Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: qtYeFdFXAt0dB86l56nQxz4YyGYiRdkGd4yxh3GTAEU=
Subject key identifier: BB:FD:46:7B:01:DB:5D:C5:69:56:2D:3E:25:2E:DE:B3:A9:FE:32:56
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019F859F765E50CEBD2117C451ABE69B223A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 16AF
Signing time: Tue 21 Jul 2026 17:00:47 +0000
Manifest this update: Tue 21 Jul 2026 17:00:47 +0000
Manifest next update: Wed 22 Jul 2026 17:00:47 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: PrQWTL2KYAr1scSqu+TThOvHhYsok5QgpMMmMke+8VI=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:76:5e:50:ce:bd:21:17:c4:51:ab:e6:9b:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jul 21 17:00:47 2026 GMT
Not After : Jul 22 17:00:47 2026 GMT
Subject: CN=bbfd467b01db5dc569562d3e252edeb3a9fe3256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:79:69:d5:89:e4:83:34:cd:e1:c0:f1:72:
cc:84:85:d6:56:42:e3:6b:56:f2:e0:9e:16:de:38:
e5:fa:8c:8e:91:d9:9b:4c:a5:3c:48:ef:ca:0c:4e:
cb:58:7f:eb:8a:93:f2:ca:38:8b:20:2c:5a:31:ab:
80:b5:da:d5:d7:9a:e5:a1:c3:00:45:69:95:25:7d:
2f:bb:49:bb:37:76:1e:a5:42:79:07:e6:82:dd:6d:
62:5f:f1:a6:28:ea:72:12:9e:46:2f:4b:e4:85:13:
71:39:c9:e4:4d:50:23:ef:72:b4:95:d9:bd:db:29:
42:89:9f:eb:ef:6b:91:77:59:d9:87:25:57:c2:2f:
1c:93:8b:ae:3d:af:3c:59:1c:60:a9:b5:30:f3:10:
c0:15:58:2e:39:79:12:28:fe:11:dc:aa:20:37:71:
67:3b:38:7c:28:00:2a:42:23:54:e6:44:40:1f:38:
a7:cb:cd:b1:d8:08:dc:a9:1a:1c:67:0f:cb:87:af:
61:a6:4a:14:08:e1:ff:a1:1c:c5:a8:c7:e3:30:7a:
85:5d:7f:03:09:36:ca:31:8c:af:ef:98:7b:18:8c:
6e:f7:27:c2:77:10:fd:46:da:e2:ef:31:39:72:66:
7f:1b:30:6c:a1:d2:84:a9:d3:7f:a8:b8:f4:d3:60:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:46:7B:01:DB:5D:C5:69:56:2D:3E:25:2E:DE:B3:A9:FE:32:56
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9b:90:ea:12:4a:df:58:94:f6:99:44:e0:ec:4f:a4:63:6b:
0f:ca:01:96:09:26:86:b0:0c:e2:bc:b2:8e:88:67:2c:dd:e1:
8f:15:3a:32:62:08:21:e9:ca:a9:a3:5a:47:38:2a:19:6e:2c:
5d:50:35:d8:7e:7e:7a:d7:54:a1:33:b5:28:24:82:1d:d4:bd:
7e:a3:5a:50:57:d7:b7:31:3b:d8:0d:f8:df:57:39:65:86:42:
e6:44:a8:48:85:00:24:1d:f3:cb:7b:d8:39:86:20:c9:cb:91:
84:42:3b:66:bb:3a:84:74:c1:a6:1b:31:0b:54:59:b0:f3:81:
9f:35:2b:6a:4b:9d:a1:34:75:3c:39:92:e4:01:ed:3b:5b:2e:
bc:08:0a:ee:0f:a7:40:be:ec:2c:c2:6d:0f:69:43:2b:b7:03:
ae:f9:12:33:49:2c:88:a5:48:e1:c9:dc:35:6a:82:0b:c5:df:
2a:36:af:b3:7e:a8:ff:f7:5b:2e:af:90:3e:f5:bb:ef:a1:47:
01:0d:0a:31:08:82:51:89:d7:fa:b7:09:46:37:ef:00:0f:21:
24:4e:78:0c:2b:a9:37:a9:fa:66:0a:68:4b:33:39:96:ad:8f:
aa:40:d0:8f:b7:b3:87:0c:92:f0:20:ec:53:ca:c4:a7:7f:89:
2e:71:aa:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn3ZeUM69IRfEUavmmyI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjYwNzIxMTcwMDQ3WhcNMjYwNzIyMTcwMDQ3WjAzMTEwLwYDVQQD
EyhiYmZkNDY3YjAxZGI1ZGM1Njk1NjJkM2UyNTJlZGViM2E5ZmUzMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5F5adWJ5IM0zeHA8XLMhIXWVkLj
a1by4J4W3jjl+oyOkdmbTKU8SO/KDE7LWH/ripPyyjiLICxaMauAtdrV15rlocMA
RWmVJX0vu0m7N3YepUJ5B+aC3W1iX/GmKOpyEp5GL0vkhRNxOcnkTVAj73K0ldm9
2ylCiZ/r72uRd1nZhyVXwi8ck4uuPa88WRxgqbUw8xDAFVguOXkSKP4R3KogN3Fn
Ozh8KAAqQiNU5kRAHziny82x2AjcqRocZw/Lh69hpkoUCOH/oRzFqMfjMHqFXX8D
CTbKMYyv75h7GIxu9yfCdxD9Rtri7zE5cmZ/GzBsodKEqdN/qLj002By7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv9RnsB213FaVYtPiUu3rOp/jJWMB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZuQ6hJK
31iU9plE4OxPpGNrD8oBlgkmhrAM4ryyjohnLN3hjxU6MmIIIenKqaNaRzgqGW4s
XVA12H5+etdUoTO1KCSCHdS9fqNaUFfXtzE72A3431c5ZYZC5kSoSIUAJB3zy3vY
OYYgycuRhEI7Zrs6hHTBphsxC1RZsPOBnzUrakudoTR1PDmS5AHtO1suvAgK7g+n
QL7sLMJtD2lDK7cDrvkSM0ksiKVI4cncNWqCC8XfKjavs36o//dbLq+QPvW776FH
AQ0KMQiCUYnX+rcJRjfvAA8hJE54DCupN6n6ZgpoSzM5lq2PqkDQj7ezhwyS8CDs
U8rEp3+JLnGqGQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:46:03 2026 by rpki-client