Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: evLXBtn5t2PagwUZsKJXMFjYLGRK8//8mGo7Zfm5GOY=
Subject key identifier: B3:90:63:92:CB:D7:15:18:CE:D3:2D:B7:9A:CE:22:A7:F5:BB:6D:B1
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019F189EB2BF9966F994FBE4839B828F8BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 13:01:21 +0000
Manifest this update: Tue 30 Jun 2026 13:01:21 +0000
Manifest next update: Wed 01 Jul 2026 13:01:21 +0000
Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=)
2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: BylEraHFL856oFZBgMxZjHHrZAzPS2beePemakipmpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:b2:bf:99:66:f9:94:fb:e4:83:9b:82:8f:8b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jun 30 13:01:21 2026 GMT
Not After : Jul 1 13:01:21 2026 GMT
Subject: CN=b3906392cbd71518ced32db79ace22a7f5bb6db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:70:8f:b2:60:05:d1:f8:03:b0:b3:d8:fa:
c8:15:b0:c6:ce:2e:59:3a:7d:58:be:10:8a:a5:0f:
90:45:ab:be:ff:f4:c7:35:fd:6f:b1:1f:a5:3d:49:
3e:e2:63:39:72:ff:0b:c7:da:63:96:80:a6:05:dd:
eb:60:66:83:b9:3b:42:95:91:42:32:ce:74:c9:4f:
4c:88:8c:9a:93:dc:bb:f7:6c:c0:86:10:10:1a:cf:
d2:d6:08:d8:8c:83:66:df:89:39:c9:2f:71:9b:7c:
2c:c1:47:60:3d:6c:54:e1:4a:37:23:18:46:6e:61:
9f:a3:ab:c7:df:23:cd:3d:92:0e:61:d0:6b:c5:5c:
1c:f9:40:65:8d:db:49:33:11:7c:c1:31:ed:70:36:
52:4e:9b:32:be:f8:ec:d5:f5:e3:ed:45:fd:82:30:
e6:f1:6a:90:79:e3:84:ef:77:f7:bf:a4:04:34:4e:
b1:d2:51:e3:a2:ae:c5:15:b7:f7:a0:ae:6f:b0:24:
90:9f:ca:00:48:32:46:9b:68:ee:9e:9b:49:fe:25:
1c:ee:08:6a:de:1b:53:6a:f0:1c:be:ed:25:cd:af:
fa:57:3f:bf:3c:bc:16:ff:ae:28:85:45:f7:24:75:
bd:ec:d5:64:c6:f7:0c:ba:71:b2:1a:d1:5a:dd:e0:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:63:92:CB:D7:15:18:CE:D3:2D:B7:9A:CE:22:A7:F5:BB:6D:B1
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:b9:19:a6:97:e3:50:e9:14:3f:21:3f:05:ee:6d:45:07:
a7:5b:bb:1a:1d:6e:ed:af:27:25:f7:b1:b2:17:cc:0d:78:a9:
8d:3b:c1:af:2e:c1:a5:94:51:9b:5b:7a:7b:d1:2b:5d:76:24:
6e:03:8e:16:47:86:77:c3:f2:f6:5f:0c:e9:3a:5d:28:f5:1a:
22:6e:90:88:db:1e:25:8e:76:24:0a:57:22:9c:ac:59:f4:32:
e5:82:43:6d:54:dd:01:75:f2:18:23:55:7e:61:f8:88:b3:dc:
55:6a:b4:9d:78:8d:29:d2:4b:51:10:14:5c:73:06:6c:84:bf:
41:7e:3d:e9:67:51:a4:ff:9e:79:ee:f3:46:f5:cd:21:5d:08:
62:4f:f1:58:bf:9a:cb:86:12:2b:24:02:65:f3:24:bb:b7:63:
7f:ef:86:4f:80:67:c6:5f:fb:19:e6:01:b1:da:60:cb:38:6e:
59:be:bc:60:45:a3:c8:14:b8:cf:ed:8f:6e:2a:b2:a7:4a:4f:
88:72:fc:d3:bd:e2:09:38:25:c7:d7:de:d9:1d:81:60:f6:45:
25:a6:7e:75:16:30:1a:1d:f8:c5:4d:7b:cc:ea:59:c9:ca:be:
44:33:52:14:04:a2:ca:f7:1b:11:f5:a6:e3:7b:e2:b5:78:34:
44:a9:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:02 2026 by rpki-client