Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: bnp8Iu6cZ9R4ZM0jhwXVN6JOgZvdswN/LWIS427U/QI=
Subject key identifier: 70:E7:33:31:DF:7C:B4:D0:05:56:6E:F8:DD:F2:19:17:2B:DB:A4:BF
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019D284D29B768BB3B4CD88FE24641B40121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:00:38 +0000
Manifest this update: Thu 26 Mar 2026 04:00:38 +0000
Manifest next update: Fri 27 Mar 2026 04:00:38 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: UqXkazuegtPeg+SQCKSrgEemXjOGALvcOq9vV0KXSIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:29:b7:68:bb:3b:4c:d8:8f:e2:46:41:b4:01:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Mar 26 04:00:38 2026 GMT
Not After : Mar 27 04:00:38 2026 GMT
Subject: CN=70e73331df7cb4d005566ef8ddf219172bdba4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:33:38:ac:84:a6:81:7c:9a:0b:70:b9:ed:
64:32:0a:fa:82:05:58:4d:58:35:6d:c0:6e:74:15:
1d:1d:68:b7:09:ae:e4:fb:9d:8a:68:c9:2f:19:49:
46:59:51:24:57:be:82:ef:e9:78:6c:c4:93:40:f3:
9f:6d:dc:91:12:da:56:ef:34:bb:e4:9d:7e:59:b9:
45:0e:d4:d9:05:8a:0c:80:f0:03:7c:2e:b2:8f:2e:
21:5d:64:1e:13:07:13:74:41:da:07:8d:06:2f:b3:
9b:6f:40:03:dc:4b:29:d8:6a:0d:64:91:b8:74:c5:
41:dd:2d:f7:59:81:ad:c6:9d:16:c2:89:8b:02:e0:
11:f2:70:65:d2:5f:e3:da:9f:fe:c1:2e:f3:73:e6:
51:cc:a8:8e:85:53:bf:f8:a1:76:47:f2:25:b5:5c:
91:25:01:21:26:93:82:9d:14:0e:a5:3f:77:b1:60:
ae:ec:c6:52:c6:55:74:f4:bc:37:01:ce:46:58:af:
8b:c9:1e:0e:10:0a:3a:68:81:0b:1e:23:22:7b:e6:
23:2d:e7:eb:1b:44:12:3e:e8:9c:c2:4e:fe:cc:ce:
12:8e:21:d0:58:67:5f:fa:49:28:eb:dc:22:83:fc:
96:26:0d:a6:0d:c4:71:c2:a1:2c:6e:20:08:89:15:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:33:31:DF:7C:B4:D0:05:56:6E:F8:DD:F2:19:17:2B:DB:A4:BF
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:f3:ef:15:f8:b5:77:a2:04:b1:5c:cd:4e:d2:ce:b6:44:
b1:a0:15:fc:ee:c0:14:94:62:41:f0:02:ab:f2:c2:5f:17:9f:
b2:c6:51:5e:98:c6:ee:60:7c:32:6d:ab:d7:07:a6:29:aa:db:
fa:8c:54:d5:9c:eb:7b:c1:f8:ae:40:45:e4:09:27:ef:11:2b:
f3:b9:b2:33:67:6e:0c:f3:90:6e:70:82:6c:b6:cd:0a:7e:ad:
a3:2b:98:08:ba:84:9b:14:01:d9:f0:01:3d:d1:eb:c3:6d:15:
cf:92:17:e7:d9:a0:d1:26:10:b9:a6:54:82:4c:62:31:2e:81:
14:5e:91:2e:1b:32:72:12:86:27:68:5a:ae:57:1d:31:58:cf:
aa:5a:ff:75:05:b4:f2:e6:c8:dd:f4:e9:f6:19:b1:9b:7d:10:
fc:37:16:41:07:06:ca:6a:39:2c:9a:cf:46:68:2c:e2:8c:47:
a3:e7:46:34:88:c5:d5:0d:89:26:94:f7:64:01:5c:78:c3:fa:
3a:a5:69:1d:9a:46:eb:e9:5a:29:4c:9c:60:b0:cd:b3:05:f0:
b3:d6:8c:ca:d5:44:7f:17:0f:ee:96:cc:95:8f:b6:2a:0c:93:
af:07:8e:81:b2:e4:0d:0e:8a:5c:c2:c7:10:ff:16:1a:06:01:
5c:20:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:57 2026 by rpki-client