Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: cw76nKNv9SksV5LxlZpmkfjyrM0+x7Aq15F1kt+ovvk=
Subject key identifier: 69:ED:F2:FC:3C:22:48:67:B1:0E:D3:DF:BE:A0:5D:58:34:82:CE:0F
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 01A140F0A904B4081C8D2B646F6381346337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 19:01:15 +0000
Manifest this update: Thu 15 Oct 2026 19:01:15 +0000
Manifest next update: Fri 16 Oct 2026 19:01:15 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: OpenI4Gw5DvbCyaW7MUL2hEnwwgHTCQweKWU/CXINyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:a9:04:b4:08:1c:8d:2b:64:6f:63:81:34:63:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Oct 15 19:01:15 2026 GMT
Not After : Oct 16 19:01:15 2026 GMT
Subject: CN=69edf2fc3c224867b10ed3dfbea05d583482ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:a7:58:4f:02:e5:d9:e8:64:f2:49:8c:a2:
15:cc:13:30:61:6a:89:62:39:62:42:e6:95:fe:f7:
3e:a1:d5:68:dc:e1:af:74:e0:f1:18:9a:b1:52:d5:
8b:aa:66:1e:43:6d:11:f5:5d:6a:ef:86:96:a3:fe:
27:68:b8:75:eb:67:b2:93:f2:0e:62:8f:17:61:66:
e6:30:a2:f5:86:01:61:4f:92:62:ea:f6:7a:bb:b3:
59:fe:e3:d6:37:0b:07:9b:3e:7c:db:79:cf:0e:b7:
92:6c:ec:44:c1:c6:c8:7d:95:77:46:a7:79:0a:f6:
58:90:92:26:75:43:5b:b3:45:88:e7:e7:a1:da:a6:
26:24:38:12:95:53:b1:9c:b2:ee:9f:b5:16:68:7b:
eb:29:ca:a1:90:1f:23:68:61:11:6a:e5:12:4c:f5:
5b:cc:8a:a3:8d:90:67:64:97:05:5c:78:62:b2:33:
9b:5b:14:17:a6:d1:71:73:fc:70:bc:fe:b9:87:bf:
64:aa:6d:14:18:4d:6c:68:e5:ec:b7:e5:a5:60:a0:
75:f7:cc:11:2c:4d:1f:19:97:c7:97:19:e3:ac:1d:
90:e6:1b:34:61:08:4b:70:21:5d:af:51:44:f3:43:
18:70:53:36:71:6b:60:e9:84:95:3e:99:f9:64:18:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:F2:FC:3C:22:48:67:B1:0E:D3:DF:BE:A0:5D:58:34:82:CE:0F
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0d:ef:5d:2a:fa:bb:23:b3:49:84:2e:2e:3e:74:ff:a3:57:
f9:fd:24:60:97:93:a3:db:35:97:c0:6b:94:c0:f4:ec:9c:8c:
dc:7d:56:99:3e:db:ce:df:88:23:2a:24:ac:31:38:7b:29:36:
09:73:6b:6d:6c:02:aa:39:fb:7f:7c:e8:1d:8f:b2:47:9c:e7:
49:d0:9f:a3:8d:8a:f4:51:ed:17:82:aa:e3:da:14:da:c2:68:
02:bc:d9:2a:16:a8:81:e7:4c:6c:8b:e0:10:14:7d:65:c6:fe:
da:4f:a5:5f:78:a5:29:d9:9d:8c:99:1a:b3:91:a9:45:85:23:
7a:80:66:bd:21:33:de:60:fa:ea:b9:ca:08:ee:be:61:3d:bb:
7d:32:a6:32:d1:38:de:72:c3:41:d7:09:45:f4:63:a6:c6:2f:
7f:d9:53:35:26:15:a5:60:6c:25:cc:ae:b1:b2:e8:5d:37:1a:
9c:09:c3:0c:e1:99:70:c8:34:e9:20:04:a3:79:b4:d7:69:78:
df:e3:6f:3b:b4:6d:c5:81:30:25:58:e7:1b:e3:77:de:70:ff:
ae:16:ad:b1:c3:2c:42:10:ec:b5:8a:0b:81:57:86:f6:59:ac:
c2:28:45:4f:09:ef:44:97:99:f6:38:46:65:1a:64:db:f6:47:
e4:77:94:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8KkEtAgcjStkb2OBNGM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh
YWYyZDgwHhcNMjYxMDE1MTkwMTE1WhcNMjYxMDE2MTkwMTE1WjAzMTEwLwYDVQQD
Eyg2OWVkZjJmYzNjMjI0ODY3YjEwZWQzZGZiZWEwNWQ1ODM0ODJjZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXunWE8C5dnoZPJJjKIVzBMwYWqJ
YjliQuaV/vc+odVo3OGvdODxGJqxUtWLqmYeQ20R9V1q74aWo/4naLh162eyk/IO
Yo8XYWbmMKL1hgFhT5Ji6vZ6u7NZ/uPWNwsHmz5823nPDreSbOxEwcbIfZV3Rqd5
CvZYkJImdUNbs0WI5+eh2qYmJDgSlVOxnLLun7UWaHvrKcqhkB8jaGERauUSTPVb
zIqjjZBnZJcFXHhisjObWxQXptFxc/xwvP65h79kqm0UGE1saOXst+WlYKB198wR
LE0fGZfHlxnjrB2Q5hs0YQhLcCFdr1FE80MYcFM2cWtg6YSVPpn5ZBgQgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnt8vw8IkhnsQ7T376gXVg0gs4PMB8GA1UdIwQY
MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt
MGUwZmQwM2IxMTA0LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0
LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA3vXSr6
uyOzSYQuLj50/6NX+f0kYJeTo9s1l8BrlMD07JyM3H1WmT7bzt+IIyokrDE4eyk2
CXNrbWwCqjn7f3zoHY+yR5znSdCfo42K9FHtF4Kq49oU2sJoArzZKhaogedMbIvg
EBR9Zcb+2k+lX3ilKdmdjJkas5GpRYUjeoBmvSEz3mD66rnKCO6+YT27fTKmMtE4
3nLDQdcJRfRjpsYvf9lTNSYVpWBsJcyusbLoXTcanAnDDOGZcMg06SAEo3m012l4
3+NvO7RtxYEwJVjnG+N33nD/rhatscMsQhDstYoLgVeG9lmswihFTwnvRJeZ9jhG
ZRpk2/ZH5HeULQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 23:15:32 2026 by rpki-client