Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: lAMg7vtNN6EZumyL94kv2f9q6/aGe+wL+QwHlj0bKQA=
Subject key identifier: 2C:22:B8:66:C6:03:03:D5:39:83:8F:50:0D:05:5B:86:FF:88:BA:7C
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019FF8DA9CCD0369BAD94343562FABAF22D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1A01
Signing time: Thu 13 Aug 2026 02:01:44 +0000
Manifest this update: Thu 13 Aug 2026 02:01:44 +0000
Manifest next update: Fri 14 Aug 2026 02:01:44 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: Yf+1AW3qJVRFL5eZbDj32zBNlARNlF/8BZCrlx5U0xA=)
2: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
3: tTn1ks7Z8YcGBKP9ykpu_gf1OJk.asa (hash: obfgDZcfcncitqpBXmsKFyn/lgySrFZg3U6S7kKFoEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:9c:cd:03:69:ba:d9:43:43:56:2f:ab:af:22:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Aug 13 02:01:44 2026 GMT
Not After : Aug 14 02:01:44 2026 GMT
Subject: CN=2c22b866c60303d539838f500d055b86ff88ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:15:5f:cd:c1:47:59:28:b9:26:b5:da:a0:
bc:71:67:85:0d:8a:7d:01:fb:ed:95:63:ed:fe:a3:
f9:84:ac:d9:09:71:b5:8c:4d:63:fe:ab:5d:82:1e:
07:bf:6a:ad:95:fc:ba:0a:14:2f:53:7f:82:a1:5d:
5a:7d:5f:5c:e9:39:7c:12:1a:55:ee:8b:88:4c:f9:
53:51:4b:cb:61:cd:f4:fa:fb:39:78:41:39:27:f5:
fb:4a:aa:97:2f:a5:4b:40:a9:2c:7c:fd:b6:92:78:
d5:3b:44:89:43:30:42:47:5e:01:7e:ef:ad:20:0a:
4c:27:1f:55:0b:76:71:57:91:5e:e4:e1:5e:3f:59:
30:6a:8f:a4:c7:2f:20:bb:13:ce:63:fc:81:90:5f:
68:26:31:72:da:18:57:a7:a8:f9:88:73:0c:0c:47:
bd:e9:85:92:7c:97:90:39:76:6a:f3:53:17:88:70:
30:d5:ad:5a:db:5e:38:bd:42:f1:b2:aa:b5:db:df:
f4:e3:ec:3e:b0:b3:b5:2f:a2:ce:1a:05:93:90:35:
fd:ad:4e:7e:b0:bd:e9:fd:d4:1f:e4:e0:5f:60:7d:
0f:85:aa:f2:67:70:3e:53:10:c7:cc:4e:3b:4c:fc:
7b:a4:0b:a1:e2:23:94:e5:42:62:76:4b:8d:c1:f4:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:B8:66:C6:03:03:D5:39:83:8F:50:0D:05:5B:86:FF:88:BA:7C
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:79:b0:1e:df:16:cf:3f:56:80:ff:75:fa:2f:43:a6:98:74:
2f:03:72:c1:0f:89:7b:3a:e5:59:c0:42:8f:84:45:c5:23:21:
68:36:62:f9:e8:ae:43:e6:72:44:c3:45:96:70:d2:c5:19:ed:
af:3c:ce:6e:a4:cb:cd:40:71:30:ed:68:a6:c3:2a:20:be:17:
30:eb:82:df:70:57:c5:b8:97:fa:94:b0:dd:65:42:e8:be:d1:
e2:11:36:11:56:2d:91:84:6e:43:00:b1:e1:01:cf:f6:14:9d:
ed:fc:5c:7f:ba:0b:9c:2f:da:97:6e:0d:2c:b2:41:78:d7:b8:
f4:40:61:09:97:2a:94:83:82:40:0b:9d:15:56:ef:59:3f:78:
01:93:9d:46:69:18:03:42:c6:47:5e:37:70:7c:a2:9b:6f:f0:
ce:0e:63:26:ea:38:50:2d:95:29:99:9f:0f:a4:62:0e:a2:1c:
4b:72:f9:5e:48:f3:53:fa:b9:78:4d:e2:6e:08:1b:0e:58:60:
43:5c:ca:58:39:93:2b:fa:07:2e:9a:b6:8b:e6:6a:19:29:ad:
95:76:aa:5e:5b:62:ec:25:af:6c:29:1e:e6:f2:fd:2a:93:d8:
f4:54:4f:02:b7:0b:27:d8:e2:d0:cd:fe:21:cb:8f:a9:74:14:
7a:5f:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:30 2026 by rpki-client