Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: qUwF3R70la4j2WVmtt2aRqo+21bkimsNcFhPkh5Vokg=
Subject key identifier: A6:37:3E:F9:BA:A5:3A:F2:C1:61:F5:06:C2:22:D5:61:BA:EE:2A:6E
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019F8F10426172744DC6395ABBE699BBDC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 0419
Signing time: Thu 23 Jul 2026 13:00:35 +0000
Manifest this update: Thu 23 Jul 2026 13:00:35 +0000
Manifest next update: Fri 24 Jul 2026 13:00:35 +0000
Files and hashes: 1: 4p2i3_lV2Xm21VM3RkLxfJEz5kE.roa (hash: NW8zzFhQ2+ZAvR18p5GH/sVm8t6bYcOGdrKnOofJKBM=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: u4Fvi0hJt8yDdq37P2Yz9ZPU7EF39m+C8Nl/7ORdNes=)
3: rrMzogUtnNYohdiYHBUx1xdS4QY.roa (hash: gXfiVkS6pTRRTpVE1kuG1Q8iGKyEXJ5GRFNZwq4pmAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:42:61:72:74:4d:c6:39:5a:bb:e6:99:bb:dc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Jul 23 13:00:35 2026 GMT
Not After : Jul 24 13:00:35 2026 GMT
Subject: CN=a6373ef9baa53af2c161f506c222d561baee2a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:51:3e:fe:7d:e6:06:ea:ff:b2:f1:8f:a0:49:
87:f3:64:84:aa:de:4e:3e:78:6c:28:78:97:30:a2:
ec:44:cc:c2:5e:f7:19:4d:f2:fb:63:69:4e:fe:00:
26:be:f5:6c:42:b9:bb:b1:67:70:ff:34:4d:4e:45:
86:5d:58:cd:4d:fd:66:bd:2a:c2:88:cf:47:c2:ee:
14:76:82:7e:b3:46:1a:32:07:c7:ac:4e:f2:a2:a6:
d9:57:98:84:e5:0b:19:62:b9:cb:22:eb:08:ef:6e:
43:48:b3:77:a2:15:28:28:ab:54:58:f2:e2:af:a9:
fd:47:49:67:82:77:fe:da:86:12:dc:1c:5b:82:8d:
37:91:d3:c9:38:f8:ba:64:7c:3c:34:bc:2e:38:77:
72:83:c5:8c:f1:76:15:32:9f:a2:dc:59:3a:3c:14:
2d:1e:c6:38:74:70:12:72:20:08:c8:01:cd:39:ff:
da:59:94:26:a9:36:27:70:de:84:e7:07:fc:97:2b:
ad:28:86:36:1a:61:80:b7:a3:ba:3a:9d:02:43:17:
7d:18:21:95:c5:2b:cd:47:0e:cf:b0:07:05:ab:dc:
96:5f:6f:3d:a9:c7:65:52:6e:a4:0d:b0:08:07:89:
84:a9:32:a3:4c:71:0f:a4:06:6f:0f:2a:e6:ce:60:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:3E:F9:BA:A5:3A:F2:C1:61:F5:06:C2:22:D5:61:BA:EE:2A:6E
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3c:ec:37:98:48:43:1a:9e:1b:ae:a5:bf:4e:68:54:48:2d:
f5:42:f1:80:9f:57:be:f5:89:c8:6c:26:bc:c5:c3:04:71:09:
f0:d8:db:f9:dd:e9:ae:31:0a:65:93:5f:2d:b8:ec:83:20:f3:
db:4c:03:38:b2:11:0b:95:bd:99:32:56:dc:6b:b3:2c:a4:fd:
87:2b:1c:4c:41:eb:3b:69:89:e8:d7:51:91:5a:5b:43:05:09:
5d:e8:6b:b8:82:54:23:92:55:57:6c:e2:59:07:65:49:5b:04:
3a:30:6d:b5:19:b0:e0:a1:3f:39:06:85:8b:be:8b:c6:ab:fb:
5d:9c:8b:23:8c:4c:7d:9d:04:83:36:a4:8b:e4:c6:77:53:51:
85:f0:6b:2f:22:b0:14:da:b5:d1:85:c0:d7:e2:31:8b:4c:a6:
24:0b:be:01:39:f0:4f:12:cf:71:97:6b:e0:c0:a7:20:ad:43:
ec:ff:be:b5:90:ce:b9:f7:fa:bf:b9:9b:b9:8f:55:9d:57:71:
24:00:2a:87:d7:66:52:56:50:1a:44:9b:a4:38:62:40:d2:03:
df:b3:fe:66:8f:70:84:6d:14:a1:c1:02:f7:37:39:b8:14:1e:
63:34:47:e8:ef:fa:65:f8:89:d7:4f:0f:85:a3:5a:c3:3d:de:
c1:2d:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:07 2026 by rpki-client