Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: m7QAXGiEeZBFAzjgdQYNHIc1t8Xss3nRmNvxAVyBujI=
Subject key identifier: B6:0F:34:6B:B1:9C:1E:97:E6:05:2D:F5:3A:B3:E8:71:C1:E9:4F:76
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 01A0E24F7B1C33C905C8AAF3DC6D8439E024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 10:00:54 +0000
Manifest this update: Sun 27 Sep 2026 10:00:54 +0000
Manifest next update: Mon 28 Sep 2026 10:00:54 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: Qk6aY2L2iCOY2MhIdZDuNA+fxrgQb7eVZiiYDI0Gics=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4f:7b:1c:33:c9:05:c8:aa:f3:dc:6d:84:39:e0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Sep 27 10:00:54 2026 GMT
Not After : Sep 28 10:00:54 2026 GMT
Subject: CN=b60f346bb19c1e97e6052df53ab3e871c1e94f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:8f:59:b2:0f:39:c6:b7:dc:e5:aa:90:2c:
37:47:6d:86:a6:98:cc:6d:26:df:f7:f7:43:bf:36:
db:7d:35:c1:7e:74:54:8b:42:21:65:77:b1:cd:62:
be:05:d1:8a:3d:03:bf:b1:29:26:4d:3d:f6:3a:31:
07:59:62:45:5c:8a:17:68:b6:21:5e:ef:48:14:81:
a9:c1:f7:2e:b2:ec:a0:cc:1c:c7:e7:31:07:fa:9f:
e0:7e:f2:c1:27:20:85:29:e0:b9:e4:f3:5a:ef:91:
b1:6b:5a:20:15:60:5b:15:2e:de:5d:c6:2e:1a:8c:
40:ff:21:74:1f:5b:e5:92:9e:96:f7:9b:79:72:10:
18:7c:80:24:22:a8:69:f1:51:6d:2e:5d:44:4a:f9:
f5:6f:41:c3:b5:07:b9:80:1a:06:dc:07:ae:21:47:
31:2a:48:54:8c:a1:2b:77:a8:06:f8:25:e7:06:f3:
9d:76:d1:64:51:c9:38:33:ba:7f:f9:0d:fd:71:52:
6f:58:61:b5:72:83:2c:47:16:b4:4e:84:c0:57:05:
1f:5f:30:a2:f4:04:59:23:c6:41:17:58:67:17:8f:
4e:60:f3:cf:d4:9c:57:40:d5:8e:15:98:49:62:0e:
13:7e:0c:86:3b:f4:88:4d:16:8e:29:05:a1:e0:82:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:34:6B:B1:9C:1E:97:E6:05:2D:F5:3A:B3:E8:71:C1:E9:4F:76
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:24:d3:ef:a3:2b:cc:a8:3c:08:bd:9c:56:1c:64:2b:9b:
fd:4d:5c:e5:e8:a6:1f:3b:f2:05:73:ab:5b:87:e5:01:af:ae:
c0:cc:56:d2:75:d7:c6:2e:dc:23:20:0b:ca:6a:83:72:25:eb:
df:3d:b3:c9:c3:52:63:e8:c5:59:c4:82:8c:d3:25:02:46:ce:
b0:76:12:92:66:75:c0:63:4c:1c:3c:40:6e:05:a7:00:de:33:
a2:48:a3:94:da:c5:3c:3a:fa:d5:87:df:da:70:00:96:d3:fe:
4e:a6:71:5d:07:29:1f:93:8a:c2:65:e4:a5:29:a9:dc:0d:cc:
e3:8f:5d:87:94:b0:6f:a9:d3:ea:81:29:33:83:27:f0:65:3e:
2b:f7:56:5b:3f:49:f6:ab:1f:5b:e1:48:de:2e:3d:03:d5:30:
1f:87:7d:e2:37:cb:71:70:7a:0f:78:81:2e:e6:78:c2:12:2e:
b4:d7:5e:b4:5b:4d:c6:98:32:94:96:17:6e:a9:57:d9:04:19:
ab:40:a4:1f:6d:ef:db:22:5f:d5:24:d9:4b:ab:2b:5b:a8:9c:
70:fd:ef:12:ab:52:e1:c7:ee:c8:61:e8:cf:38:a2:96:12:82:
a2:8a:54:fa:14:f9:38:07:77:86:ce:91:87:28:d1:75:a2:da:
95:24:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:52:56 2026 by rpki-client