
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier: m26VVgObpgTlPgNEAO+7Ng/GkEkqnqk7W68ZIv++Xlw=
Subject key identifier: 07:1A:F5:59:47:38:39:61:35:B4:22:B2:CA:CC:15:59:C8:94:93:C2
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer: /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial: 019E1C46D44FA4AAEFA0423A743A4E87F9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number: 4E
Signing time: Tue 12 May 2026 13:01:04 +0000
Manifest this update: Tue 12 May 2026 13:01:04 +0000
Manifest next update: Wed 13 May 2026 13:01:04 +0000
Files and hashes: 1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: GTdij6ZFYyUuCt1NXY+Ozdy5MD3EGz5Qy/3tK1GIwvo=)
2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:d4:4f:a4:aa:ef:a0:42:3a:74:3a:4e:87:f9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Validity
Not Before: May 12 13:01:04 2026 GMT
Not After : May 13 13:01:04 2026 GMT
Subject: CN=071af5594738396135b422b2cacc1559c89493c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:c2:9a:59:94:b4:81:90:39:ff:c0:7d:cc:
be:91:93:30:82:34:c1:53:67:26:2c:1f:1b:68:75:
4b:62:47:df:af:d5:82:59:cf:00:82:c0:cf:b5:fb:
00:9d:dc:a0:16:11:85:a1:e9:f0:a4:6e:14:d5:5a:
a0:c3:ba:60:c0:be:3d:b1:9f:77:24:8a:9d:24:d6:
5c:fe:d4:91:97:c9:a7:ce:71:2b:8e:bc:a6:05:bc:
52:49:61:b1:c5:92:2f:e3:9e:40:83:d9:db:8e:15:
43:3f:e9:8f:27:67:88:3b:10:66:9e:66:79:73:b1:
ef:a0:57:f5:78:91:5a:f7:32:83:88:e0:6d:e4:08:
8a:2b:1f:f5:8d:f3:59:ea:b7:1e:df:fe:f0:0a:91:
80:e5:07:ce:bb:74:e6:97:0c:ee:42:84:41:6b:85:
9b:16:26:79:b6:4f:98:20:99:2a:36:2f:2d:0f:b8:
23:bb:17:c7:78:33:94:59:3c:d1:73:26:13:49:50:
8a:20:e5:60:a1:37:89:33:0f:ba:dc:b3:89:13:32:
38:07:73:83:96:5d:d1:b5:19:44:fd:21:0f:52:c6:
35:4b:20:b5:09:19:12:1d:b1:3b:f0:15:d0:7c:dc:
84:05:62:ef:d2:65:06:1d:14:d3:38:e9:e4:5b:92:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:F5:59:47:38:39:61:35:B4:22:B2:CA:CC:15:59:C8:94:93:C2
X509v3 Authority Key Identifier:
keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:67:74:0f:3d:bc:27:0c:ce:20:12:5b:f8:61:1a:c7:8c:ff:
f9:09:f9:1c:05:6b:15:aa:18:e7:c5:bf:6c:f8:a6:e6:1d:58:
e2:0b:94:57:e3:47:75:9b:fb:e7:30:00:f5:74:2d:67:6f:f2:
0d:44:3f:45:cb:41:af:c5:6a:2e:c1:4f:68:e7:6b:68:ff:60:
1e:55:30:19:d7:67:f3:06:48:c8:38:98:03:f3:53:14:ee:b8:
62:16:d0:d8:12:a4:d2:49:06:cf:55:77:83:7b:40:18:fb:3d:
99:78:23:01:81:4a:c9:36:7f:a5:af:45:1e:c4:1b:97:13:26:
a0:e4:59:2e:1f:6e:05:df:06:3d:08:ad:93:48:12:b2:d4:39:
96:38:d6:f7:97:bb:01:a2:44:5a:87:b5:6b:1f:a4:c3:ac:e5:
93:42:d4:43:71:99:58:0b:ed:1b:b3:97:ac:86:23:38:99:df:
93:e9:58:61:79:e0:52:54:4e:29:29:3e:df:35:6b:ff:79:a3:
67:54:54:54:94:76:8f:3f:0e:4e:f5:54:79:2c:e6:a0:64:d8:
e3:f7:07:ec:68:59:06:46:0b:1a:47:6b:73:a6:29:7d:56:ee:
54:1e:a6:91:7b:61:01:c8:bf:dd:1f:b8:ba:f5:8c:b9:30:73:
d3:f1:a6:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRtRPpKrvoEI6dDpOh/nHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NWU5NWJjYzhkMGRlMThiYWY4NDA5MTAwNzliYmMyN2Jl
OWJiZjIwHhcNMjYwNTEyMTMwMTA0WhcNMjYwNTEzMTMwMTA0WjAzMTEwLwYDVQQD
EygwNzFhZjU1OTQ3MzgzOTYxMzViNDIyYjJjYWNjMTU1OWM4OTQ5M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLXCmlmUtIGQOf/Afcy+kZMwgjTB
U2cmLB8baHVLYkffr9WCWc8AgsDPtfsAndygFhGFoenwpG4U1Vqgw7pgwL49sZ93
JIqdJNZc/tSRl8mnznErjrymBbxSSWGxxZIv455Ag9nbjhVDP+mPJ2eIOxBmnmZ5
c7HvoFf1eJFa9zKDiOBt5AiKKx/1jfNZ6rce3/7wCpGA5QfOu3TmlwzuQoRBa4Wb
FiZ5tk+YIJkqNi8tD7gjuxfHeDOUWTzRcyYTSVCKIOVgoTeJMw+63LOJEzI4B3OD
ll3RtRlE/SEPUsY1SyC1CRkSHbE78BXQfNyEBWLv0mUGHRTTOOnkW5JFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAca9VlHODlhNbQissrMFVnIlJPCMB8GA1UdIwQY
MBaAFAlelbzI0N4YuvhAkQB5u8J76bvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Y2VnZNalEzaGk2LUVDUkFIbTd3bnZwdV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lZjg1ZjItYmEwMS00NDQ3LWE2YjQt
ZmM4MTkxOGM0ODg3LzEvQ1Y2VnZNalEzaGk2LUVDUkFIbTd3bnZwdV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lZjg1ZjItYmEwMS00NDQ3LWE2YjQtZmM4MTkxOGM0ODg3
LzEvQ1Y2VnZNalEzaGk2LUVDUkFIbTd3bnZwdV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmd0Dz28
JwzOIBJb+GEax4z/+Qn5HAVrFaoY58W/bPim5h1Y4guUV+NHdZv75zAA9XQtZ2/y
DUQ/RctBr8VqLsFPaOdraP9gHlUwGddn8wZIyDiYA/NTFO64YhbQ2BKk0kkGz1V3
g3tAGPs9mXgjAYFKyTZ/pa9FHsQblxMmoORZLh9uBd8GPQitk0gSstQ5ljjW95e7
AaJEWoe1ax+kw6zlk0LUQ3GZWAvtG7OXrIYjOJnfk+lYYXngUlROKSk+3zVr/3mj
Z1RUVJR2jz8OTvVUeSzmoGTY4/cH7GhZBkYLGkdrc6YpfVbuVB6mkXthAci/3R+4
uvWMuTBz0/GmQg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:27:52 2026 by rpki-client