Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: LNUlKa7gOc+YeyjFW2Gtfu+SRzKcRAkq20T/4YNMjRg=
Subject key identifier: D4:27:64:B8:66:E4:FD:AC:02:E7:DC:FC:39:59:EB:76:50:67:83:05
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 019D37898FFE7563AC4147A7D41A3C8D30E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:55 +0000
Manifest this update: Sun 29 Mar 2026 03:00:55 +0000
Manifest next update: Mon 30 Mar 2026 03:00:55 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: lrGqgv0Jdan5UOKO/XDlJeVEy9urANcrWV0EFfQkOM0=)
2: e1B2705bWqnmxFym6Lrtufuuh-c.roa (hash: hhYlxCpVJm2mMyzGqhpnxjIOnGS6n6nkCOmx8x2LUb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8f:fe:75:63:ac:41:47:a7:d4:1a:3c:8d:30:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Mar 29 03:00:55 2026 GMT
Not After : Mar 30 03:00:55 2026 GMT
Subject: CN=d42764b866e4fdac02e7dcfc3959eb7650678305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:85:01:09:72:60:5f:9d:ce:b4:e8:80:92:
aa:00:a4:37:35:14:48:f6:d4:19:90:58:26:38:da:
55:85:c2:1d:13:60:bf:2c:36:ae:dd:4f:87:e6:c3:
21:01:0f:8c:b5:8c:a8:ac:ef:d1:8b:26:50:5d:80:
53:0e:b5:cb:c4:cc:c9:18:15:c1:3c:4a:79:a6:52:
60:80:7e:5e:f4:e6:1f:ab:69:d4:76:10:3a:27:c7:
2d:38:e9:1a:d4:d1:40:17:e0:c1:22:8c:af:d6:59:
a8:4c:64:ee:5c:ea:e0:c5:21:e0:0f:d3:0d:e9:d0:
7c:f6:ce:ac:12:c6:87:44:3d:57:00:6d:1b:de:88:
d9:96:5b:f1:67:c3:61:04:4f:66:ec:4a:11:2c:65:
31:15:74:6e:4a:91:04:5a:75:9b:c4:83:71:15:8b:
37:5f:a9:97:b6:9a:29:4c:36:92:81:4d:b0:0d:42:
9b:26:80:02:bb:fe:03:f5:07:e7:d1:31:ed:a3:12:
b1:e1:4a:5b:3c:65:7d:a8:49:c8:7c:eb:39:e5:d8:
c9:3f:ec:27:1f:15:97:79:4b:da:30:08:12:1d:d9:
ae:01:03:8f:9f:98:56:1d:25:4a:66:87:49:d1:cd:
8a:6a:89:ff:f5:d2:59:c4:2a:48:a7:35:84:b2:a9:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:64:B8:66:E4:FD:AC:02:E7:DC:FC:39:59:EB:76:50:67:83:05
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:30:26:58:4a:46:1a:10:4a:da:8a:56:18:ef:ec:6d:2d:
2d:c2:6a:83:20:0d:fe:31:4c:d6:a3:16:84:3c:47:c8:7c:5a:
6e:7b:89:75:2d:d5:20:19:b3:b3:b8:0a:1b:6a:67:fd:ba:ed:
a6:86:b5:a1:6f:ea:7c:40:ff:ec:ad:1e:ca:33:aa:0c:32:6f:
34:86:a2:d6:22:18:3b:84:4a:f1:72:d0:74:ec:1e:3f:19:42:
81:c4:30:24:78:2e:cc:6e:ea:a1:40:36:37:4b:4b:5c:17:4c:
11:63:aa:a9:7c:05:fe:bc:38:4d:ff:07:a2:0f:25:b3:74:dc:
fd:83:be:ef:a5:d4:97:8c:a0:12:98:e5:7a:78:de:f0:bc:f1:
a9:43:7b:00:96:a2:aa:5d:3d:26:3a:e4:3b:f2:92:a2:ef:e4:
14:2e:bd:f9:2f:74:32:bc:cb:3b:7e:82:0d:ea:f9:f9:ac:9f:
f4:4f:5d:2e:aa:ab:5f:b9:de:9b:60:f1:29:c0:9b:48:ac:7b:
02:9c:d5:22:60:77:14:fe:e0:1a:c6:90:f5:b9:e6:bb:bc:c6:
80:0a:22:b5:68:4e:68:e7:8f:5c:60:76:20:85:c4:ff:56:bb:
cb:e7:69:e3:b9:08:07:dc:47:17:cc:98:96:90:91:ea:d9:0f:
d5:b1:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:08 2026 by rpki-client