Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: Ina9FiGSIXaZYHNSiUa8fNm/xDafPI+5yf3jOR05D2I=
Subject key identifier: 18:F8:95:34:AF:15:1A:1F:D9:5D:1A:29:D0:AC:6F:76:20:DC:51:96
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019D28842993E7469A7FA486B9EB2018D169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: 2Y6quasBBtqiTIKmeRTvIxGNZBg.roa (hash: mqAgZqV030TmfwPKsg0X5x+gSYsK7poBlKoJUyvGnoE=)
2: SWYonVyw6t-M4w3DUnG06hLvLEk.roa (hash: tco63oARuy5EvMpcq7VsYr3Rw0Zp8rf/jNLMSLMD8J0=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: ljpkE8rvbxpfbTBglHsw+mqN/s7lUS2ifFvlDlCB82M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:29:93:e7:46:9a:7f:a4:86:b9:eb:20:18:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=18f89534af151a1fd95d1a29d0ac6f7620dc5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:31:92:1b:8c:a1:94:1c:13:4d:b5:24:57:
aa:0a:75:d9:39:0c:e1:97:7e:e5:a1:41:f7:55:15:
6e:d9:7a:ab:8d:a3:34:91:99:0a:4d:b8:9d:a9:c9:
d3:4e:6b:92:d2:65:bf:3e:69:b7:98:80:70:d1:cf:
c2:22:b9:d6:42:29:0e:4b:91:50:d9:c6:1d:c2:a5:
62:7d:36:6e:43:b3:60:27:29:63:a4:cb:da:86:a6:
fb:40:7e:90:d5:99:ba:93:de:fb:59:e2:84:3f:91:
65:1a:68:43:26:de:38:d0:b0:b9:af:f8:1d:a5:9b:
19:d7:ce:8a:2f:9f:10:d6:0a:83:cf:43:38:1b:1a:
24:bd:6b:0b:af:fd:af:64:e4:5a:71:14:68:2f:6a:
be:6f:4b:cd:5e:b8:f5:b4:d3:fa:84:8c:8e:1d:66:
fb:98:0c:04:66:aa:a8:93:1a:00:93:fe:99:99:93:
cd:bb:c0:9e:d3:37:bb:39:d0:1f:e3:18:65:64:0a:
ee:b5:ee:4d:2f:a6:ee:e4:8d:df:bb:f2:69:a6:bf:
0c:3a:83:c1:ec:c5:a0:36:d4:f0:d4:4f:c1:77:65:
c9:8b:32:33:e5:51:d6:9b:68:bb:93:6c:4d:28:24:
ab:d9:1d:60:f2:8f:e8:d5:3c:2b:99:5a:99:10:48:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F8:95:34:AF:15:1A:1F:D9:5D:1A:29:D0:AC:6F:76:20:DC:51:96
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ca:a8:21:c3:74:77:90:44:ff:95:8a:44:4a:6c:97:83:71:
a3:61:67:d3:cf:1b:74:a0:d2:11:a0:8b:5d:18:ce:7e:ef:37:
02:22:e6:4e:3e:cb:3f:71:5f:13:70:04:98:78:09:16:b3:51:
d7:c3:00:30:87:b2:7c:1d:60:8e:50:9f:45:ab:31:9e:fb:d7:
4f:b1:7c:87:42:a3:7c:39:69:18:d7:18:c4:ea:56:a8:9c:b8:
55:b3:38:ac:77:ff:60:22:3c:c8:56:94:bf:b1:05:94:91:59:
fa:4d:59:6a:0e:5f:da:9f:8f:a4:eb:30:87:f6:ca:ad:c3:03:
9a:12:4c:56:06:1c:e0:40:7c:c9:fe:90:cc:8c:35:c4:4f:d4:
4e:c5:66:5b:20:61:5e:12:fc:a7:20:96:1e:e3:cb:4f:9c:e4:
a6:5b:91:10:06:e6:9b:42:37:bf:ab:d8:e1:41:48:5d:9f:79:
cc:ee:c6:b3:3a:17:58:a6:b7:cb:59:16:c3:db:78:05:f9:68:
94:c8:23:ee:37:da:20:6d:f4:7e:e8:b8:6b:6d:1e:b9:49:4c:
63:06:85:8e:d0:94:9a:b1:5a:5b:c4:ac:49:f5:33:c3:0a:f4:
60:fe:5e:7e:cc:9c:06:ae:f9:97:84:2d:e1:a9:e1:d9:c4:c1:
01:2a:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:41 2026 by rpki-client