Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: JKyGFdqprSGH3lrUPhc37Zqpbic3dlii7niAmk7ACWw=
Subject key identifier: 17:0A:12:16:33:C1:24:37:5A:1D:56:3F:6C:1B:77:31:A0:BD:F1:11
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019F905A6EC60D64083D3926F283FB6297E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 19:01:13 +0000
Manifest this update: Thu 23 Jul 2026 19:01:13 +0000
Manifest next update: Fri 24 Jul 2026 19:01:13 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: ZyvQ1nPgryVBQaRSXawvDlyMWtSFgmLsOB9Lt9Cr7s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:6e:c6:0d:64:08:3d:39:26:f2:83:fb:62:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jul 23 19:01:13 2026 GMT
Not After : Jul 24 19:01:13 2026 GMT
Subject: CN=170a121633c124375a1d563f6c1b7731a0bdf111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:63:24:e4:50:cd:14:ad:78:b7:8d:77:96:
41:f1:a4:d0:5a:d3:b5:3f:35:0b:83:91:7a:cc:dd:
f8:15:c4:3e:51:29:7d:df:f5:a8:eb:c0:dc:ca:e2:
e9:c9:58:4e:34:1d:ed:66:89:46:7e:37:1f:8b:84:
a3:82:68:fc:0c:bd:5a:8f:9f:cd:f0:90:49:bc:56:
d4:cb:28:7a:51:b2:ff:b4:e9:5b:47:0f:60:81:1e:
f8:3d:e6:49:d9:70:55:f2:d8:4b:b4:5c:02:c2:e8:
d4:19:15:3a:cf:49:79:d1:c5:df:0e:cf:65:16:67:
4c:01:64:27:07:a7:65:bd:b8:7e:1b:91:4b:3c:a0:
eb:7a:c6:e6:c3:78:56:06:87:0d:30:ff:9e:28:fb:
44:34:e2:39:6b:b8:08:06:61:52:03:76:5a:c0:c0:
07:b1:a0:7d:f7:68:ba:b0:c1:d8:f8:b0:09:be:09:
65:85:8e:46:60:a2:91:ab:ef:80:a3:a3:30:0b:95:
27:d2:c4:6b:9c:17:69:5d:12:ae:ea:ee:99:7a:8b:
0e:8c:3f:c3:96:3a:f6:d3:06:21:f9:61:90:5a:da:
7d:e5:57:4e:9d:49:47:bc:ea:5e:d5:a2:e1:8c:ae:
1d:ad:2e:b3:cb:01:9f:dd:00:03:7b:78:5a:0a:c5:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:12:16:33:C1:24:37:5A:1D:56:3F:6C:1B:77:31:A0:BD:F1:11
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:79:0c:47:43:eb:cd:d5:a0:aa:60:1c:4c:0b:dd:1f:f9:30:
2d:47:40:c6:24:5c:94:1a:3d:44:41:ef:bd:35:5c:fa:25:13:
b4:a4:0e:07:35:c0:fe:cc:6c:58:e5:66:42:1e:76:c8:1f:c1:
96:71:03:75:68:25:ff:fe:c3:7c:a3:e8:10:11:e7:75:ae:13:
ec:2e:fe:b6:0c:05:a5:86:44:12:a9:2c:40:d8:44:ef:f4:fc:
a7:1b:3e:1a:e6:7a:79:23:f7:22:0e:57:70:f4:19:4a:5c:42:
37:00:00:a7:bd:e9:7c:32:a5:ca:74:dd:5d:92:d7:0e:04:8d:
3d:77:37:47:3e:33:73:c0:49:9c:c5:79:e6:19:36:d6:69:76:
50:b4:fa:e2:9b:13:aa:c9:d5:cf:69:f1:ce:4a:96:03:78:7d:
53:7b:83:ba:57:7c:c4:ac:ac:1b:4d:a8:dc:bf:3e:35:36:81:
20:42:30:d4:37:a3:f2:89:f2:a0:c1:4e:22:d0:30:4e:37:9e:
d6:3a:a9:bf:e2:a5:5b:2c:97:f2:30:48:13:b0:43:81:4c:56:
8a:f2:93:8b:52:1c:56:a8:06:56:33:0d:5a:62:15:9d:57:2c:
da:b6:0c:c3:b2:61:00:39:9a:5f:30:0f:8d:d9:7e:06:ca:be:
6c:8f:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:18 2026 by rpki-client