Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
File: e-CvRatOV0VvWgpA36hPjYBhBmQ.mft (raw, json)
Hash identifier: q5UJS2XT7ZVB81gyFXdIKX7LFf5ekxnI+SsHrbD1/5s=
Subject key identifier: DD:5B:22:06:60:B1:06:F2:74:07:DD:12:7C:3A:B7:6D:DC:3D:C2:01
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019D37F753840E87022F5CCC88B6191848C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: 2Y6quasBBtqiTIKmeRTvIxGNZBg.roa (hash: mqAgZqV030TmfwPKsg0X5x+gSYsK7poBlKoJUyvGnoE=)
2: SWYonVyw6t-M4w3DUnG06hLvLEk.roa (hash: tco63oARuy5EvMpcq7VsYr3Rw0Zp8rf/jNLMSLMD8J0=)
3: e-CvRatOV0VvWgpA36hPjYBhBmQ.crl (hash: Xmaa9aC7JCKplz/BPaUQYYssIQR3j+9vV35X3WsdxZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:53:84:0e:87:02:2f:5c:cc:88:b6:19:18:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=dd5b220660b106f27407dd127c3ab76ddc3dc201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:97:68:33:9b:2c:56:46:e8:23:29:3d:5b:
db:f6:75:9b:9b:75:8f:ea:67:a2:4b:61:ba:82:67:
3c:7b:3d:77:ae:67:e8:0c:82:04:5f:4b:b0:cd:b8:
1e:12:05:8f:e7:a6:60:46:c4:c6:49:a3:97:d7:d1:
df:df:ac:f9:db:67:ac:66:92:ae:79:1a:8d:87:7c:
8d:3a:96:63:dc:18:32:2d:ba:35:c2:d9:f8:40:09:
51:4e:14:84:e5:b7:48:59:91:1b:37:e6:6e:91:fe:
c8:fe:1b:ad:3d:aa:10:27:c0:19:c8:41:fa:5d:68:
0d:69:bc:b7:1f:a9:d2:83:ac:52:22:7c:0c:06:72:
7a:85:2d:ed:4c:6c:e9:56:02:45:b0:d7:b4:1d:1c:
80:0d:b9:4f:b3:80:09:b5:e7:1c:0a:8a:05:bd:67:
2b:a6:81:57:52:b5:be:fd:e9:21:e1:47:75:4d:ae:
d5:5a:ed:b1:a8:c0:76:21:55:a6:88:9a:36:eb:cb:
fe:51:ec:20:d2:53:ed:95:3a:42:41:87:9a:e7:07:
8d:a5:01:91:7a:4a:09:d0:7e:37:22:f5:73:bb:a5:
f1:ef:5d:76:e2:84:aa:af:02:15:7c:31:19:bf:56:
56:32:29:70:47:ec:b4:35:6d:a5:b1:1b:ff:20:07:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:22:06:60:B1:06:F2:74:07:DD:12:7C:3A:B7:6D:DC:3D:C2:01
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f5:4e:45:f1:36:26:11:ea:f8:12:d2:40:bc:fd:6d:a7:5e:
f8:f3:92:a6:5a:26:1d:34:1e:0f:e2:c9:f9:8a:00:23:f6:a2:
e0:57:90:31:db:de:54:b7:50:65:b5:51:7d:56:45:65:60:a6:
b1:37:c3:ab:0e:29:6c:b4:ff:e6:89:f1:18:4f:f3:b4:11:0e:
05:69:cf:89:6c:0c:93:fa:6d:ea:96:cb:98:5b:c1:c5:93:7d:
ac:bd:bb:87:be:bf:a9:af:14:94:65:2c:2d:00:f2:f5:64:36:
19:0f:c1:55:fd:31:b3:f0:75:e2:39:83:4f:d7:4a:a2:6e:57:
89:15:2b:ae:b5:a0:76:55:b6:aa:7a:1e:f8:ed:2f:39:be:18:
7f:7d:e3:92:89:53:89:c9:d4:f5:cf:2a:4a:2c:64:95:e4:39:
1a:10:e8:26:4b:73:09:20:6b:81:f3:22:cb:a5:8f:32:aa:72:
7d:81:39:71:79:1e:8a:63:fe:03:29:ef:1d:95:89:b5:23:71:
c9:d1:4e:69:2c:c9:a0:d9:10:1c:48:75:cf:c5:34:1a:92:02:
7e:e7:7d:c1:70:e4:58:13:af:63:3d:22:dc:55:00:85:6e:f6:
bb:10:98:30:6b:e5:78:7e:99:b6:64:00:f8:5d:c4:43:2f:da:
8e:54:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:02 2026 by rpki-client