Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: 05wQ4dGC9BmHqQi1Oc2GVZ0B3Skfe1yWEOA0cRqLA8g=
Subject key identifier: 49:16:28:80:D3:75:C4:CE:E9:B9:0B:AF:CF:1A:6A:6E:4F:FC:08:53
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 019D2A727DED589A9C11180371D2E82137A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: YlIgNG5zvh6s1BC507yEDE5b12M.roa (hash: 9Jxgl9sdOKliXdLsBeBxACGlpLlkp4sR317xnNXazAk=)
2: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: H/vbqMJzzqbQhC8B62rj61/nG9ISSkcdFAN6Yv1E3yc=)
3: u9Ageixo_HNGmiROSv6Ka20GVq0.roa (hash: xK8ABKlnGuiR0zkivnn/lgjPacG4+kgYyGPZUP48Fr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7d:ed:58:9a:9c:11:18:03:71:d2:e8:21:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=49162880d375c4cee9b90bafcf1a6a6e4ffc0853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:be:72:4e:9c:29:f2:ce:78:91:7b:fb:de:
ea:69:24:5f:56:c4:17:ce:9d:c1:1d:82:c1:de:15:
a5:ca:7c:4d:34:db:c9:4b:be:8e:02:79:fa:ba:24:
7f:d0:bc:37:28:f6:24:64:13:9b:f8:cd:fd:63:d4:
4f:36:36:93:80:dc:e0:3c:39:20:5e:87:83:12:d1:
60:0f:8f:91:f4:9d:e9:00:e8:73:91:2a:64:7b:82:
e3:6f:ba:2b:5f:6b:ed:36:5d:a5:04:55:85:db:43:
e3:5e:14:52:07:ff:ea:34:8a:9f:69:91:2b:f9:a6:
64:7e:d6:e8:53:44:26:0d:ee:fd:45:ab:99:cf:13:
aa:92:b4:6e:d3:bd:5f:20:67:f9:95:19:48:15:3b:
d7:14:90:8a:0e:ea:8b:9f:dc:3c:d6:c4:2e:02:4c:
5c:65:66:a8:6a:85:3a:c1:d0:4c:58:04:8a:3b:e9:
17:d2:f8:03:da:e0:16:9b:10:2a:a9:ba:fe:45:a9:
06:cd:77:24:e7:c9:3e:9c:e1:34:5e:e0:45:2c:50:
08:ce:a5:0f:84:45:f3:53:64:6a:ca:20:19:e8:62:
08:e2:e7:87:77:1a:92:03:7b:51:21:84:d5:0f:40:
19:4a:3a:96:f1:73:36:ed:8d:c1:72:65:70:b2:05:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:28:80:D3:75:C4:CE:E9:B9:0B:AF:CF:1A:6A:6E:4F:FC:08:53
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:61:57:d9:72:24:df:35:fe:58:15:e7:18:27:57:82:48:6e:
19:7a:73:ea:b5:cb:0e:ec:6b:c6:a7:6d:8b:d0:da:68:a1:1f:
2d:83:cf:43:2e:e4:3b:36:68:61:c6:b9:b4:f2:f0:25:8e:fd:
80:d3:62:7c:13:c0:fb:9f:aa:a7:6f:42:94:64:32:b7:ac:99:
cd:82:b8:a4:05:b9:af:19:06:60:86:63:6d:b6:3f:e4:2a:6c:
fa:16:e9:c9:20:80:60:be:92:3c:68:99:9c:91:76:27:c6:47:
7a:18:fb:ef:f2:d4:e8:f0:1f:c9:04:f6:6d:fc:02:1b:51:59:
ce:04:9f:ef:cf:cc:38:a1:8f:22:8f:fd:a0:a2:8e:f0:31:70:
7b:2a:06:6c:67:71:72:2f:d5:91:7c:f7:7b:be:76:45:53:8d:
d0:19:7c:ab:98:40:16:60:e9:07:43:3e:70:c9:8a:4d:c8:fc:
7a:d9:b2:a9:77:8c:bc:09:39:ca:9d:f6:cc:c9:00:fa:c8:8d:
d1:e9:6b:ce:01:c5:79:7c:38:49:b4:50:9c:b4:c4:43:b4:fc:
25:4b:9e:13:f9:3e:ad:6f:2b:7a:55:2b:13:d0:6b:19:b6:5b:
bc:3c:02:a7:ff:23:3d:0a:75:1c:c9:c5:f2:a3:bb:f4:b8:62:
9b:5a:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:46 2026 by rpki-client