Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: doIQ0i4fYu15PnWEknul/S/x4s4hPffiLyYbd8Gj5MY=
Subject key identifier: F9:A0:56:E2:BA:6C:92:B3:DE:E0:BC:42:44:86:F0:A9:A9:51:1B:63
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019D25BA10E9C9DF2CEF5B2FB942CDB4B8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:44 +0000
Manifest this update: Wed 25 Mar 2026 16:00:44 +0000
Manifest next update: Thu 26 Mar 2026 16:00:44 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 2ZyErPbbbsl6JFFqm85msfZdMMuLpnTQ8atHwiIa1xI=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:10:e9:c9:df:2c:ef:5b:2f:b9:42:cd:b4:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Mar 25 16:00:44 2026 GMT
Not After : Mar 26 16:00:44 2026 GMT
Subject: CN=f9a056e2ba6c92b3dee0bc424486f0a9a9511b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:7e:a3:b1:3e:ba:b5:4c:05:5e:43:5b:1c:
02:67:07:64:b0:b1:ad:f0:ca:4e:bb:16:8d:3d:b7:
c8:3c:44:b3:e4:eb:30:15:39:5d:54:f8:a1:06:0a:
72:f2:a7:a4:f4:54:6b:23:b1:0b:14:2e:8e:14:9d:
40:55:59:31:3c:62:7b:64:06:fc:0e:f5:44:b1:7d:
a7:6c:21:79:60:73:69:ad:92:ac:dc:d5:36:02:de:
31:94:5d:f0:9b:f5:ad:ec:d4:1b:45:97:a4:be:7a:
48:c7:98:cd:84:7b:cf:c9:aa:92:52:0a:5d:c0:f3:
5a:ae:7c:9c:ac:43:39:95:fc:70:f6:69:d2:de:31:
9e:e7:2a:6c:68:05:c5:d1:03:1b:41:4f:35:4f:40:
75:97:10:ed:bd:cb:46:53:58:5b:7f:57:38:ba:57:
f3:b9:01:16:a6:e4:37:6b:cc:99:82:c4:d3:08:d6:
50:8f:bb:e1:3e:aa:62:e0:cf:8f:e7:23:d8:96:a2:
1c:d8:60:81:18:35:df:ca:5f:ef:88:c6:33:25:aa:
d2:49:63:cd:d1:6e:7d:b6:d6:81:4e:ef:35:c6:b6:
cc:1f:6d:11:ad:91:f6:42:44:40:e8:a0:3a:f7:53:
2f:85:a4:6e:f5:92:d4:82:74:5e:4e:1c:9e:8c:cc:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:56:E2:BA:6C:92:B3:DE:E0:BC:42:44:86:F0:A9:A9:51:1B:63
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:93:ff:68:10:64:a2:96:19:ff:a1:60:89:58:59:0b:b2:98:
ec:d5:ac:67:32:91:b3:90:1d:b8:3c:d1:ea:31:d7:d7:06:58:
31:49:d9:76:2e:53:16:ad:ff:4d:1c:fa:6f:f6:34:53:38:a7:
d5:6c:a6:5d:56:1a:5a:8a:9e:a7:27:7b:8b:a6:d2:f1:9b:fb:
1f:60:d6:e0:2b:8d:70:6e:5a:5f:07:33:e6:02:95:85:da:f4:
ae:74:55:99:f7:6d:9a:67:b5:fc:8e:95:72:f2:15:13:a6:ae:
fd:c4:ce:3f:0e:ed:db:75:38:c2:08:c0:c9:b6:65:b1:98:4a:
ea:a0:40:92:e5:7c:20:16:f1:19:e3:ac:2d:23:a0:97:0b:03:
9e:47:76:92:ac:f5:a2:27:65:a5:94:64:cf:85:58:ed:3c:89:
10:49:16:e1:54:1b:53:ce:92:39:d6:88:33:5a:80:fa:ca:d7:
ee:17:2d:3b:0e:b8:62:48:e9:e8:9f:e1:0b:77:a3:f3:22:f3:
0f:c1:f2:07:30:8e:21:63:9d:c4:92:ea:b0:ef:62:26:98:6c:
68:b2:d5:a4:37:a1:bd:b7:56:c8:f8:b2:ba:84:4e:3a:a9:a8:
21:e7:e7:e4:af:15:54:ed:30:fe:d4:92:07:68:17:55:19:67:
69:21:1a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luhDpyd8s71svuULNtLigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjYwMzI1MTYwMDQ0WhcNMjYwMzI2MTYwMDQ0WjAzMTEwLwYDVQQD
EyhmOWEwNTZlMmJhNmM5MmIzZGVlMGJjNDI0NDg2ZjBhOWE5NTExYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfx+o7E+urVMBV5DWxwCZwdksLGt
8MpOuxaNPbfIPESz5OswFTldVPihBgpy8qek9FRrI7ELFC6OFJ1AVVkxPGJ7ZAb8
DvVEsX2nbCF5YHNprZKs3NU2At4xlF3wm/Wt7NQbRZekvnpIx5jNhHvPyaqSUgpd
wPNarnycrEM5lfxw9mnS3jGe5ypsaAXF0QMbQU81T0B1lxDtvctGU1hbf1c4ulfz
uQEWpuQ3a8yZgsTTCNZQj7vhPqpi4M+P5yPYlqIc2GCBGDXfyl/viMYzJarSSWPN
0W59ttaBTu81xrbMH20RrZH2QkRA6KA691MvhaRu9ZLUgnReThyejMy9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmgVuK6bJKz3uC8QkSG8KmpURtjMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpP/aBBk
opYZ/6FgiVhZC7KY7NWsZzKRs5AduDzR6jHX1wZYMUnZdi5TFq3/TRz6b/Y0Uzin
1WymXVYaWoqepyd7i6bS8Zv7H2DW4CuNcG5aXwcz5gKVhdr0rnRVmfdtmme1/I6V
cvIVE6au/cTOPw7t23U4wgjAybZlsZhK6qBAkuV8IBbxGeOsLSOglwsDnkd2kqz1
oidlpZRkz4VY7TyJEEkW4VQbU86SOdaIM1qA+srX7hctOw64Ykjp6J/hC3ej8yLz
D8HyBzCOIWOdxJLqsO9iJphsaLLVpDehvbdWyPiyuoROOqmoIefn5K8VVO0w/tSS
B2gXVRlnaSEaAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:02 2026 by rpki-client