Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: 4jb1a6llOwMgJr8Yzc0DaXvhVZd0MbUFGznJNgDX9XI=
Subject key identifier: 98:23:D7:68:52:FE:F3:06:15:08:F2:3D:E9:9B:55:61:EB:AC:6A:62
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019F94A4BB163554DA06CFE6C9ACD22F8475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: Bx/TCLuoP6WrmIxfkmj/X13cxcWXUCUg+obWa6vAKTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bb:16:35:54:da:06:cf:e6:c9:ac:d2:2f:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=9823d76852fef3061508f23de99b5561ebac6a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:2a:1e:25:ce:78:f4:86:59:24:ae:77:23:
ec:e3:da:28:f6:48:9b:90:63:e5:4d:ee:a0:b3:b2:
a7:5e:b5:0a:86:ff:0f:88:0c:86:49:93:d5:ca:da:
47:f6:be:f4:2f:1f:32:16:77:67:2d:b0:6e:aa:07:
0c:91:b4:42:f9:47:bf:6c:5f:f9:b4:27:eb:73:1d:
9f:dc:04:f6:3f:41:45:70:eb:4a:e1:d4:7d:3a:02:
97:79:fe:73:5c:79:4a:fa:2f:76:fb:9a:5c:57:b9:
f9:fc:54:bb:a2:1f:14:3f:db:c4:ff:98:4d:eb:b5:
f9:a8:51:53:c2:ab:30:ca:22:1b:73:ef:6a:26:2c:
4c:20:cf:8f:46:5e:68:95:a9:24:de:16:4b:1b:73:
ac:b5:74:a7:1e:21:98:63:2d:ed:c3:c1:7c:3c:14:
fc:a3:20:84:cc:14:f7:71:02:b3:74:26:83:78:86:
29:b1:61:dc:d2:9a:7b:5d:9c:df:0c:6c:26:45:21:
f1:00:9c:0d:d4:9f:cb:64:2c:f0:5f:9c:a3:0d:84:
5e:45:46:13:e5:5c:1e:9e:10:a1:be:e1:26:5a:3d:
db:60:f1:c2:69:e5:2a:ac:6f:82:6f:f3:c3:e4:8f:
4c:98:a0:73:25:52:0e:84:be:12:69:c6:ae:32:02:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:D7:68:52:FE:F3:06:15:08:F2:3D:E9:9B:55:61:EB:AC:6A:62
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:23:26:36:a0:cb:39:e8:f5:af:8b:44:ca:ae:21:cb:6e:
aa:a4:30:e8:c3:c2:a2:14:e0:9f:9f:a8:57:1b:f8:99:44:6a:
a5:8b:d0:3b:ee:b2:d6:cb:01:75:2e:5b:5a:6e:1d:5b:57:c1:
a9:45:59:b7:59:07:67:0f:95:6c:29:9e:5e:0f:7a:78:38:42:
27:bf:8f:d3:c1:f8:f2:47:c4:89:94:9f:ee:13:8e:5b:a0:6c:
00:6f:d2:c4:36:43:9b:4c:6c:a5:a5:02:fd:15:60:3f:04:24:
9a:d0:fb:9c:29:ab:e5:65:f8:33:db:3f:13:8b:8f:8f:3f:6e:
22:d4:46:9a:b4:5d:1a:d8:08:37:1b:df:a4:ca:24:92:b2:a0:
9e:fd:b4:4b:46:13:67:ab:c6:ad:a4:14:7d:c3:b0:57:84:80:
7a:01:64:25:2e:ed:d9:85:da:33:69:63:aa:df:f7:e9:cb:9f:
27:d9:5b:c3:f4:a5:e6:f9:74:f9:d5:5d:ae:3a:9f:d2:aa:a0:
74:0a:a3:28:2d:d4:a8:8c:e9:c5:c4:cb:31:f2:3f:b6:7d:5a:
5f:1b:cf:40:ab:f2:32:c9:69:bf:f6:9b:ce:ed:dc:c6:1a:fc:
ea:6e:1f:d7:d1:68:13:12:d0:13:fd:ec:91:fb:44:d7:fe:78:
b6:be:f3:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpLsWNVTaBs/myazSL4R1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjdmMTQ3NmZmODI5MWVmYWYyODQ5Y2QzZjIxNDY3MjI2
N2IwMDEwHhcNMjYwNzI0MTUwMDUxWhcNMjYwNzI1MTUwMDUxWjAzMTEwLwYDVQQD
Eyg5ODIzZDc2ODUyZmVmMzA2MTUwOGYyM2RlOTliNTU2MWViYWM2YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu90qHiXOePSGWSSudyPs49oo9kib
kGPlTe6gs7KnXrUKhv8PiAyGSZPVytpH9r70Lx8yFndnLbBuqgcMkbRC+Ue/bF/5
tCfrcx2f3AT2P0FFcOtK4dR9OgKXef5zXHlK+i92+5pcV7n5/FS7oh8UP9vE/5hN
67X5qFFTwqswyiIbc+9qJixMIM+PRl5olakk3hZLG3OstXSnHiGYYy3tw8F8PBT8
oyCEzBT3cQKzdCaDeIYpsWHc0pp7XZzfDGwmRSHxAJwN1J/LZCzwX5yjDYReRUYT
5VwenhChvuEmWj3bYPHCaeUqrG+Cb/PD5I9MmKBzJVIOhL4SacauMgI98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgj12hS/vMGFQjyPembVWHrrGpiMB8GA1UdIwQY
MBaAFHL38Udv+Cke+vKEnNPyFGciZ7ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEt
MzkxZDEwZmY5NDdjLzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEtMzkxZDEwZmY5NDdj
LzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpAjJjag
yzno9a+LRMquIctuqqQw6MPCohTgn5+oVxv4mURqpYvQO+6y1ssBdS5bWm4dW1fB
qUVZt1kHZw+VbCmeXg96eDhCJ7+P08H48kfEiZSf7hOOW6BsAG/SxDZDm0xspaUC
/RVgPwQkmtD7nCmr5WX4M9s/E4uPjz9uItRGmrRdGtgINxvfpMokkrKgnv20S0YT
Z6vGraQUfcOwV4SAegFkJS7t2YXaM2ljqt/36cufJ9lbw/Sl5vl0+dVdrjqf0qqg
dAqjKC3UqIzpxcTLMfI/tn1aXxvPQKvyMslpv/abzu3cxhr86m4f19FoExLQE/3s
kftE1/54tr7zgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:27 2026 by rpki-client