Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: SviizlvnczBCF6wCjVyMYikKA4KGXCGaYCzh5gTYgj8=
Subject key identifier: 06:7E:81:F8:4F:73:4C:42:6D:F6:06:2F:AD:AA:0E:E6:E1:D6:14:BC
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019D37C0895446440ECAB8D75F4CFB18D44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: 7G0CmFAjTNF2OQKyQlvEpHgQ5cRg51UfjJunyzhIyXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:89:54:46:44:0e:ca:b8:d7:5f:4c:fb:18:d4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=067e81f84f734c426df6062fadaa0ee6e1d614bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:37:f3:b8:2c:d9:b4:08:a5:c2:cf:c7:03:
4c:63:c2:0f:83:3d:02:69:1a:40:36:5e:b7:ef:65:
7d:95:87:43:b6:5f:fe:60:1b:57:18:0b:13:39:90:
79:e1:30:92:ad:e7:f7:b2:92:7e:e3:28:85:39:c1:
33:f4:b9:e4:fe:36:73:9e:e4:35:37:58:10:82:15:
87:d9:c1:b5:92:8e:47:8a:09:f4:c0:17:56:23:47:
04:b8:1b:2c:1b:b5:32:78:14:c5:39:76:d1:c3:8f:
72:bf:d1:f3:3c:91:16:a6:50:76:4d:13:bf:45:58:
0f:85:a3:0e:d1:48:97:cf:2c:e7:e2:7a:54:95:5e:
f0:01:26:00:3c:ca:a7:e6:6c:e8:44:64:df:56:fc:
56:a2:da:a9:7d:ba:f2:f3:43:ca:ce:62:2c:a6:af:
ea:22:5b:2c:62:2b:10:af:b3:19:1d:a1:54:f0:b6:
69:5f:6c:a4:1e:d5:61:21:11:8e:d0:52:a1:41:cd:
f7:55:90:f9:98:7d:db:e0:fc:f7:46:3a:66:53:18:
fb:55:33:55:4d:da:60:f7:7a:59:63:81:b3:ec:64:
67:e5:d4:3a:68:68:46:ee:7b:bd:bc:9f:a5:9b:de:
17:1a:0c:ae:f8:9d:04:86:69:96:3b:c8:1e:8b:eb:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:81:F8:4F:73:4C:42:6D:F6:06:2F:AD:AA:0E:E6:E1:D6:14:BC
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:40:c8:20:66:06:f9:0a:3f:fc:6c:e3:e1:34:fb:a4:d9:ba:
5a:98:2f:e3:14:10:23:e5:45:22:e5:a3:bc:d6:d9:da:4e:2d:
d7:12:ba:3b:be:05:da:80:8b:91:91:63:dc:a5:c0:66:a9:00:
56:31:70:fd:8f:ba:58:a1:fb:7f:22:b0:98:0c:78:ab:ca:df:
4a:7e:9b:c6:91:40:70:af:f7:72:8b:b5:ec:5f:a6:6c:5c:df:
8d:1a:cb:e9:e2:76:e5:a5:3e:ed:82:55:44:9c:5e:cd:67:e0:
7b:35:e0:41:be:e5:29:b5:a5:73:c7:dc:83:1e:8a:b9:b8:5f:
2a:a7:51:62:d4:ca:65:68:f3:5b:42:a4:c3:f6:7a:1e:4a:5b:
dd:5b:05:28:8e:5b:1b:52:48:70:c0:86:38:c8:07:c0:42:9d:
a2:14:0a:08:98:51:19:ba:24:ca:4b:dc:70:6f:61:88:f3:b9:
fa:8e:86:0f:13:f6:95:41:da:dc:aa:6c:3c:75:07:58:ab:43:
c6:0e:fa:70:35:f3:52:0c:b2:e8:6d:24:3b:58:de:2e:7f:c2:
80:8c:a5:17:2b:74:94:c9:03:76:fb:b9:fc:02:5b:fd:4e:21:
1f:41:0d:ac:2a:3f:f7:4b:e7:0b:3d:43:69:00:5e:81:cf:ea:
26:8c:4b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client