Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: +w5zbejz+Mkhoy2Rdxy2W/DNtDpMPycpJ6/qxqo19pI=
Subject key identifier: 73:63:93:5C:A4:43:6B:B8:EA:33:C6:A3:FF:FF:6F:DB:60:B4:A0:DA
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019E1DFE90948BA1E841E4564BA71EAD0D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: pGoBu2EpLXv9hXt2x1sGtoMQqz4LWVCNDrx2cm2jSvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:90:94:8b:a1:e8:41:e4:56:4b:a7:1e:ad:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=7363935ca4436bb8ea33c6a3ffff6fdb60b4a0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:43:b3:ee:36:62:ce:65:e6:7b:89:e6:f6:
32:a2:7d:f0:85:5d:7e:5e:0d:25:34:9f:24:fc:df:
81:d5:78:7f:a7:4e:3b:10:ba:5a:93:1b:39:9c:8d:
fc:45:24:3b:e1:79:e1:b3:62:07:af:34:2d:06:de:
50:d9:7c:1e:f3:4a:9f:2a:e7:9c:1c:12:2b:3c:64:
80:36:f1:3f:a2:a7:8d:86:41:c6:0a:3b:28:dc:3d:
22:b6:b0:7e:4c:57:d0:11:2a:1b:71:ac:f2:09:68:
8e:be:cb:1a:cc:8c:97:10:29:c7:f9:33:f4:4c:24:
91:28:fb:24:d9:82:63:6f:0b:d4:c1:74:53:7c:3d:
6f:65:e6:3a:7c:a5:33:98:7f:01:d4:84:56:b9:d0:
91:0f:b9:7e:4c:64:62:85:68:be:7d:1b:fb:14:b1:
60:a4:2f:5e:b9:cf:07:2b:9f:61:dc:0b:98:40:b6:
a6:42:ed:c8:6f:f4:b0:4d:e3:7b:de:2c:2b:e3:98:
f4:82:fd:19:9f:73:69:26:cb:0f:6b:84:1c:3f:aa:
ec:90:8d:df:3e:d7:e5:b0:e7:64:e9:fa:bd:17:65:
7a:87:20:57:e1:0f:df:7a:ac:6c:9c:e0:d4:dc:94:
4e:e8:cb:e9:1c:fe:91:39:5c:5a:5b:5e:a4:3f:a3:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:93:5C:A4:43:6B:B8:EA:33:C6:A3:FF:FF:6F:DB:60:B4:A0:DA
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7f:8e:c7:2c:47:4d:64:b6:46:0f:9d:ec:3f:78:df:bd:94:
20:ad:70:41:ba:08:f6:e3:1c:61:bc:4d:3b:36:e0:e0:eb:53:
b0:ba:12:f0:3d:8a:45:1d:80:f1:4d:09:bf:b9:17:68:72:ec:
73:33:83:71:4c:49:8b:62:7d:9f:48:5c:33:19:93:7a:25:02:
5d:e9:83:2b:cf:a8:c9:23:f9:03:b7:b9:d6:fb:6f:fc:ab:eb:
c6:2d:10:b9:46:e0:c9:72:66:f2:7b:d6:b3:d1:f7:6c:82:dd:
59:88:16:b3:38:95:f2:df:93:ab:c0:f2:67:11:80:72:70:70:
4e:2e:88:49:17:b7:d5:56:6c:30:12:61:b9:6c:1b:24:b9:77:
9f:a7:b7:f2:3c:62:60:a3:d7:48:bd:b9:03:4a:41:f3:93:31:
12:4d:42:2d:b5:57:44:f2:5b:04:b7:b7:40:1e:6c:9a:9e:e2:
c8:1b:e0:b3:9a:6e:05:2f:a6:87:35:28:b3:18:f7:ce:20:ac:
73:95:1d:d3:88:a2:4f:69:0b:ee:df:7b:60:9a:49:94:f5:60:
3f:2a:0b:61:48:c6:b7:a1:ac:79:df:09:07:85:f9:75:a7:2c:
1b:f2:3e:66:ff:17:99:70:d5:aa:1b:70:3d:28:d6:87:a9:86:
c5:5c:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:46 2026 by rpki-client