a0:85:0b:cb:9f:85:aa:2a:ec:13:f6:
bd:4d:a3:ad:8d:6d:18:87:1d:22:18:5c:7b:2c:c1:68:1b:4f:
d1:ed:a8:0f:b4:00:cf:0c:da:0a:01:8f:a1:7d:28:4d:c6:f6:
50:9d:63:83:48:39:5f:bc:f3:42:9b:3f:7a:43:e3:0e:d2:6c:
f6:d3:a3:57:ad:64:13:bd:78:44:a3:af:92:0d:93:a8:37:39:
da:8f:9a:37:ae:02:60:1c:42:5b:54:c6:52:aa:1a:27:bf:ff:
ab:6a:10:4c:f1:e6:d8:2b:71:e0:da:8c:73:04:c9:db:4a:05:
4a:27:02:54:37:aa:86:0a:4f:8e:7a:11:32:a0:f3:f2:52:c1:
9e:1c:94:bb:8b:97:9d:96:65:2a:68:78:aa:3d:54:86:eb:22:
5c:0a:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:08 2026 by rpki-client