Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: 6wY83lN3eL3ZwfqR4X43fJg6rcSYCtUdFJRJYw+YW8g=
Subject key identifier: C7:B6:E4:11:A6:28:BB:6E:B6:44:F2:FB:EB:F7:C7:8E:F7:45:D8:FE
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 019FA003FCCD29427C92EB2228F8FB8BC432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 20:00:43 +0000
Manifest this update: Sun 26 Jul 2026 20:00:43 +0000
Manifest next update: Mon 27 Jul 2026 20:00:43 +0000
Files and hashes: 1: YlIgNG5zvh6s1BC507yEDE5b12M.roa (hash: 9Jxgl9sdOKliXdLsBeBxACGlpLlkp4sR317xnNXazAk=)
2: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: rTIrhHexnRzr1YMu6WJrSElnFT4DoDcg8TgHXGQCjJw=)
3: u9Ageixo_HNGmiROSv6Ka20GVq0.roa (hash: xK8ABKlnGuiR0zkivnn/lgjPacG4+kgYyGPZUP48Fr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:fc:cd:29:42:7c:92:eb:22:28:f8:fb:8b:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jul 26 20:00:43 2026 GMT
Not After : Jul 27 20:00:43 2026 GMT
Subject: CN=c7b6e411a628bb6eb644f2fbebf7c78ef745d8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b5:a1:2f:4b:7b:88:5b:a8:d3:62:95:27:ca:
5e:70:3a:61:a1:cb:de:da:03:64:b4:ab:2d:5c:b4:
44:42:a8:cb:a0:2a:b6:ae:02:14:f6:64:11:08:16:
89:a4:55:45:f8:80:ae:ce:96:2d:f8:f1:b1:37:f3:
64:27:83:c8:96:71:cc:1f:e8:b1:ab:d7:90:83:93:
ef:49:c8:0d:eb:e1:56:51:5a:32:cf:1b:ec:bf:d1:
1a:3d:8f:71:95:d8:8a:67:ad:a5:1a:ed:51:8f:f5:
0b:d6:0c:d8:1c:76:c5:3a:88:4a:91:5c:f2:b8:d7:
10:14:5d:5e:f2:33:c9:b2:04:ff:54:45:06:0e:21:
11:06:bf:e7:98:bf:28:17:f9:bc:3b:78:e4:c2:02:
69:9c:99:4c:14:f4:fb:5d:9c:3c:62:bb:22:74:5a:
c4:45:e6:7d:2d:0c:4c:12:d9:9f:9d:5c:e2:3d:f5:
b5:bb:d8:fe:d6:72:c1:22:ad:20:1b:23:4d:d6:82:
c8:f9:03:76:be:67:06:87:69:89:a1:9d:bb:31:85:
67:ec:ee:c9:f6:77:cd:1d:a8:2d:83:b0:81:1f:10:
cc:8e:5c:21:d2:e2:d1:ef:1e:27:20:27:a1:ca:bc:
7e:0c:5a:f8:74:ae:3d:04:4d:3f:d4:69:71:38:b0:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:E4:11:A6:28:BB:6E:B6:44:F2:FB:EB:F7:C7:8E:F7:45:D8:FE
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3f:2c:fc:5e:88:b5:21:20:70:2a:fa:d9:33:a8:8c:12:df:
66:11:7d:8f:f3:2a:11:2e:71:4c:c0:ad:78:c4:e1:f7:71:54:
b6:dd:ea:2d:2c:82:d6:dd:61:03:cb:46:e9:37:83:97:f0:79:
13:49:83:19:f4:f7:c1:57:56:ab:42:4b:e5:11:e2:a1:f6:09:
24:10:0a:4a:59:f0:c0:1b:30:76:d7:39:5f:b8:bb:13:85:8a:
2d:29:87:e9:6f:c0:c7:fd:f3:9c:47:46:92:3f:ea:1b:00:5f:
89:a1:a6:89:2e:30:28:76:7e:48:7f:a7:90:50:ec:d0:fc:d0:
ae:5e:40:f0:59:3f:e1:67:6c:24:16:2e:ce:11:e4:ad:c0:62:
7a:d0:e1:b9:50:ea:28:51:e9:a7:54:05:c9:4f:90:d5:0a:63:
ee:04:eb:c9:f2:00:1a:dd:37:f8:4e:50:f5:5c:35:eb:d8:68:
3b:a4:66:a8:aa:b5:25:c1:0d:cc:55:59:24:a1:a5:18:cd:1b:
fe:1f:e2:6b:ee:f4:0a:8a:7c:d4:5f:2b:77:1c:e3:72:ce:aa:
f6:d6:b2:37:99:c6:db:80:90:b8:ce:78:1c:50:29:94:23:9c:
81:c6:0f:6c:f6:16:03:89:c9:72:07:06:5d:e6:23:da:5c:cf:
a9:52:c3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:51 2026 by rpki-client