Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: mAhDgz99ko03+y/0S8AWt3dqE6bgOW2ZGqS3fDW5iQE=
Subject key identifier: 22:06:FC:86:97:08:C9:32:FB:FA:24:5B:9C:3D:0A:C5:B9:69:8D:EB
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019FA03AF70BF928DA4051501E39218CA4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1960
Signing time: Sun 26 Jul 2026 21:00:46 +0000
Manifest this update: Sun 26 Jul 2026 21:00:46 +0000
Manifest next update: Mon 27 Jul 2026 21:00:46 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: UyzRFWBWbSyzYnEvsU+1nKUO2mwqsuXooX8eVjNiB38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:f7:0b:f9:28:da:40:51:50:1e:39:21:8c:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jul 26 21:00:46 2026 GMT
Not After : Jul 27 21:00:46 2026 GMT
Subject: CN=2206fc869708c932fbfa245b9c3d0ac5b9698deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:79:5c:9e:2e:e5:1d:88:d0:a8:63:b2:09:
e8:aa:9a:e1:e7:63:57:25:58:8a:1e:70:56:94:b5:
ee:70:fc:d3:11:dc:ac:f4:2c:86:0e:30:46:97:2e:
f7:20:4a:43:3e:2f:1c:0f:d0:c7:e2:1c:d2:08:b8:
8e:0d:94:fd:e6:7f:4b:f9:1d:b0:2f:87:4f:37:e0:
c2:c4:7e:13:68:f7:cf:29:63:34:a3:c9:6d:e7:69:
8f:7d:e1:6e:ed:db:eb:86:fd:51:12:9d:e4:c0:71:
21:57:a1:19:68:aa:d6:ac:2e:37:c4:66:69:7b:25:
61:ec:e3:ff:42:1f:30:b2:77:a9:e1:19:ef:a7:88:
7c:77:d1:08:cd:6d:bf:54:9c:f7:1b:4a:31:8a:be:
88:12:c4:bc:63:bf:74:b5:4c:30:e8:11:00:ff:93:
1f:d5:a7:e4:35:c1:d9:28:7b:46:98:25:4b:13:e8:
fc:c2:28:fd:36:3f:93:ad:e9:6d:6f:cc:e8:8b:c9:
35:a0:51:96:03:0c:9f:3e:11:89:6a:fe:3b:0a:b9:
57:f4:0b:b8:55:5d:9e:e4:74:69:1b:1d:3c:78:56:
28:bb:65:39:22:47:c0:f6:02:89:f0:d2:01:f5:54:
1c:eb:65:0a:26:00:89:6d:4a:1b:6a:a1:b6:8f:e2:
c3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:FC:86:97:08:C9:32:FB:FA:24:5B:9C:3D:0A:C5:B9:69:8D:EB
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:6a:8d:91:53:53:b7:da:f3:1f:5a:3e:cf:4c:34:00:59:
15:52:d7:8a:6a:94:11:b8:0f:06:2e:d3:e6:65:5e:ba:2a:85:
e0:a7:41:b6:b2:1e:3f:2c:36:d6:2b:ca:01:06:3c:c9:32:5a:
90:80:fe:c5:32:75:38:80:72:a7:d7:80:ab:fe:79:03:ce:dc:
4a:75:ba:f6:13:14:40:30:47:be:bf:c8:cc:6f:34:47:4e:d0:
19:91:60:5f:11:82:67:06:9e:4d:89:1a:ac:4c:48:ba:c2:72:
92:2b:ed:c5:a5:8d:9b:a9:4b:ee:db:9f:36:1e:0a:c6:70:c5:
89:4a:65:83:4f:59:82:36:7f:f0:b4:bd:e7:38:38:59:37:9a:
3f:31:68:50:ce:77:38:04:a5:76:d1:99:f9:b3:72:73:26:e1:
17:b2:07:7b:2e:89:b4:21:a7:3d:7f:a3:3c:bb:6e:d3:08:6d:
8e:93:85:10:0c:cf:00:a2:7f:55:4d:57:1f:38:75:0e:18:79:
b2:4b:90:94:a6:c2:c3:15:80:55:13:d5:92:08:33:90:f0:ad:
18:2f:15:ef:22:47:ba:f0:73:82:19:5f:1b:75:dc:df:7b:c0:
4d:28:03:f7:f0:e7:be:7a:34:3e:55:27:4d:06:b3:64:35:14:
6c:f2:c9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOvcL+SjaQFFQHjkhjKTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjdmMTQ3NmZmODI5MWVmYWYyODQ5Y2QzZjIxNDY3MjI2
N2IwMDEwHhcNMjYwNzI2MjEwMDQ2WhcNMjYwNzI3MjEwMDQ2WjAzMTEwLwYDVQQD
EygyMjA2ZmM4Njk3MDhjOTMyZmJmYTI0NWI5YzNkMGFjNWI5Njk4ZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw55XJ4u5R2I0Khjsgnoqprh52NX
JViKHnBWlLXucPzTEdys9CyGDjBGly73IEpDPi8cD9DH4hzSCLiODZT95n9L+R2w
L4dPN+DCxH4TaPfPKWM0o8lt52mPfeFu7dvrhv1REp3kwHEhV6EZaKrWrC43xGZp
eyVh7OP/Qh8wsnep4Rnvp4h8d9EIzW2/VJz3G0oxir6IEsS8Y790tUww6BEA/5Mf
1afkNcHZKHtGmCVLE+j8wij9Nj+Treltb8zoi8k1oFGWAwyfPhGJav47CrlX9Au4
VV2e5HRpGx08eFYou2U5IkfA9gKJ8NIB9VQc62UKJgCJbUobaqG2j+LD5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIG/IaXCMky+/okW5w9CsW5aY3rMB8GA1UdIwQY
MBaAFHL38Udv+Cke+vKEnNPyFGciZ7ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEt
MzkxZDEwZmY5NDdjLzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEtMzkxZDEwZmY5NDdj
LzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpxqjZFT
U7fa8x9aPs9MNABZFVLXimqUEbgPBi7T5mVeuiqF4KdBtrIePyw21ivKAQY8yTJa
kID+xTJ1OIByp9eAq/55A87cSnW69hMUQDBHvr/IzG80R07QGZFgXxGCZwaeTYka
rExIusJykivtxaWNm6lL7tufNh4KxnDFiUplg09ZgjZ/8LS95zg4WTeaPzFoUM53
OASldtGZ+bNycybhF7IHey6JtCGnPX+jPLtu0whtjpOFEAzPAKJ/VU1XHzh1Dhh5
skuQlKbCwxWAVRPVkggzkPCtGC8V7yJHuvBzghlfG3Xc33vATSgD9/Dnvno0PlUn
TQazZDUUbPLJyQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:12 2026 by rpki-client