Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: xeobjXF/7PvKRPz+EMei43iH0GjG5oB/vRBS62TQPWE=
Subject key identifier: FE:31:A7:88:20:E1:AD:E0:32:B0:24:62:94:7A:B2:23:F4:31:E6:A9
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 019D37F716437274298BE67291464EF60A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: YlIgNG5zvh6s1BC507yEDE5b12M.roa (hash: 9Jxgl9sdOKliXdLsBeBxACGlpLlkp4sR317xnNXazAk=)
2: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: BGRbVXsZgNkuDPY/tM9/LDH3PcYCGpvm6nolhuOEN/M=)
3: u9Ageixo_HNGmiROSv6Ka20GVq0.roa (hash: xK8ABKlnGuiR0zkivnn/lgjPacG4+kgYyGPZUP48Fr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:16:43:72:74:29:8b:e6:72:91:46:4e:f6:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=fe31a78820e1ade032b02462947ab223f431e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:bf:86:49:4a:5f:37:65:00:8b:72:f6:59:
98:3c:01:77:f7:20:fc:18:65:6f:f8:8e:ca:13:5d:
38:7b:86:32:ec:78:99:42:42:f3:95:2f:88:ee:79:
73:3b:ba:71:a1:7b:35:5b:67:f5:5e:4b:cb:22:a8:
7e:10:ea:4f:7a:bc:74:c4:d9:f7:fa:21:61:0a:a7:
05:96:bd:a4:9e:26:96:9c:40:2b:51:64:56:5c:2a:
e1:61:41:40:96:92:40:72:b6:c8:6d:13:8f:28:d5:
7b:bb:b6:5f:93:36:5b:ea:6e:44:ac:bd:a3:03:09:
9b:3e:24:a3:db:d4:6d:87:22:9e:5e:31:1d:33:7d:
56:ad:f5:6c:dc:1f:2f:9a:91:3b:b3:2b:5a:ad:71:
9f:40:62:c6:ae:90:40:bb:69:33:a7:06:56:33:d4:
a6:18:5f:b0:97:73:c0:7d:6c:79:9e:05:30:df:c5:
60:cd:12:83:94:33:60:e0:66:4f:4e:9c:6a:ce:93:
25:53:41:4e:41:8f:1d:68:9d:23:da:47:71:93:b8:
f0:ca:2e:89:be:1a:c8:6d:b9:4f:f0:89:e7:24:ab:
fb:bc:df:2b:18:a1:2a:de:6b:e8:43:32:5a:ed:46:
85:39:88:a7:b9:2e:d0:0e:0e:3f:d5:4d:20:77:4d:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:A7:88:20:E1:AD:E0:32:B0:24:62:94:7A:B2:23:F4:31:E6:A9
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3c:47:4e:23:89:ac:7f:ea:03:c2:c1:01:6a:16:56:78:e1:
33:8c:5d:6b:63:57:21:97:9d:a9:84:59:38:b1:27:a5:f6:83:
56:10:d7:4e:bb:12:35:f9:85:8f:6e:93:e3:54:f4:b7:ff:98:
4b:05:45:15:e8:7d:88:1a:86:c6:ef:22:b8:b0:dc:af:5a:db:
da:84:c5:56:90:e7:08:16:af:1b:5d:df:ff:77:86:0b:c8:6d:
01:ab:4f:5d:59:22:c1:37:b3:90:f4:28:3c:26:df:0b:31:db:
cc:a6:42:51:e0:66:6e:2a:bc:21:2b:c0:a5:62:7d:42:52:73:
3b:45:25:5f:5c:20:e9:24:98:53:fb:ac:36:57:37:af:52:02:
14:b6:64:dd:9b:b4:28:1a:b3:f9:48:32:be:94:69:cf:db:04:
74:bc:8e:15:dd:74:66:04:e0:99:77:e9:6e:52:07:a7:75:1c:
b5:76:80:98:80:bc:4c:f7:5d:34:c5:bc:ea:0f:4a:2e:bc:69:
7a:c0:34:a5:0c:ba:db:f2:f6:c8:a1:c9:9c:00:b2:8f:31:89:
be:ed:4a:7f:fa:35:ab:88:bf:9d:38:01:84:11:91:d2:24:d0:
c3:81:af:c3:53:02:a6:40:46:c7:80:25:08:f0:95:c1:7d:67:
12:6a:0c:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xZDcnQpi+ZykUZO9gqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
EyhmZTMxYTc4ODIwZTFhZGUwMzJiMDI0NjI5NDdhYjIyM2Y0MzFlNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMm/hklKXzdlAIty9lmYPAF39yD8
GGVv+I7KE104e4Yy7HiZQkLzlS+I7nlzO7pxoXs1W2f1XkvLIqh+EOpPerx0xNn3
+iFhCqcFlr2kniaWnEArUWRWXCrhYUFAlpJAcrbIbROPKNV7u7ZfkzZb6m5ErL2j
AwmbPiSj29RthyKeXjEdM31WrfVs3B8vmpE7sytarXGfQGLGrpBAu2kzpwZWM9Sm
GF+wl3PAfWx5ngUw38VgzRKDlDNg4GZPTpxqzpMlU0FOQY8daJ0j2kdxk7jwyi6J
vhrIbblP8InnJKv7vN8rGKEq3mvoQzJa7UaFOYinuS7QDg4/1U0gd03i2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4xp4gg4a3gMrAkYpR6siP0MeapMB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzxHTiOJ
rH/qA8LBAWoWVnjhM4xda2NXIZedqYRZOLEnpfaDVhDXTrsSNfmFj26T41T0t/+Y
SwVFFeh9iBqGxu8iuLDcr1rb2oTFVpDnCBavG13f/3eGC8htAatPXVkiwTezkPQo
PCbfCzHbzKZCUeBmbiq8ISvApWJ9QlJzO0UlX1wg6SSYU/usNlc3r1ICFLZk3Zu0
KBqz+UgyvpRpz9sEdLyOFd10ZgTgmXfpblIHp3UctXaAmIC8TPddNMW86g9KLrxp
esA0pQy62/L2yKHJnACyjzGJvu1Kf/o1q4i/nTgBhBGR0iTQw4Gvw1MCpkBGx4Al
CPCVwX1nEmoMqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:34 2026 by rpki-client