Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: ME+TOb4LgFmeqbfP5W4QYfHE+rd2/QpBu0SVkmRLXCU=
Subject key identifier: 85:2D:77:29:11:5B:63:DE:46:89:6A:6F:12:C9:81:F7:D7:DE:BC:CB
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019DB246A898952E916CB37DA0F67E015570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 15BD
Signing time: Tue 21 Apr 2026 23:01:08 +0000
Manifest this update: Tue 21 Apr 2026 23:01:08 +0000
Manifest next update: Wed 22 Apr 2026 23:01:08 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: IPk+GStcKBFFhfoKsJXqfYy+U8XM1zsI4Cf0fKCxn/k=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:a8:98:95:2e:91:6c:b3:7d:a0:f6:7e:01:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Apr 21 23:01:08 2026 GMT
Not After : Apr 22 23:01:08 2026 GMT
Subject: CN=852d7729115b63de46896a6f12c981f7d7debccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:c1:25:1d:75:e3:97:db:a7:a1:10:26:3d:
f7:03:47:7a:0d:22:69:64:b1:3d:e4:1e:60:c2:28:
45:21:9e:52:ea:73:84:86:c6:a5:f8:1f:a4:74:5b:
ff:fc:57:21:91:2e:57:94:89:82:8f:e0:4e:4b:5e:
4a:5e:4f:5d:f5:8a:3f:9d:5f:85:30:21:ee:49:21:
33:2f:f1:f0:67:65:59:90:cd:41:d3:ae:bc:ae:4f:
be:43:4d:66:af:fe:5d:f2:5a:45:ad:1f:0d:0e:30:
d0:57:99:15:fe:a9:c3:66:b3:7a:74:be:9d:6f:7a:
d3:2c:73:d9:8c:16:6b:ae:44:d1:bb:be:4e:00:98:
99:3d:fe:3a:9f:ae:89:8e:9c:58:56:f4:ab:5c:56:
56:a8:a9:83:36:44:88:c5:c2:65:74:0e:8d:d7:7d:
60:8f:8d:56:15:b1:9f:e6:c6:89:58:b5:3e:d1:5b:
d1:28:37:d0:71:af:91:62:c8:20:56:53:a0:17:ee:
f5:93:df:be:cb:70:15:4f:69:35:e7:f5:33:25:1d:
28:eb:68:05:a2:81:f8:d9:aa:e9:b7:f4:2b:65:97:
37:36:f2:be:d2:4c:51:cc:b0:84:c8:61:20:07:83:
09:46:5c:79:40:49:35:44:d9:46:a6:5f:94:3e:ab:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:77:29:11:5B:63:DE:46:89:6A:6F:12:C9:81:F7:D7:DE:BC:CB
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:ee:d8:62:8c:e3:56:e1:c2:91:53:ed:d9:6f:ee:a6:7d:
8a:8b:84:1a:dd:02:b4:85:91:b0:d6:a0:dd:f5:c5:d6:77:e7:
e7:2d:b5:d1:eb:95:3b:16:cf:29:94:39:07:b6:0e:f6:7a:4a:
bb:97:55:56:47:3d:6d:fb:1c:b8:b1:c5:34:1c:48:a5:e9:0c:
02:49:44:3c:74:ac:6c:b1:5e:89:5a:62:83:3f:37:a4:1a:03:
f5:37:20:9f:22:ba:50:d3:66:6b:9d:c2:ce:c7:6c:b7:a4:c9:
be:b9:ab:e6:fc:ed:0b:b3:08:8d:37:34:aa:a2:84:f4:b4:86:
e1:2f:c2:8d:32:b5:e3:5d:1b:95:fa:c5:38:9e:b8:a5:89:a4:
0b:82:b4:c8:8e:c8:2f:61:bf:7f:37:e6:ea:3c:ad:d6:2f:2c:
b8:df:6f:f4:eb:14:ed:05:62:d3:97:5e:2b:cb:ab:5f:42:ba:
83:23:e5:1c:39:9a:8b:b2:6b:64:60:c6:da:52:47:0a:7b:b4:
83:ac:06:dc:ff:59:06:79:ee:2b:73:8f:3a:00:22:e2:67:83:
ca:7d:38:f4:e5:1b:86:3b:0e:04:2b:3a:6a:78:1d:ce:ec:de:
9b:85:86:23:77:7d:4a:78:23:b3:41:18:10:e1:0c:26:13:1e:
f5:51:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:25:32 2026 by rpki-client