Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: ml34CJ6VbdO2ORvjCzHXViWBkyjfTdCQKoaojh56Iq4=
Subject key identifier: 60:B2:CD:FE:61:AA:08:DF:47:00:3C:59:24:25:84:D0:16:D8:EE:C7
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019EB87C94F27BF1F863858D72B20EB258D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 21:00:32 +0000
Manifest this update: Thu 11 Jun 2026 21:00:32 +0000
Manifest next update: Fri 12 Jun 2026 21:00:32 +0000
Files and hashes: 1: IthByAoJjq4OCZKx70tYVqka2V8.roa (hash: QOtlJL2Zqjtri6/C7SYlf66hxXAp8pusdhXSfgih9fg=)
2: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: rCEyddr8gmubysTLn4Vkr4I8fAAKEosUevByWt50UO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:94:f2:7b:f1:f8:63:85:8d:72:b2:0e:b2:58:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jun 11 21:00:32 2026 GMT
Not After : Jun 12 21:00:32 2026 GMT
Subject: CN=60b2cdfe61aa08df47003c59242584d016d8eec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:7a:66:99:89:22:c6:23:d0:86:ec:a9:56:
20:53:0d:75:64:4b:2f:38:6b:fe:11:52:7e:b5:94:
e7:b9:34:08:eb:64:50:98:cd:02:50:76:f7:f0:f8:
b5:3b:07:bc:15:bf:6a:d1:df:e3:ab:ce:8a:f8:f4:
28:e2:9f:d3:56:ea:e7:6c:60:49:1e:16:74:2b:c0:
78:ca:36:66:ba:99:42:9b:eb:17:ac:f3:6e:63:21:
35:44:fb:df:cf:5b:24:39:34:f8:1a:b7:eb:ff:e0:
71:e7:b1:74:55:93:82:bd:ba:e9:ef:03:44:34:1b:
a7:ae:ca:12:95:aa:92:36:bc:ff:e0:ab:18:35:60:
2b:35:b3:cc:10:d3:27:6f:07:3e:c3:7b:99:dc:96:
c3:85:5c:05:7e:a0:9d:17:87:76:d0:80:e4:34:7c:
f1:b1:a5:5f:a8:13:2f:52:c7:a7:ae:85:0b:cf:b2:
8e:e6:98:b8:20:11:23:61:65:df:19:3c:39:24:6f:
43:36:bd:e4:9e:5f:9c:85:b0:e8:9b:2f:c2:d6:32:
e2:37:4a:cf:1c:37:d0:6e:df:df:62:bc:e8:38:44:
eb:e5:b2:af:0c:9d:c5:86:ab:6b:8d:6b:b4:01:99:
1a:84:da:f0:3f:97:e9:2c:13:c3:91:82:2c:71:d3:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:CD:FE:61:AA:08:DF:47:00:3C:59:24:25:84:D0:16:D8:EE:C7
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ea:4a:fb:ec:28:9a:f2:53:48:43:c6:5c:a5:9f:2d:8d:c5:
03:6a:78:d3:7e:61:31:99:fe:74:ce:5a:f1:73:5a:3b:2c:b4:
54:c9:6a:02:d2:24:5f:8d:57:34:0c:90:27:f0:e6:61:47:4a:
c5:85:77:8f:b0:90:0a:62:c2:86:8e:e7:06:0d:fe:bb:0d:2a:
a4:09:13:6c:8f:6c:a9:6d:80:06:65:ab:71:48:08:87:17:6f:
34:fc:e7:3d:ac:9f:e3:42:14:c6:b1:1e:4c:85:47:34:91:b9:
f0:62:cc:b3:eb:46:f6:23:b7:64:40:0c:7c:be:58:b3:77:7c:
24:46:bf:85:55:ef:d8:c8:4c:b9:34:13:88:53:d6:64:26:94:
3b:a7:f4:36:56:b4:16:8d:8f:22:65:23:85:c6:5f:b3:9d:ea:
6c:64:05:c2:8f:85:f3:54:6a:b1:20:69:30:84:96:89:15:27:
60:ce:6e:0c:3b:da:f6:55:6e:e6:29:73:53:90:9f:8c:31:7a:
6c:2e:18:a2:7b:c1:91:78:1c:33:c4:c6:ca:5f:69:41:fa:bf:
7f:97:ce:84:a5:29:15:fb:84:d1:72:72:60:ea:b1:4b:04:8a:
1a:20:66:d0:b6:fa:65:b3:03:98:65:76:53:2a:f6:e7:fd:2f:
26:71:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:28 2026 by rpki-client