Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: V1/HkpFsHicJ+7ak8TAnIeC6VImN7qZAOpFVHAA15B8=
Subject key identifier: 7A:57:8F:21:51:C0:66:AC:40:CE:37:28:4E:FC:8D:19:6E:18:18:09
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019F935BA38AD302D2B4F15783C96DEBB47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0ADA
Signing time: Fri 24 Jul 2026 09:01:24 +0000
Manifest this update: Fri 24 Jul 2026 09:01:24 +0000
Manifest next update: Sat 25 Jul 2026 09:01:24 +0000
Files and hashes: 1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
2: LPUMGL0DH5PcG1AojfBAEkKYHe4.roa (hash: N5ZeUyAle6r7IlHtw9k67XdUKJ/pt6NdHoxYhDtnO8Y=)
3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: WDuqZXnCkKNYJDoYLqfGpSQ/dVdpefJYn5e2eH9HmYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:a3:8a:d3:02:d2:b4:f1:57:83:c9:6d:eb:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jul 24 09:01:24 2026 GMT
Not After : Jul 25 09:01:24 2026 GMT
Subject: CN=7a578f2151c066ac40ce37284efc8d196e181809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:39:7d:7a:97:7e:91:c9:8c:fe:95:ba:66:
a2:53:52:31:07:19:13:0b:13:0e:e2:26:bb:ba:93:
46:53:3b:83:c5:5c:57:df:e4:78:a4:31:88:ac:c9:
a3:44:56:ff:6e:d1:66:61:33:d5:f0:86:9b:bd:75:
51:c7:55:0d:0b:c5:7e:20:8b:9c:aa:ee:f7:0b:f1:
a4:74:e3:65:3d:5a:0d:7e:ef:19:85:93:91:2d:f4:
c6:06:af:e3:26:c9:b5:23:ca:92:be:20:d8:6f:7c:
e0:01:9b:7e:74:da:fd:e3:7b:ae:1a:35:16:30:c3:
03:01:cc:10:18:51:ae:9f:59:af:f8:86:38:e2:bb:
87:72:73:3b:e0:f4:1f:66:9c:29:37:3c:18:05:df:
8b:0f:99:95:86:69:43:c4:68:65:c1:81:14:e1:2b:
42:c4:27:ca:30:b0:5f:1e:8b:45:c5:57:d1:d3:8d:
05:a6:4a:e5:fa:76:06:13:51:c0:1b:66:3c:27:bd:
09:c6:cd:29:e1:16:11:5f:30:db:55:9e:f8:89:6a:
1f:63:24:b8:22:e2:61:55:dd:08:4d:c4:cc:48:c2:
44:f6:ab:a5:b7:66:47:13:75:06:27:db:b9:09:49:
18:33:a9:38:f2:85:e0:bc:f1:20:76:94:58:8a:ea:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:8F:21:51:C0:66:AC:40:CE:37:28:4E:FC:8D:19:6E:18:18:09
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7e:0d:e3:4d:9f:00:83:25:57:eb:2b:9f:97:e9:3f:e7:97:
9b:f1:4f:bb:f9:2d:c3:20:57:4e:93:f2:aa:98:97:1e:2f:4c:
47:9c:1e:aa:94:f4:b0:7e:d5:42:b9:67:d3:6a:f3:fd:9c:81:
0b:19:0b:71:7e:2b:68:35:da:5e:c5:f8:73:ec:1f:7c:d7:d0:
c9:b3:cb:ca:bb:c7:94:3a:37:19:72:81:7a:ab:11:62:86:a9:
32:2f:7f:b7:c0:a0:90:c3:91:d7:dc:d6:a3:26:64:ed:ea:c6:
60:aa:72:91:6e:62:d3:3f:aa:b3:a0:15:2e:a8:cb:d6:a7:e4:
ec:11:b5:43:8c:8e:44:46:69:6f:b1:f9:c3:91:00:99:69:f7:
97:c9:11:48:7e:58:0b:5e:2c:8a:12:c9:ad:ff:95:bc:0b:2c:
91:e2:5e:22:dc:40:90:a3:fa:59:1c:fd:6e:49:6d:95:7c:10:
b0:4e:8b:78:8f:02:06:b0:41:a2:1f:57:d5:19:8b:a3:f0:35:
7e:fc:fd:f0:31:ff:2e:7f:96:63:f3:e6:3f:f8:ca:f6:cf:72:
ff:27:f6:87:49:d4:dc:79:bb:fe:e9:10:fe:71:04:7d:2f:0b:
40:16:61:46:35:24:52:e9:2c:64:bf:db:bc:fe:8e:3e:4c:15:
94:d6:a0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW6OK0wLStPFXg8lt67R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjYwNzI0MDkwMTI0WhcNMjYwNzI1MDkwMTI0WjAzMTEwLwYDVQQD
Eyg3YTU3OGYyMTUxYzA2NmFjNDBjZTM3Mjg0ZWZjOGQxOTZlMTgxODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzU5fXqXfpHJjP6VumaiU1IxBxkT
CxMO4ia7upNGUzuDxVxX3+R4pDGIrMmjRFb/btFmYTPV8IabvXVRx1UNC8V+IIuc
qu73C/GkdONlPVoNfu8ZhZORLfTGBq/jJsm1I8qSviDYb3zgAZt+dNr943uuGjUW
MMMDAcwQGFGun1mv+IY44ruHcnM74PQfZpwpNzwYBd+LD5mVhmlDxGhlwYEU4StC
xCfKMLBfHotFxVfR040Fpkrl+nYGE1HAG2Y8J70Jxs0p4RYRXzDbVZ74iWofYyS4
IuJhVd0ITcTMSMJE9qult2ZHE3UGJ9u5CUkYM6k48oXgvPEgdpRYiuqX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpXjyFRwGasQM43KE78jRluGBgJMB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH4N402f
AIMlV+srn5fpP+eXm/FPu/ktwyBXTpPyqpiXHi9MR5weqpT0sH7VQrln02rz/ZyB
CxkLcX4raDXaXsX4c+wffNfQybPLyrvHlDo3GXKBeqsRYoapMi9/t8CgkMOR19zW
oyZk7erGYKpykW5i0z+qs6AVLqjL1qfk7BG1Q4yOREZpb7H5w5EAmWn3l8kRSH5Y
C14sihLJrf+VvAsskeJeItxAkKP6WRz9bkltlXwQsE6LeI8CBrBBoh9X1RmLo/A1
fvz98DH/Ln+WY/PmP/jK9s9y/yf2h0nU3Hm7/ukQ/nEEfS8LQBZhRjUkUuksZL/b
vP6OPkwVlNagiw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:51 2026 by rpki-client