Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: Vr4BJ3xYxw83uMzScEfRftuhAgEh8t6I5rkyBdQyXcQ=
Subject key identifier: B1:AB:D7:5A:C7:35:C2:57:1A:25:A1:C0:F5:12:88:A0:D0:3D:63:BB
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 01A17F9884BB08D43DF89A6516AC9FFAE9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 17B5
Signing time: Tue 27 Oct 2026 23:01:04 +0000
Manifest this update: Tue 27 Oct 2026 23:01:04 +0000
Manifest next update: Wed 28 Oct 2026 23:01:04 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: MWRfTXe0l3q9Dhdf2UxE5nE3ckAoggIkG7YrBojwufY=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:84:bb:08:d4:3d:f8:9a:65:16:ac:9f:fa:e9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Oct 27 23:01:04 2026 GMT
Not After : Oct 28 23:01:04 2026 GMT
Subject: CN=b1abd75ac735c2571a25a1c0f51288a0d03d63bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:25:4a:92:4d:bc:55:ac:93:a5:68:7b:2c:
1c:00:7e:23:0d:8f:95:6b:ed:76:4e:2f:68:0a:56:
04:fc:00:c9:47:76:5c:22:77:7a:42:f7:60:17:3c:
80:9e:4d:52:88:57:66:4d:c4:63:62:7a:b1:94:ed:
52:07:9b:30:09:f2:d4:ee:68:4f:e5:72:11:73:ff:
cd:f9:b5:5d:ed:6d:e7:19:db:0e:a9:87:a2:99:cc:
54:4a:d4:92:78:c2:f6:4e:9c:cd:a7:77:82:0c:af:
6f:f1:05:6f:c2:62:2e:52:67:98:d3:f9:c4:1a:6a:
c3:08:b1:bb:63:54:40:46:1d:c2:94:95:14:1a:a0:
36:e9:fa:df:02:5d:18:07:ac:45:d3:f7:47:9e:28:
94:4e:78:d7:b3:94:76:00:06:94:1a:5f:44:94:96:
fc:e6:69:cb:2c:3a:12:0c:ad:ec:96:4a:3f:21:cf:
10:94:c9:d1:b0:53:9a:e5:17:5b:39:35:50:1b:0c:
00:ef:4a:0a:71:46:12:38:57:e3:55:76:a2:b9:13:
5e:c3:70:e2:bb:a2:6f:2b:8e:bc:95:eb:58:21:e4:
90:03:02:fc:a4:2d:15:23:84:ad:5e:f7:ee:77:46:
2c:4e:ac:1b:ac:ac:68:5e:85:36:98:af:fb:bb:40:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:D7:5A:C7:35:C2:57:1A:25:A1:C0:F5:12:88:A0:D0:3D:63:BB
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f5:7b:0c:fc:cc:e6:69:dd:0a:0a:d7:a0:90:4b:a5:7d:22:
1f:57:dd:3b:b6:e4:5b:a4:57:36:09:ae:07:cd:9a:85:f2:67:
cf:b1:b0:aa:21:bf:ce:39:a5:a0:37:dd:c3:c8:7d:1f:1f:12:
96:83:fd:37:2b:73:94:77:c5:b1:88:40:00:ec:7b:f0:1f:95:
ed:24:40:bd:6c:c2:4b:26:46:a6:46:ae:2c:d5:f0:5e:58:44:
5e:44:b5:4e:89:1f:49:e4:cf:3d:89:73:47:a5:6f:42:b9:47:
1e:25:3b:72:d3:76:54:b8:e1:47:fb:be:9f:0b:c7:51:60:1a:
c1:73:97:7d:ec:18:27:9a:65:c0:dc:fe:ce:9d:77:38:11:f6:
38:d5:17:7f:e7:81:af:f6:cc:cd:da:06:68:0a:65:96:08:42:
39:cb:eb:d8:90:1c:6b:90:81:64:1e:7e:e8:fe:7f:e2:83:9e:
50:d1:d1:0b:13:72:d5:b8:5a:9c:dc:13:3e:09:5f:3e:ec:47:
0e:c4:9c:49:5d:19:27:96:e6:3f:18:db:5b:3a:6e:44:bd:db:
64:60:f9:54:e1:bf:cd:b8:3a:75:36:49:9e:c5:68:27:c2:27:
86:ae:67:4f:c4:57:92:9b:8d:2f:f8:f1:f4:13:8d:3f:60:fb:
4f:41:ff:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mIS7CNQ9+JplFqyf+unPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjYxMDI3MjMwMTA0WhcNMjYxMDI4MjMwMTA0WjAzMTEwLwYDVQQD
EyhiMWFiZDc1YWM3MzVjMjU3MWEyNWExYzBmNTEyODhhMGQwM2Q2M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZclSpJNvFWsk6VoeywcAH4jDY+V
a+12Ti9oClYE/ADJR3ZcInd6QvdgFzyAnk1SiFdmTcRjYnqxlO1SB5swCfLU7mhP
5XIRc//N+bVd7W3nGdsOqYeimcxUStSSeML2TpzNp3eCDK9v8QVvwmIuUmeY0/nE
GmrDCLG7Y1RARh3ClJUUGqA26frfAl0YB6xF0/dHniiUTnjXs5R2AAaUGl9ElJb8
5mnLLDoSDK3slko/Ic8QlMnRsFOa5RdbOTVQGwwA70oKcUYSOFfjVXaiuRNew3Di
u6JvK468letYIeSQAwL8pC0VI4StXvfud0YsTqwbrKxoXoU2mK/7u0AApQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGr11rHNcJXGiWhwPUSiKDQPWO7MB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvV7DPzM
5mndCgrXoJBLpX0iH1fdO7bkW6RXNgmuB82ahfJnz7GwqiG/zjmloDfdw8h9Hx8S
loP9NytzlHfFsYhAAOx78B+V7SRAvWzCSyZGpkauLNXwXlhEXkS1TokfSeTPPYlz
R6VvQrlHHiU7ctN2VLjhR/u+nwvHUWAawXOXfewYJ5plwNz+zp13OBH2ONUXf+eB
r/bMzdoGaApllghCOcvr2JAca5CBZB5+6P5/4oOeUNHRCxNy1bhanNwTPglfPuxH
DsScSV0ZJ5bmPxjbWzpuRL3bZGD5VOG/zbg6dTZJnsVoJ8Inhq5nT8RXkpuNL/jx
9BONP2D7T0H/WA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:53 2026 by rpki-client