Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: AXSZsDXC8cJX5ph8/YSXQC6qsIkSmC09W4VcRsbfc4U=
Subject key identifier: F5:20:AF:BD:46:DB:0D:4F:0B:80:D9:0A:A2:64:42:9B:D7:33:CE:AA
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01A06F4C637B10D1DCE2FB0B94BEC8FDDF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1728
Signing time: Sat 05 Sep 2026 02:01:12 +0000
Manifest this update: Sat 05 Sep 2026 02:01:12 +0000
Manifest next update: Sun 06 Sep 2026 02:01:12 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: 2RpwlaE8UK2lPocJZz5ja0qnVsx7n/T+FcDkkvnVj4A=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:63:7b:10:d1:dc:e2:fb:0b:94:be:c8:fd:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Sep 5 02:01:12 2026 GMT
Not After : Sep 6 02:01:12 2026 GMT
Subject: CN=f520afbd46db0d4f0b80d90aa264429bd733ceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:48:7f:42:c2:0e:f1:ed:c3:f2:c8:12:96:
ed:56:82:3f:ec:e3:a3:04:c1:41:86:77:ab:0f:4e:
c4:af:91:84:49:e4:c6:34:78:69:8c:3f:07:a2:05:
1f:23:a2:f9:76:74:68:01:6d:9e:89:a0:79:a2:75:
6c:ab:af:e9:6e:8c:27:55:6f:ff:17:8c:ae:91:e0:
f8:2c:57:4f:72:c0:b6:bc:6f:84:4f:e1:b5:6c:4c:
39:91:50:9c:f5:06:76:cc:24:80:f1:82:32:8a:26:
5b:0f:66:16:4c:88:77:46:be:9e:ac:a7:16:1d:e1:
57:1b:17:39:13:83:bf:7f:b4:1a:c0:99:3b:86:d2:
2a:f7:c7:ae:e0:42:a2:9d:48:82:cc:ee:e5:4d:e9:
25:44:9e:b1:9a:9d:bd:fd:2e:2a:d2:fe:9b:78:d8:
58:4d:90:cc:8a:3b:1c:61:e1:ce:e2:bc:69:e8:c8:
3d:66:9e:14:a7:db:dc:ce:2e:7f:3f:c8:5d:69:65:
13:e6:47:e7:01:d5:fd:d4:83:25:4e:f3:0e:e2:3f:
58:78:3a:a4:e4:1b:ea:ff:d8:20:0e:54:39:3e:ce:
d3:74:2e:d3:1e:03:04:73:9b:f6:dc:e0:e0:8d:d1:
09:e4:43:90:4f:85:e4:85:63:bd:63:ce:31:26:41:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:AF:BD:46:DB:0D:4F:0B:80:D9:0A:A2:64:42:9B:D7:33:CE:AA
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:54:63:4a:40:22:f9:32:92:55:59:a2:5e:f3:c1:61:15:7e:
72:53:44:0f:9a:36:c6:5b:7b:ff:b3:47:3d:79:6c:2a:2d:0e:
23:94:65:20:05:26:5f:eb:41:92:03:28:b7:bc:75:35:3c:2e:
bf:7e:f3:50:41:39:de:6e:ee:b7:97:bc:f0:ef:45:91:9f:86:
95:1b:c8:3e:5e:d1:39:50:45:e4:32:7b:6e:0f:fd:44:9c:d0:
54:23:5c:ff:aa:c3:19:9a:f4:97:e2:7a:b2:c3:a8:6d:cf:91:
25:83:b8:f6:5c:97:5a:fe:1e:90:8b:4b:e8:a3:51:90:ed:6b:
b3:fa:78:66:9b:ec:d4:97:36:25:22:f4:4d:48:06:09:86:b8:
99:69:87:7a:22:08:d8:94:80:91:47:fe:c7:c6:f5:f3:e6:96:
e3:57:10:07:9c:47:a9:55:e8:5b:89:91:0b:a8:a0:18:f7:49:
ff:78:cd:4c:ad:f4:ff:3f:6c:50:d1:c7:d7:07:61:d8:52:0d:
5d:e0:62:9a:e4:82:6f:de:24:b3:cc:07:05:82:94:28:72:ed:
62:02:65:c4:12:8c:64:7f:d4:c1:9c:07:8e:ff:0f:9c:4a:7e:
04:8e:ce:7f:38:c6:bd:4d:dc:c6:aa:6c:55:54:0b:99:9d:3e:
8b:45:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:26:24 2026 by rpki-client