
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: VfpTx8AL47MyetuYxuteZbF7jVb2d6RIwx/eor7RbYY=
Subject key identifier: C2:29:6A:D8:6F:32:A7:83:13:CD:43:F6:24:1A:59:7A:34:51:63:6D
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019EFC838F6346C1C831B060A583616B1EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 197E
Signing time: Thu 25 Jun 2026 02:02:20 +0000
Manifest this update: Thu 25 Jun 2026 02:02:20 +0000
Manifest next update: Fri 26 Jun 2026 02:02:20 +0000
Files and hashes: 1: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: XZff54KIVlXBZjx9mGbiE+PqtNMN4YRF08dsgqkqz+Q=)
2: FSxkv144AbC5PzM8dG4BNoPhaic.asa (hash: 03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=)
3: h-q2Fwpy9DZEqSoxXIpSYO2L4-c.roa (hash: J2ASMG1JXtQe6JDsxjzFRYzZaGC08fe2rV3MkNJcO60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:8f:63:46:c1:c8:31:b0:60:a5:83:61:6b:1e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jun 25 02:02:20 2026 GMT
Not After : Jun 26 02:02:20 2026 GMT
Subject: CN=c2296ad86f32a78313cd43f6241a597a3451636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:40:62:99:cf:21:95:d3:aa:be:ec:77:9d:
9a:83:34:cd:09:12:0b:06:bd:0d:db:4a:eb:7f:a3:
49:45:06:db:1c:56:07:8e:d0:37:df:6d:b4:92:b1:
38:f5:de:e7:e2:8e:0d:22:8d:38:29:f3:72:6a:6e:
8b:d3:4b:1e:92:a7:a1:29:ac:da:49:26:2d:4b:24:
78:47:e2:49:bc:00:66:3d:6d:cb:9f:0a:2f:d3:27:
b9:12:83:b5:7f:58:fa:96:d9:b5:66:d0:a2:29:5e:
0a:c8:35:77:ac:48:a8:5f:82:f1:bb:d9:08:ce:0e:
39:7d:8e:14:6c:57:07:b9:71:34:2d:3a:b9:9f:fa:
a4:7f:cf:07:4b:ed:0c:fe:ba:29:07:eb:35:a3:59:
9e:49:38:07:eb:32:0b:13:72:8e:e1:b4:43:ff:e5:
91:a2:0e:72:18:24:fb:1d:cc:fe:5e:13:37:c8:ce:
47:81:88:31:69:1a:97:50:b1:55:29:72:84:1e:14:
b6:4b:84:46:01:a2:ee:dc:67:cc:4e:0b:a9:6e:47:
70:44:e4:ec:bb:30:f9:de:d9:27:9a:00:db:65:5e:
05:7c:fa:d0:3c:60:62:6b:a2:b0:34:91:0a:31:25:
c6:13:e1:ad:92:eb:40:e0:18:83:38:6e:d2:a2:2d:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:6A:D8:6F:32:A7:83:13:CD:43:F6:24:1A:59:7A:34:51:63:6D
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:37:e0:c3:32:42:40:d0:4e:3d:66:d3:83:3f:79:d7:ad:57:
86:85:f2:8a:93:b4:01:fd:43:02:7c:e1:53:71:2e:2d:cd:9a:
b5:ac:57:30:43:e1:34:86:03:c7:36:0b:98:f4:be:66:f8:76:
f9:67:d7:31:71:b8:e8:58:fb:b7:02:dd:e9:54:de:d5:c1:21:
38:33:3c:92:27:a1:41:fd:4c:65:e0:09:57:1f:0e:39:f0:31:
af:6b:98:41:93:09:24:53:36:f5:10:87:f7:5a:0a:d7:51:65:
22:66:57:04:26:b7:70:ae:8c:6c:14:d9:b4:47:6e:1f:04:4c:
c1:2f:d7:44:d2:b7:26:11:af:1f:78:d4:da:0b:65:fc:e1:22:
6e:b2:2f:73:c2:da:c3:45:ed:07:f8:74:0f:3f:cb:1b:8c:38:
05:99:40:dc:6c:ff:3d:57:d4:b3:03:15:14:8a:2d:18:33:e4:
8f:4a:5d:12:ac:25:29:9f:48:cc:f6:f4:01:65:20:b3:c3:ba:
a4:18:ec:d1:17:68:39:c0:ac:11:22:14:89:21:df:b0:bd:3c:
4d:3c:38:85:b9:79:df:d5:33:10:ce:f7:e5:cb:c5:2d:39:d9:
0f:77:77:93:f9:ec:b9:6e:72:b4:b8:c9:d2:56:e5:9a:2a:33:
f2:4c:0a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:41 2026 by rpki-client