Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File: CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier: 5oXzeVgNbQ95C14BAJAl5DNFKZnF4UxjvJ+9hLkBm1E=
Subject key identifier: 71:C6:AD:29:84:43:1E:10:76:10:0C:4E:20:53:17:20:08:A9:D2:BC
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 019E9BF2A7EF77F0BAF733B829E80AD427AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number: 1636
Signing time: Sat 06 Jun 2026 08:00:31 +0000
Manifest this update: Sat 06 Jun 2026 08:00:31 +0000
Manifest next update: Sun 07 Jun 2026 08:00:31 +0000
Files and hashes: 1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: vfMJEJN1J0wNptVhTwgSKS0L5tpLEgZMK+XcWPpC+Rk=)
2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:a7:ef:77:f0:ba:f7:33:b8:29:e8:0a:d4:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jun 6 08:00:31 2026 GMT
Not After : Jun 7 08:00:31 2026 GMT
Subject: CN=71c6ad2984431e1076100c4e2053172008a9d2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:e0:b9:8a:cd:3f:9e:96:6c:76:e8:f1:c9:
65:2d:aa:d7:05:26:fd:01:c7:77:fb:29:b5:f9:f5:
6e:b7:d1:4f:c8:40:a7:d4:62:ad:40:47:1d:ce:fe:
af:d2:ff:63:8b:7a:1d:b9:eb:65:f7:b4:ba:a3:44:
92:ce:22:a2:5f:5c:04:d8:e3:f0:4b:02:d4:4b:ff:
5f:1f:b2:8f:da:da:98:5b:35:66:82:ac:a5:ea:bd:
34:ae:d7:dd:44:78:b6:9e:28:fd:94:16:ce:6e:8d:
31:0d:43:32:28:a0:d8:6e:85:51:59:bb:22:dd:55:
2c:1a:96:79:71:0f:e3:1f:40:cd:a8:1a:48:2f:11:
13:8d:cf:f9:82:63:b7:ca:af:70:47:ed:48:af:24:
58:be:b7:5c:38:9d:ae:b0:2d:c7:cf:5e:8a:62:e8:
63:3b:d3:b0:a5:00:52:df:48:64:03:8b:45:85:fc:
25:2a:12:98:5c:24:7b:99:c5:6f:28:31:22:b5:eb:
ed:f2:64:f8:8f:73:61:26:c1:45:a5:ae:be:ce:cf:
a8:5a:0a:34:30:be:2d:d8:a1:81:14:aa:76:a4:ee:
d6:c5:b1:55:40:f5:57:24:ce:92:21:29:fa:56:bb:
73:8a:c5:b9:0c:33:97:7b:78:2c:97:d7:65:53:89:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:AD:29:84:43:1E:10:76:10:0C:4E:20:53:17:20:08:A9:D2:BC
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:11:05:ed:70:1b:16:f9:b4:e4:62:53:35:8b:00:db:67:
10:ec:8d:0c:69:25:c4:d0:16:6f:25:e2:c8:a4:fe:13:c9:f1:
1d:2a:a0:78:e2:7a:59:3b:a2:cd:7b:89:38:03:28:c9:10:76:
03:af:7c:1c:84:60:d1:6f:f1:a4:65:4e:1d:23:e1:2f:91:72:
80:85:f2:71:bb:1f:d5:69:0c:70:41:94:df:b5:c8:5a:bf:a4:
a1:76:e7:8a:15:3b:7d:63:45:01:f7:18:a7:45:0a:36:22:0f:
37:5b:b6:5d:a8:18:3a:d6:e8:8a:65:4c:9f:1d:60:82:dd:f9:
6c:ea:38:45:00:b6:07:ce:e5:d5:63:28:7e:eb:97:71:b6:d1:
83:f5:51:7a:ce:da:16:a9:39:51:ab:0d:7c:24:9c:2b:da:bf:
14:c0:c1:df:a5:d6:b6:86:85:bd:58:0b:6a:68:9b:6f:af:73:
10:d3:f5:0e:ef:6a:b0:91:cc:b3:72:5b:6d:d4:0f:8b:ea:ff:
dd:65:fd:7f:7a:e1:32:ab:58:4b:15:72:d5:3f:9e:0c:f2:63:
9c:de:98:da:63:18:37:8f:87:ca:e6:69:19:0a:60:ca:1a:82:
e4:c0:22:40:e6:f5:d6:76:16:9c:4b:2a:d2:64:c1:e6:53:49:
54:bf:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:08:33 2026 by rpki-client