Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier: RL7rU6kgzoTEKCabn+P8vOBR9Av73AUFC2v5uBo3WG4=
Subject key identifier: 62:2D:0D:CA:28:DB:1A:1F:A3:35:DA:D1:93:3C:1B:15:DC:83:01:89
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer: /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial: 019EBAA213EB41F66C24CCEDD93DB46386CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number: A0
Signing time: Fri 12 Jun 2026 07:00:44 +0000
Manifest this update: Fri 12 Jun 2026 07:00:44 +0000
Manifest next update: Sat 13 Jun 2026 07:00:44 +0000
Files and hashes: 1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: 5RrdxWkUKiv/PefCPvKsJfw4k2wC8CpbaEWEl3/C6J4=)
2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:13:eb:41:f6:6c:24:cc:ed:d9:3d:b4:63:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Validity
Not Before: Jun 12 07:00:44 2026 GMT
Not After : Jun 13 07:00:44 2026 GMT
Subject: CN=622d0dca28db1a1fa335dad1933c1b15dc830189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5a:46:cc:fb:aa:30:87:95:d0:0b:7a:56:b5:
53:94:6b:49:e1:a0:c0:b2:5b:eb:c5:33:6d:df:ab:
e9:c2:e0:9c:75:82:1a:c0:f6:be:ed:bc:12:ab:56:
59:d8:00:81:4a:4c:97:55:e8:27:43:dc:5a:e1:9a:
eb:97:c6:fa:91:af:c1:84:f2:e9:37:fe:fc:ee:f0:
8d:6d:4a:cf:47:3c:8b:bf:ff:2f:05:6e:11:b0:43:
f3:5f:b1:34:80:32:92:f0:f6:71:ef:9d:d0:6c:c4:
95:81:ae:a0:7d:25:6d:02:ae:a3:50:63:b4:61:32:
19:83:3d:78:15:6b:3b:f9:57:36:c3:66:09:8f:78:
7c:e0:d7:d4:94:9e:58:68:55:ab:ec:f0:89:10:df:
d0:66:6e:f6:f5:53:a4:4c:9a:1c:d8:f2:1a:6a:bc:
6a:11:98:80:55:db:43:f3:83:f4:46:39:85:f9:ea:
1f:d3:da:fd:67:bb:4f:4c:76:fa:8a:b0:d6:01:d5:
99:37:b6:81:bd:ee:70:a4:bf:57:8e:3f:6e:ae:8d:
d9:92:6a:9e:a4:e0:43:a2:2b:f1:35:fa:c8:f2:63:
95:fa:fa:08:c1:61:20:33:6f:25:df:a8:fb:94:8d:
ac:2a:3c:72:da:cf:1d:e7:f8:29:ab:6e:b3:f6:1c:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:0D:CA:28:DB:1A:1F:A3:35:DA:D1:93:3C:1B:15:DC:83:01:89
X509v3 Authority Key Identifier:
keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0d:59:33:42:34:76:29:74:ad:6c:e3:ec:2d:c5:98:84:d1:
6f:56:27:00:1c:a0:64:cc:4c:5c:54:2f:0e:74:9a:79:f2:17:
3b:95:11:77:dd:87:ba:52:20:7b:ae:7b:1e:e6:0a:10:10:17:
d5:71:4f:23:98:4a:13:ec:83:d6:20:f6:2a:12:ca:24:73:45:
3d:9a:47:0f:2f:90:98:a4:03:cf:57:eb:db:36:cd:09:f0:04:
39:12:e1:53:2c:c9:91:b9:f6:10:26:1a:95:26:3f:5c:1b:bc:
ca:52:af:5f:dd:23:04:38:b1:53:8b:20:72:e5:0f:25:98:cf:
b7:6f:eb:4e:f9:66:f0:b7:7f:12:4b:14:13:17:c6:e9:90:8a:
cd:c4:c7:25:0f:cd:63:48:b0:56:e3:d5:35:51:62:b9:61:c3:
4a:5f:30:45:61:44:b8:f1:b8:4f:3e:21:a6:5d:62:41:75:a9:
1c:89:da:e4:a0:41:d7:08:2a:c3:33:07:f1:fe:8f:84:5e:95:
62:55:ce:dc:23:11:08:20:8c:5a:ab:d2:04:16:4b:26:a9:75:
40:e8:a3:b8:4b:e1:30:0f:d4:b6:f6:98:c4:29:1a:ff:8a:43:
c0:3a:f9:55:27:73:40:88:ba:b1:4f:99:9b:bd:ad:5c:b4:74:
1c:c4:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:00:38 2026 by rpki-client