Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: G2ybfIuaOA2LwqMyELjMlYzvVR0MvHtfFBsJUsLLhq4=
Subject key identifier: 5E:A4:BB:09:35:BE:2D:58:87:2C:19:48:30:1C:FF:C4:FF:D4:9C:C3
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 019F1867AB928BC9AA96E3DF994E233CC3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 12:01:14 +0000
Manifest this update: Tue 30 Jun 2026 12:01:14 +0000
Manifest next update: Wed 01 Jul 2026 12:01:14 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: 4aOxhjxfEdr0aXIB2FXAlhdkCohxiJghBHu80QOtQHU=)
2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:ab:92:8b:c9:aa:96:e3:df:99:4e:23:3c:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Jun 30 12:01:14 2026 GMT
Not After : Jul 1 12:01:14 2026 GMT
Subject: CN=5ea4bb0935be2d58872c1948301cffc4ffd49cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:53:9b:da:70:79:63:29:44:5d:27:b2:87:
f5:6b:a8:55:0c:9d:1a:69:60:c8:82:20:90:37:a1:
8c:8d:98:e7:8f:c5:c2:99:17:2a:7a:29:07:88:7a:
8e:d4:09:41:ea:4d:4e:d1:a9:56:6b:72:85:55:7c:
15:ce:70:dc:cb:b2:ee:c7:f4:cb:14:2a:1f:39:76:
ce:d2:0c:70:8c:cf:67:3e:05:c0:75:76:18:d4:75:
43:c5:0b:1f:de:ca:43:09:7a:23:ab:82:89:28:41:
0f:11:9d:a9:5b:51:a8:31:cb:ee:73:52:e2:a7:a4:
2f:88:ed:c6:3e:ff:35:dd:ae:be:9e:e5:8d:d5:b2:
ed:da:20:30:b8:1a:eb:f4:ef:ed:01:99:d6:d8:21:
a8:9f:bd:76:6d:e6:27:9d:97:dc:af:e6:10:82:15:
44:4d:78:a3:f0:02:32:97:50:1e:64:11:9c:5c:20:
0b:32:8f:b5:85:95:e9:dd:95:d9:63:8e:33:a7:13:
70:1b:28:af:76:87:f1:03:c6:e1:67:39:c9:f5:75:
c3:d6:63:10:d0:cc:43:4f:4c:41:c7:99:59:84:30:
44:86:7a:ce:9d:18:01:49:b5:a3:65:49:1c:6a:74:
ee:2e:71:44:73:6c:14:a3:c3:1d:35:37:62:11:53:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:BB:09:35:BE:2D:58:87:2C:19:48:30:1C:FF:C4:FF:D4:9C:C3
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:26:99:11:03:49:46:fa:53:59:f3:36:ef:3f:18:cf:65:
54:e0:1a:7e:2e:50:09:ba:e4:74:1e:4a:48:8c:14:d4:9d:1a:
19:2b:95:55:b4:86:bb:d8:ba:31:80:e5:f1:b1:bb:c7:29:ea:
6e:99:0f:bb:6d:4e:0f:a0:ef:ad:90:df:71:74:c0:4f:68:f9:
f2:a5:ea:0c:01:2f:b2:c4:28:3e:00:42:3a:64:eb:a4:1e:4a:
0e:de:7d:64:3d:95:54:79:ea:2d:0a:dc:6e:b2:50:1a:5e:90:
01:33:65:c4:2a:db:4e:1d:b8:18:07:40:ab:76:e1:bc:d5:3c:
27:e0:17:36:2f:80:42:c2:96:83:14:f2:a7:cf:03:dd:80:0b:
ed:9e:9b:5c:e4:a5:cf:e2:7c:86:ee:18:b6:ea:30:b4:17:8f:
fc:cd:31:b8:6c:a8:b8:b7:5a:58:5f:db:bf:5f:74:9c:65:09:
38:ef:41:0d:1d:77:e5:04:a7:93:28:40:9d:d5:ce:cb:77:df:
97:a3:93:43:ef:aa:1f:9a:b1:fd:7e:64:aa:8b:df:57:ce:9a:
19:b7:35:48:af:e0:24:b0:a6:83:b0:63:4b:1b:ce:b3:f6:eb:
11:b5:dd:aa:23:b5:8f:e6:60:ac:44:70:4d:7d:b6:ac:6b:bb:
b1:92:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:43 2026 by rpki-client